Error: invalid_client: authorization_code grant type requires at least one redirect URL", on Apps Manager GUI after adding SCS server.

Products

• VMware Tanzu Spring Runtime

Issue/Introduction

A user may encounter an error similar to below screencap on Apps Manager GUI after adding a Spring Config Server.

• "Error: invalid_client: authorization_code grant type requires at least one redirect URL"

The UAA logs will show (400's) errors repeating, similar to below:

# Error Example:
{"http.method":"GET","http.path":"/uaa/userinfo","http.status_code":"403","error":"403"}}
---------------------
# The above error can be found in UAA VM logs. (/home/tempest-web/uaa/tomcat/logs/catalina.<DATE-OF-ISSUE>.log)
# Replace "<DATE-OF-ISSUE>" with the date the issue occurred.

Cause

The newly added Spring Cloud Server needs to refresh connection/config with UAA VM to gain trusted status/OAuth.  

Resolution

To resolve the issue:

 

1. Using bosh cli, ssh to the Spring Cloud Services deployment (starts with "p_spring-cloud-services-" )
2. Become root user (sudo su -)
3. Run the below (monit) command to re-establish proper/trusted connection.

monit restart scs-service-broker

Additional Information

If the issue is still present after performing the above, please open a support ticket with Tanzu by Broadcom.