| The ${keyType} key's size is ${size} bits which is not secur | exception | error | |
| Value must be ${articleFor(desired)} ${desired}, not ${artic | exception | error | java, jjwt, jwk, type-mismatch, key-parsing |
| Unable to determine JWA-standard Elliptic Curve for ${type}k | exception | error | jwt, jwe, ecdh, key-management, invalid-key |
| JWE Header epk value is not an Elliptic Curve Public JWK. Va | exception | error | jwe, jwk, ecdh, invalid-key |
| The ${keyType} key's size (ECParameterSpec order) is ${size} | exception | error | |
| The ${keyType} key's size is ${size} bits which is not secur | exception | error | |
| Invalid ECDSA signature format. | exception | error | jwt, ecdsa, signature, verification, security |
| ${curveId} keys may not be used with ECDH-ES key agreement a | exception | error | jwt, jwe, ecdh, ed25519, rfc8037, key-management |
| Unable to deserialize: ${t.getMessage()} | exception | error | deserialization, json, jwt |
| Unsupported signature algorithm '${value}' | exception | error | |
| The provided Elliptic Curve ${keyType} key size (aka order b | exception | error | jwt, ecdsa, invalid-key, key-size |
| Unexpected content JWS. | exception | error | java, jwt, jjwt, jws, unsupported-jwt |
| wrap(nsa, jcaName, specifiedProvider, null) | exception | error | jca, crypto, nosuchalgorithm, jwt |
| Unexpected content JWE. | exception | error | java, jwt, jjwt, jwe, unsupported-jwt |
| Unable to decode input: ${e.getMessage()} | exception | error | decoding, base64, jwt |
| Unexpected unsecured Claims JWT. | exception | error | java, jwt, jjwt, unsupported-jwt, unsecured-token |
| Unable to serialize object of type ${className}: ${e.getMess | exception | error | serialization, json, jwt |
| ${name()} is missing required ${param} value. | validation | error | jwt, jwk, missing-parameter, validation |
| ${Class} callback execution failed: ${t.getMessage()} | exception | error | jce, crypto, provider, wrapped-exception |
| JWA Base64urlUInt values MUST be >= 0 (non-negative) per the | validation | error | jwt, jwa, biginteger, base64url |
| Protected Header crit set references unsupported header name | exception | error | jwt, jws, crit-header, unsupported-extension |
| 'unsecuredDecompression' is only relevant if 'unsecured' is | exception | error | jwt, parser-config, compression, security |
| The ${keyType} key's algorithm '${alg}' does not equal a val | exception | error | |
| Cannot cast ${value.getClass().getName()} to ${COLLECTION_TY | validation | error | classcast, collection, type-mismatch |
| ${String.format(MALFORMED_COMPLEX_ERROR, this.name, this.nam | exception | error | jwt, json, deserialization, security |
| Invalid RSA key algorithm name. | validation | error | java, jjwt, rsa, invalid-key, jwe |
| Invalid Gson instance - it has not been registered with the | exception | error | java, jjwt, gson, serialization, configuration |
| The ${keyType} key's algorithm cannot be null. | exception | error | |
| Value must be a positive integer. | validation | error | validation, integer, value-range |
| Illegal ${name} character: '${c}' | exception | error | base64, decoding, malformed-input |
| Unable to verify Elliptic Curve signature using provided ECP | exception | error | jwt, ecdsa, signature-verification, jca |
| Unable to verify JWS signature: the parser has encountered a | exception | error | jwt, jws, detached-payload, unencoded-payload, signature |
| JWT early by <differenceMillis> milliseconds before <nbfVal> | exception | error | jwt, clock-skew, token-validation, timing |
| The JWT header references compression algorithm '%s', but pa | exception | error | compression, dos, unsecured-jwt, unencoded-jws |
| Unable to derive key | exception | error | jwt, jwe, key-derivation, security |
| Invalid ${id} ASN.1 encoding: ${t.getMessage()} | exception | error | asn1, ed25519, key-encoding, invalid-key |
| Provided signature is ${actual} but ${id} signatures must be | exception | error | jwt, ecdsa, signature-format, rfc7518 |
| Both 'content' and 'claims' cannot be specified. Choose eith | exception | error | jwt, builder, api-misuse |
| JWE Header epk value does not represent a point on the expec | exception | error | jwe, ecdh, curve, invalid-key |
| Unexpected Claims JWS. | exception | error | java, jwt, jjwt, jws, claims, unsupported-jwt |
| JWT Claim '<expectedClaimName>' was expected to be a Date, b | exception | error | jwt, claims-validation, date-format, type-mismatch |
| Unable to encode input: ${e.getMessage()} | exception | error | encoding, serialization, jwt |
| Unexpected Claims JWE. | exception | error | java, jwt, jjwt, jwe, claims, unsupported-jwt |
| String value is not a JWT NumericDate, nor is it ISO-8601-fo | validation | error | jwt, date-parsing, illegal-argument |
| The ${keyType} key's encoded bytes cannot be null. | exception | error | |
| Unable to load class named [${fqcn}] from the thread context | exception | critical | classpath, reflection, jwt, dependency |
| Not intended to be called. | exception | error | jwt, unsupported-operation, internal |
| Cannot create Date from '' value ''. Cause: | exception | error | jwt, claims, date-conversion |
| Cannot obtain required encoded bytes from key [${KeysBridge. | exception | error | key, encoded-bytes, invalidkey, hsm, jsonwebtoken |
| Unsupported ${id} ${algType} algorithm... is disabled (no ${ | exception | error | jwt, unsupported-algorithm, parser-config |
| JWK Set keys[${i}]: ${e.getMessage()} | exception | error | jwk, jwks, unsupported-key, jsonwebtoken |
| JWK Set map keys must be Strings. Encountered key '${key}' o | exception | error | jwk, map-validation, illegal-argument, jsonwebtoken |
| JWS header does not contain a required 'alg' (Algorithm) hea | exception | error | jwt, jws, malformed-token, missing-header |
| Ciphertext decryption failed: Authentication tag verificatio | exception | error | jwe, aead, gcm, authentication-tag, tampering |
| ${msg} | validation | error | java, assertion, empty-array, key-material |
| Invalid ${getName()} ${param} value: ${rawValue}. ${e.getMes | validation | error | |
| ${familyName} ${keyType} keys must be ECKey instances. | exception | error | |
| Unable to invoke class method ${fqcn}#${methodName}. Ensure | exception | error | reflection, classpath, static-method |
| mark/reset not supported | exception | error | |
| wrap(e, jcaName, specifiedProvider, null) | exception | error | jca, crypto, wrapped-exception, jwt |
| RSA JWK 'oth' (Other Prime Info) must contain map elements o | exception | error | jwk, rsa, malformed-key, json |
| Value cannot be represented as a java.lang.Integer. | validation | error | type-conversion, integer, illegal-argument |
| Cannot decode input String. Cause: ${e.getMessage()} | validation | error | |
| ${msgPrefix}${type} key must be an instance of ${clazz.getNa | exception | error | keypair, type-mismatch, cryptography, jsonwebtoken |
| Unable to find an implementation for ${spi} using java.util. | exception | critical | classpath, dependency, serviceloader |
| Unable to ${codecName}-decode ${name}: ${t.getMessage()} | validation | error | base64url, decoding, jwt, io |
| Unsupported signature algorithm '${alg}': ${e.getMessage()} | exception | error | jwt, signature, unsupported-algorithm |
| The 'none' algorithm cannot be used to create signatures. | exception | error | jwt, security, signature |
| Unable to determine a suitable MAC or Signature algorithm fo | exception | error | jwt, signing, key, hsm |
| Values must be either String or ${type.getName()} instances. | validation | error | type-mismatch, conversion, argument-validation |
| Cannot cast ${value.getClass().getName()} to ${COLLECTION_TY | validation | error | classcast, type-mismatch, jwt-claims |
| ${message} | validation | error | java, jjwt, illegal-argument, assertion, input-validation |
| Missing expected '<expectedValue>' value in '<expectedClaimN | exception | error | jwt, claims-validation, audience-mismatch |
| Unable to compute ${getId()} signature with JCA algorithm '$ | exception | error | signature, jca, crypto, jjwt |
| Unexpected unsecured content JWT. | exception | error | |
| Expected <expectedClaimName> claim to be: <expectedClaimValu | exception | error | jwt, claims-validation, value-mismatch |
| 'b64' Unencoded payload option has been specified, but paylo | exception | error | jwt, jws, empty-payload |
| constant [%s] does not exist in enum type %s | exception | error | java, enum, argument-validation |
| The JWT header references compression algorithm '%s', but pa | exception | error | compression, dos, unencoded-jws, signing-key-resolver |
| Invalid claims: + t.getMessage() | exception | error | claims, malformed-jwt, type-mismatch, rfc7519 |
| Compact JWE string represents an encrypted key, but the key | exception | error | jwe, malformed-jwt, base64 |
| Array Size=${array.length}, offset=${offset}, length=${lengt | exception | error | |
| ${message}Object of class [${objClassName}] must be an insta | exception | error | jwt, type-mismatch, assertion |
| The JWE header references key management algorithm '%s' but | exception | error | jwe, jwt, missing-auth-tag, malformed-token |
| Unable to instantiate instance with constructor [${ctor}] | exception | error | reflection, constructor, instantiation |
| ${String.format(PUB_EXPONENT_EX_MSG, KeysBridge.toString(key | exception | error | rsa, jwk, unsupported-key, crt |
| Both 'keyLocator' and a 'verifyWith' key cannot be configure | exception | error | jwt, parser-config, conflicting-options |
| JWEs do not support key management alg header value 'none' p | exception | error | jwe, jwt, invalid-alg, malformed-token |
| PrivateKeys may not be used to verify digital signatures. Pr | exception | error | jwt, key-management, security, asymmetric-crypto |
| Reflection operation failed. This is likely due to an intern | exception | error | reflection, internal-error, invariant |
| ${familyName} ${keyType} keys must be SecretKey instances. | exception | error | |
| The parsed JWT indicates it was signed with the '${algId}' s | exception | error | jwt, algorithm-confusion, security |
| The specified Elliptic Curve signing key is not strong enoug | exception | error | |
| Invalid ECDSA signature format | exception | error | jwt, ecdsa, der, signature-format |
| Unsecured JWSs (those with an alg header value of 'none') ar | exception | error | jwt, jws, unsecured, alg-none, security |
| numBytes argument must be >= 0 | validation | error | random, bytes, argument-validation |
| Unable to convert Base64 String '${s}' to X509Certificate in | exception | error | x509, base64, certificate, jwt-header, jsonwebtoken |
| Invalid protected header: ${e.getMessage()} | exception | error | jwt, malformed-header, json |
| The 'NONE' signature algorithm does not support cryptographi | exception | error | |
| ${getName()} instance is immutable and may not be modified. | exception | error | jwt, immutability, unsupported-operation |