crewAIInc/crewAI · error · Exception

JWKS or key processing error: {e!s}

Error message

JWKS or key processing error: {e!s}

What it means

Error "JWKS or key processing error: {e!s}" thrown in crewAIInc/crewAI.

Source

Thrown at lib/crewai-core/src/crewai_core/auth/utils.py:69

            },
        )

    except jwt.ExpiredSignatureError as e:
        raise Exception("Token has expired.") from e
    except jwt.InvalidAudienceError as e:
        actual_audience = _unverified_decoded_token.get("aud", "[no audience found]")
        raise Exception(
            f"Invalid token audience. Got: '{actual_audience}'. Expected: '{audience}'"
        ) from e
    except jwt.InvalidIssuerError as e:
        actual_issuer = _unverified_decoded_token.get("iss", "[no issuer found]")
        raise Exception(
            f"Invalid token issuer. Got: '{actual_issuer}'. Expected: '{issuer}'"
        ) from e
    except jwt.MissingRequiredClaimError as e:
        raise Exception(f"Token is missing required claims: {e!s}") from e
    except jwt.exceptions.PyJWKClientError as e:
        raise Exception(f"JWKS or key processing error: {e!s}") from e
    except jwt.InvalidTokenError as e:
        raise Exception(f"Invalid token: {e!s}") from e

View on GitHub (pinned to 754d7323be)

Solutions

1. Verify the JWKS URL is reachable and returns valid keys.
2. Check network access to the identity provider's JWKS endpoint.

When it happens

Trigger: Thrown at lib/crewai-core/src/crewai_core/auth/utils.py:69 when the library encounters an invalid state.

Common situations: Occurs when the JWKS could not be fetched or the signing key could not be processed. Check network access to the JWKS endpoint and that the provider publishes valid keys.

AI-assisted analysis of crewAIInc/crewAI@754d7323be (2026-08-15). Data as JSON: /api/errors/a22998f33423ce67. Report an issue: GitHub.