{"record":{"id":"a22998f33423ce67","repo":"crewAIInc/crewAI","slug":"jwks-or-key-processing-error-e-s","errorCode":null,"errorMessage":"JWKS or key processing error: {e!s}","messagePattern":"JWKS or key processing error: (.+?)","errorType":"exception","errorClass":"Exception","httpStatus":null,"severity":"error","filePath":"lib/crewai-core/src/crewai_core/auth/utils.py","lineNumber":69,"sourceCode":"            },\n        )\n\n    except jwt.ExpiredSignatureError as e:\n        raise Exception(\"Token has expired.\") from e\n    except jwt.InvalidAudienceError as e:\n        actual_audience = _unverified_decoded_token.get(\"aud\", \"[no audience found]\")\n        raise Exception(\n            f\"Invalid token audience. Got: '{actual_audience}'. Expected: '{audience}'\"\n        ) from e\n    except jwt.InvalidIssuerError as e:\n        actual_issuer = _unverified_decoded_token.get(\"iss\", \"[no issuer found]\")\n        raise Exception(\n            f\"Invalid token issuer. Got: '{actual_issuer}'. Expected: '{issuer}'\"\n        ) from e\n    except jwt.MissingRequiredClaimError as e:\n        raise Exception(f\"Token is missing required claims: {e!s}\") from e\n    except jwt.exceptions.PyJWKClientError as e:\n        raise Exception(f\"JWKS or key processing error: {e!s}\") from e\n    except jwt.InvalidTokenError as e:\n        raise Exception(f\"Invalid token: {e!s}\") from e\n","sourceCodeStart":51,"sourceCodeEnd":72,"githubUrl":"https://github.com/crewAIInc/crewAI/blob/754d7323beb2fd042e33444a115ea2d5a47193f0/lib/crewai-core/src/crewai_core/auth/utils.py#L51-L72","documentation":"Error \"JWKS or key processing error: {e!s}\" thrown in crewAIInc/crewAI.","triggerScenarios":"Thrown at lib/crewai-core/src/crewai_core/auth/utils.py:69 when the library encounters an invalid state.","commonSituations":"Occurs when the JWKS could not be fetched or the signing key could not be processed. Check network access to the JWKS endpoint and that the provider publishes valid keys.","solutions":["Verify the JWKS URL is reachable and returns valid keys.","Check network access to the identity provider's JWKS endpoint."],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"754d7323beb2fd042e33444a115ea2d5a47193f0","analyzedAt":"2026-08-15T04:06:56.746Z","schemaVersion":2},"datasetVersion":"2026-08-15T22:17:37.221Z"}