{"record":{"id":"25f57112460898fa","repo":"crewAIInc/crewAI","slug":"token-is-missing-required-claims-e-s","errorCode":null,"errorMessage":"Token is missing required claims: {e!s}","messagePattern":"Token is missing required claims: (.+?)","errorType":"exception","errorClass":"Exception","httpStatus":null,"severity":"error","filePath":"lib/crewai-core/src/crewai_core/auth/utils.py","lineNumber":67,"sourceCode":"                \"verify_iat\": True,\n                \"require\": [\"exp\", \"iat\", \"iss\", \"aud\", \"sub\"],\n            },\n        )\n\n    except jwt.ExpiredSignatureError as e:\n        raise Exception(\"Token has expired.\") from e\n    except jwt.InvalidAudienceError as e:\n        actual_audience = _unverified_decoded_token.get(\"aud\", \"[no audience found]\")\n        raise Exception(\n            f\"Invalid token audience. Got: '{actual_audience}'. Expected: '{audience}'\"\n        ) from e\n    except jwt.InvalidIssuerError as e:\n        actual_issuer = _unverified_decoded_token.get(\"iss\", \"[no issuer found]\")\n        raise Exception(\n            f\"Invalid token issuer. Got: '{actual_issuer}'. Expected: '{issuer}'\"\n        ) from e\n    except jwt.MissingRequiredClaimError as e:\n        raise Exception(f\"Token is missing required claims: {e!s}\") from e\n    except jwt.exceptions.PyJWKClientError as e:\n        raise Exception(f\"JWKS or key processing error: {e!s}\") from e\n    except jwt.InvalidTokenError as e:\n        raise Exception(f\"Invalid token: {e!s}\") from e\n","sourceCodeStart":49,"sourceCodeEnd":72,"githubUrl":"https://github.com/crewAIInc/crewAI/blob/754d7323beb2fd042e33444a115ea2d5a47193f0/lib/crewai-core/src/crewai_core/auth/utils.py#L49-L72","documentation":"Error \"Token is missing required claims: {e!s}\" thrown in crewAIInc/crewAI.","triggerScenarios":"Thrown at lib/crewai-core/src/crewai_core/auth/utils.py:67 when the library encounters an invalid state.","commonSituations":"Occurs when the token lacks claims required for validation (e.g. exp, iss, aud). Ensure the identity provider issues tokens containing all required claims.","solutions":["Ensure the token includes all required claims (exp, iat, aud, iss, sub).","Check the identity provider configuration to include the missing claims."],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"754d7323beb2fd042e33444a115ea2d5a47193f0","analyzedAt":"2026-08-15T04:06:56.746Z","schemaVersion":2},"datasetVersion":"2026-08-15T17:31:12.345Z"}