Not active oauth tokens after reboot
Hi,
I have an oauth profile what generates opaque oauth tokens with long lifetimes.
I originally thought the tokens where invalidated after an upgrade or even a failover. Now after testing they are indentified as "Not active" in the APM log. The tokens work just right after generating them.
Also, despite the long lifetime setup in the oauth profile, the tmsh commands lists the tokens with same dates on issue and expiry, for both access and refresh tokens. So the tokens seem to be generated with wrong expiry dates.
I've noticed this in the production cluster, and am able to test in a standalone non-production device.
I have several cases escalated with F5 support but I have no real significant replies and tests to do since weeks. So I am unfortunately asking here to see if anybody has ideas to test or troubleshoot.
Thanks.
Lloyd