Error 300 in OAuth Manager - Client(_id) value could not be persisted

Products

• CA API Gateway

Issue/Introduction

When trying to register a new OTK client, the OAuth manager shows the error:

{ "error":"invalid_request", "error_description":"Client(_id) value could not be persisted" }

 

The audit log shows the error message:

error.code: '300', error.msg: {

"error":"invalid_request",

"error_description":"Client(_id) value could not be persisted"

}

 

Environment

API Gateway 10.X

Resolution

1. From the otk_db, check the index status 

SELECT TABLE_NAME, INDEX_NAME, STATUS, LAST_ANALIZED
FROM otk_db;

TABLE_NAME                INDEX_NAME                                   STATUS             LAST_ANALIZED 

OAUTH_ID_TOKEN       OAIDT_IDX_AZP                               UNUSABLE         ${not_Today}

OAUTH_ID_TOKEN       OAIDT_IDX_EXPIRATION                 UNUSABLE        ${not_Today}

OAUTH_CLIENTE_KEY   OCK_IDX_CLIENTIDENT                UNUSABLE        ${not_Today}

OAUTH_ID_TOKEN       PK_MAG_ID_TOKEN                         UNUSABLE        ${not_Today}

OAUTH_CLIENT_KEY     SYS_COO7744                                UNUSABLE        ${not_Today}

 

2. Take a DB backup. (Always a good practice before updating any entry in the otk_db or ssg database)

3. Stop the ssg service from ssg Menu [option 2 then option 7) Manage CA API Gateway status ]

4. On the database side, use otk_db , rebuild the affected index(es) using the command below as an example:

alter index <index name> rebuild;

For example, the index OAIDT_IDX_AZP  would be rebuilt using:

alter index OAIDT_IDX_AZP  rebuild;

5. Start the ssg service from ssg Menu [option 2 then option 7) Manage CA API Gateway status ]

 

6. Check the Index again to confirm it has been fixed:

SELECT TABLE_NAME, INDEX_NAME, STATUS , LAST_ANALIZED FROM otk_db; 

TABLE_NAME                INDEX_NAME                                   STATUS        LAST_ANALIZED

OAUTH_ID_TOKEN       OAIDT_IDX_AZP                              VALID            ${TODAY}

OAUTH_ID_TOKEN       OAIDT_IDX_EXPIRATION                VALID           ${TODAY}

OAUTH_CLIENTE_KEY   OCK_IDX_CLIENTIDENT              VALID            ${TODAY}

OAUTH_ID_TOKEN       PK_MAG_ID_TOKEN                       VALID            ${TODAY}

OAUTH_CLIENT_KEY     SYS_COO7744                              VALID            ${TODAY}