JWT token issuer mismatch when calling CMA API remotely
Remote API calls can fail JWT validation when the Auth Server issues tokens with a localhost issuer.
Symptom: API calls return
the
WWW-Authenticate: Bearer error="invalid_token",
error_description="The iss claim is not
valid"
error.
Cause: The Auth Server sets iss: http://localhost:<port> in the JWT. When you call the API from a different host, CMA Master rejects the token because the issuer does not match.
Run API calls on the
CMA Master host itself
using
SSH so
localhost matches the issuer encoded in the token.
