Spring Cloud Data Flow servers intermittently return 401 unauthorized failures

Products

• Support Only for Spring

Issue/Introduction

The user is having problems with intermittent authorization failures to Spring Cloud Data Flow instances. The application goes into a state where all requests are rejected with a 401 Unauthorized error. The problem persists until an application restart.

Versions affected:

SCDF Tile version 1.7.x, 1.8.0
Spring-cloud-dataflow-rest-client: 2.3.x to 2.5.2

Environment

Product Version: Other

Resolution

The solution is to upgrade SCDF Rest Client to v2.5.3 or higher.

There is a bug in SCDF Rest Client such that the OAuth2 token not refreshed. This will lead to 401 unauthorized failures once the token is expired. The bug is on the SCDF client-side, not the server.

There are different ways to use and interact with SCDF, GUI, API, Client library, or Shell. Upgrading the SCDF tile upgrades the client version within the UI. You may need to update client libraries used by applications or SCDF shell version if they contain a client version with this bug.

Affected versions of SCDF Rest-client: 2.3.x to 2.5.2

See SCDF release notes v1.8.1 -> "Fixed a problem with OAuth 2.0 refresh token expiration"

See GitHub PR: -> "Make Sure OAuth2 token is refreshed as needed"