Keycloak Auth Exception

Hey platform
I am trying to upgrade paas keycloak to v25. I modified how claims were stored, to use roles instead of attributes. That works, I can successfully read tenants and applications fine. In my ITs however, when I try to upload npl zip file, I get an exception back from the engine:

com.noumenadigital.platform.client.auth.AuthorizationFailedAuthTokenException: Authorization exception: Account is not fully set up\n\tat 

com.noumenadigital.platform.client.auth.AuthorizationService.tryAuth(AuthTokenService.kt:53)\n\tat 

com.noumenadigital.platform.client.auth.AuthorizationService.grantUserSync(AuthTokenService.kt:66)

Any ideas what it could be that is missing in order to do app things? The same admin user can do various other things, like create and read apps.

I also must say that we are on platform version 2024.1.3 so if upgrading is needed… lmk :sweat_smile:

Thanks

First of all, yes please upgrade the platform :smiley: It is likely not the cause of the problem though.

From your update it seems like there is some miss-configured user. Maybe something like this?

In your case, the users might be different ones, as there are

  • app users for querying protocols, e.g., read tenants and applications
  • admin users for management actions, e.g., deploy code

Given that you can read protocols before deploying, I will assume you have two+ engines in your setup, and the issue might lie in the second one.

Do you have admin users of that second app that do not have first name, last name or email?

Yea good spot, thanks Jean