crewAIInc/crewAI · error · Exception

Token is missing required claims: {e!s}

Error message

Token is missing required claims: {e!s}

What it means

Error "Token is missing required claims: {e!s}" thrown in crewAIInc/crewAI.

Source

Thrown at lib/crewai-core/src/crewai_core/auth/utils.py:67

                "verify_iat": True,
                "require": ["exp", "iat", "iss", "aud", "sub"],
            },
        )

    except jwt.ExpiredSignatureError as e:
        raise Exception("Token has expired.") from e
    except jwt.InvalidAudienceError as e:
        actual_audience = _unverified_decoded_token.get("aud", "[no audience found]")
        raise Exception(
            f"Invalid token audience. Got: '{actual_audience}'. Expected: '{audience}'"
        ) from e
    except jwt.InvalidIssuerError as e:
        actual_issuer = _unverified_decoded_token.get("iss", "[no issuer found]")
        raise Exception(
            f"Invalid token issuer. Got: '{actual_issuer}'. Expected: '{issuer}'"
        ) from e
    except jwt.MissingRequiredClaimError as e:
        raise Exception(f"Token is missing required claims: {e!s}") from e
    except jwt.exceptions.PyJWKClientError as e:
        raise Exception(f"JWKS or key processing error: {e!s}") from e
    except jwt.InvalidTokenError as e:
        raise Exception(f"Invalid token: {e!s}") from e

View on GitHub (pinned to 754d7323be)

Solutions

1. Ensure the token includes all required claims (exp, iat, aud, iss, sub).
2. Check the identity provider configuration to include the missing claims.

When it happens

Trigger: Thrown at lib/crewai-core/src/crewai_core/auth/utils.py:67 when the library encounters an invalid state.

Common situations: Occurs when the token lacks claims required for validation (e.g. exp, iss, aud). Ensure the identity provider issues tokens containing all required claims.

AI-assisted analysis of crewAIInc/crewAI@754d7323be (2026-08-15). Data as JSON: /api/errors/25f57112460898fa. Report an issue: GitHub.