An error occurred while attempting to decode the Jwt: Couldn't retrieve remote JWK set: org.springframework.web.client.ResourceAccessException: I/O error on GET request for "https://dev-92408568.okta.com/oauth2/default/v1/keys"

[EugenDev]

Hello okta team, I have an error when I want to call my api, I have a token that is generated by the react frontend.

for my backend I use the sample you put on your documentation samples-java-spring/resource-server at master · okta/samples-java-spring · GitHub.

and when I call my api I have an error which is created on its backend which is the following

Couldn’t retrieve remote JWK set: org.springframework.web.client.ResourceAccessException: I/O error on GET request for “https://dev-92408568.okta.com/oauth2/default/v1/keys”: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target; nested exception is javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

How to solve this problem? Or is there a way to fix this error?

[andrea]

Hmm… I don’t see anything wrong with the /keys endpoint you are using. It sounds like your server isn’t able to reach the /keys endpoint. Is your Spring Server able to hit Okta at all?

[EugenDev]

Hello, I solved this problem, I added the certificate on my java keystore, it is fine now