HTTP 500 error calling /token endpoint after upgrade to 3.2.1.

Products

• VIP Authentication Hub

Issue/Introduction

Getting HTTP 500 error as a result of calling VIP Authentication Hub /token endpoint. This started happening after upgrade to 3.2.1.

The following error message shown in azserver's pod log

{"timestamp":"2024-09-30T14:51:04.114507Z","type":"log","level":"error","thread":"https-jsse-nio-8085-exec-1","msg":"Encountered exception during the transaction: Cannot invoke \\\"com.broadcom.layer7authentication.core.dto.TokenGenDTO.getClientId()\\\" because \\\"tokenGenDTO\\\" is null","api":"/oauth2/v1/token","clientIp":"xx.xx.xx.xx","clientTxnId":" ","dt.span_id":"637bb80aab6b6e26","dt.trace_id":"ac7b2c311fc1ce59e231548c4543914a","dt.trace_sampled":"true","host":"xxxxxxxx","httpMethod":"POST","issuerUrl":"https://xxxxxxx/xx","method":"POST","relVersion":"1.0","service":"azserver","tid":"42edff15-9e93-490b-bce4-1eeafb91c898","tname":"default","txnId":"45a99b67-1cec-43e1-8215-ee7b7f794d83","userAgent":null,"userIp":"xx.xx.xx.xx","throwable":"java.lang.NullPointerException: Cannot invoke \"com.broadcom.layer7authentication.core.dto.TokenGenDTO.getClientId()\" because \"tokenGenDTO\" is null\n\tat com.broadcom.layer7authentication.core.service.oauth2.RefreshTokenService.getRefreshToken(RefreshTokenService.java:134)\n\tat com.broadcom.layer7authentication.oidcprovider.service.TokenService.processTokenRequestWithRefreshToken(TokenService.java:792)\n\tat
...

Environment

VIP Authentication Hub 3.2.1

Cause

VIP Authentication Hub 3.2.1 fails to process Refresh Tokens that were generated previously on previous version, such as VIP Authentication Hub 2.2.6

Resolution

Upgrade VIP Authentication Hub to 3.2.2 or later version