JTI Validation entry with id 'accesstoken-7503b000-fcd8-438e-a0ac-c76694b6756c' is expired #544

mxar-intracom-telecom · 2025-10-30T08:17:14Z

mxar-intracom-telecom
Oct 30, 2025

Hi all,

I have deployed the Minimum Viable Dataspace (MVD) in a Linux environment. Initially, the MVD operated without any issues. However, after a few weeks, the following error messages appeared:

In the consumer-identityhub the following message is continually displayed:

WARNING 2025-10-30T07:26:11.828112717 JTI Validation entry with id 'accesstoken-7503b000-fcd8-438e-a0ac-c76694b6756c' is expired
WARNING 2025-10-30T07:26:29.572117121 JTI Validation entry with id 'accesstoken-ce46bd21-ac4a-4b28-b4ac-d43836107ad4' is expired
WARNING 2025-10-30T07:26:36.396340248 JTI Validation entry with id 'accesstoken-f3a6f26c-c541-42d6-88d5-77b41f25ceaa' is expired
WARNING 2025-10-30T07:27:00.574569119 JTI Validation entry with id 'accesstoken-ce46bd21-ac4a-4b28-b4ac-d43836107ad4' is expired
WARNING 2025-10-30T07:27:32.575145914 JTI Validation entry with id 'accesstoken-ce46bd21-ac4a-4b28-b4ac-d43836107ad4' is expired
WARNING 2025-10-30T07:28:06.577922692 JTI Validation entry with id 'accesstoken-ce46bd21-ac4a-4b28-b4ac-d43836107ad4' is expired
WARNING 2025-10-30T07:28:44.58836785 JTI Validation entry with id 'accesstoken-ce46bd21-ac4a-4b28-b4ac-d43836107ad4' is expired
......

In provider-catalog-server the following error message is displayed:
DEBUG 2025-10-30T07:35:56.806433272 DSP: Incoming CatalogRequestMessage for class org.eclipse.edc.connector.controlplane.catalog.spi.Catalog process
DEBUG 2025-10-30T07:35:56.807144044 Unauthorized: Token has expired (exp)
DEBUG 2025-10-30T07:35:56.807169968 DSP: Service call failed: Unauthorized
DEBUG 2025-10-30T07:35:56.808548064 DSP: Incoming CatalogRequestMessage for class org.eclipse.edc.connector.controlplane.catalog.spi.Catalog process

Also In provider-qna-controlplane , the following error messages is displayed:

DEBUG 2025-10-30T07:40:22.945046053 DSP: Incoming CatalogRequestMessage for class org.eclipse.edc.connector.controlplane.catalog.spi.Catalog process
SEVERE 2025-10-30T07:40:23.950390504 JerseyExtension: Unexpected exception caught
org.eclipse.edc.spi.persistence.EdcPersistenceException: ERROR: duplicate key value violates unique constraint "edc_jti_validation_pkey"
Detail: Key (token_id)=(7ddcdccf-2f86-48a1-b1ee-4a74d199e111) already exists.
at org.eclipse.edc.sql.SqlQueryExecutor.execute(SqlQueryExecutor.java:59)
at org.eclipse.edc.jtivalidation.store.sql.SqlJtiValidationStore.lambda$storeEntry$0(SqlJtiValidationStore.java:55)
at org.eclipse.edc.transaction.local.LocalTransactionContext.execute(LocalTransactionContext.java:74)
at org.eclipse.edc.jtivalidation.store.sql.SqlJtiValidationStore.storeEntry(SqlJtiValidationStore.java:48)
at org.eclipse.edc.verifiablecredentials.jwt.rules.JtiValidationRule.checkRule(JtiValidationRule.java:48)
at org.eclipse.edc.token.TokenValidationServiceImpl.lambda$validate$2(TokenValidationServiceImpl.java:65)
at java.base/java.util.stream.ReferencePipeline$3$1.accept(Unknown Source)
at java.base/java.util.ArrayList$ArrayListSpliterator.forEachRemaining(Unknown Source)
at java.base/java.util.stream.AbstractPipeline.copyInto(Unknown Source)
at java.base/java.util.stream.AbstractPipeline.wrapAndCopyInto(Unknown Source)
at java.base/java.util.stream.ReduceOps$ReduceOp.evaluateSequential(Unknown Source)
at java.base/java.util.stream.AbstractPipeline.evaluate(Unknown Source)
at java.base/java.util.stream.ReferencePipeline.reduce(Unknown Source)
at org.eclipse.edc.token.TokenValidationServiceImpl.validate(TokenValidationServiceImpl.java:66)
at org.eclipse.edc.iam.identitytrust.core.validation.SelfIssueIdTokenValidationAction.apply(SelfIssueIdTokenValidationAction.java:53)
at org.eclipse.edc.iam.identitytrust.core.validation.SelfIssueIdTokenValidationAction.apply(SelfIssueIdTokenValidationAction.java:33)
at org.eclipse.edc.iam.identitytrust.service.IdentityAndTrustService.verifyJwtToken(IdentityAndTrustService.java:138)
at org.eclipse.edc.connector.controlplane.services.protocol.ProtocolTokenValidatorImpl.verify(ProtocolTokenValidatorImpl.java:66)
at org.eclipse.edc.connector.controlplane.services.spi.protocol.ProtocolTokenValidator.verify(ProtocolTokenValidator.java:42)
at org.eclipse.edc.connector.controlplane.services.catalog.CatalogProtocolServiceImpl.lambda$getCatalog$1(CatalogProtocolServiceImpl.java:60)
at org.eclipse.edc.transaction.local.LocalTransactionContext.execute(LocalTransactionContext.java:74)
at org.eclipse.edc.connector.controlplane.services.catalog.CatalogProtocolServiceImpl.getCatalog(CatalogProtocolServiceImpl.java:60)
at org.eclipse.edc.protocol.dsp.http.message.DspRequestHandlerImpl.createResource(DspRequestHandlerImpl.java:132)
at org.eclipse.edc.protocol.dsp.catalog.http.api.controller.BaseDspCatalogApiController.requestCatalog(BaseDspCatalogApiController.java:84)
at java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(Unknown Source)
at java.base/java.lang.reflect.Method.invoke(Unknown Source)
at org.glassfish.jersey.server.model.internal.ResourceMethodInvocationHandlerFactory.lambda$static$0(ResourceMethodInvocationHandlerFactory.java:52)
at org.glassfish.jersey.server.model.internal.AbstractJavaResourceMethodDispatcher$1.run(AbstractJavaResourceMethodDispatcher.java:146)
at org.glassfish.jersey.server.model.internal.AbstractJavaResourceMethodDispatcher.invoke(AbstractJavaResourceMethodDispatcher.java:189)
at org.glassfish.jersey.server.model.internal.JavaResourceMethodDispatcherProvider$ResponseOutInvoker.doDispatch(JavaResourceMethodDispatcherProvider.java:176)
at org.glassfish.jersey.server.model.internal.AbstractJavaResourceMethodDispatcher.dispatch(AbstractJavaResourceMethodDispatcher.java:93)
at org.glassfish.jersey.server.model.ResourceMethodInvoker.invoke(ResourceMethodInvoker.java:478)
at org.glassfish.jersey.server.model.ResourceMethodInvoker.apply(ResourceMethodInvoker.java:400)
at org.glassfish.jersey.server.model.ResourceMethodInvoker.apply(ResourceMethodInvoker.java:81)
at org.glassfish.jersey.server.ServerRuntime$1.run(ServerRuntime.java:274)
at org.glassfish.jersey.internal.Errors$1.call(Errors.java:248)
at org.glassfish.jersey.internal.Errors$1.call(Errors.java:244)
at org.glassfish.jersey.internal.Errors.process(Errors.java:292)
at org.glassfish.jersey.internal.Errors.process(Errors.java:274)
at org.glassfish.jersey.internal.Errors.process(Errors.java:244)
at org.glassfish.jersey.process.internal.RequestScope.runInScope(RequestScope.java:266)
at org.glassfish.jersey.server.ServerRuntime.process(ServerRuntime.java:253)
at org.glassfish.jersey.server.ApplicationHandler.handle(ApplicationHandler.java:696)
at org.glassfish.jersey.servlet.WebComponent.serviceImpl(WebComponent.java:397)
at org.glassfish.jersey.servlet.WebComponent.service(WebComponent.java:349)
at org.glassfish.jersey.servlet.ServletContainer.service(ServletContainer.java:358)
at org.glassfish.jersey.servlet.ServletContainer.service(ServletContainer.java:312)
at org.glassfish.jersey.servlet.ServletContainer.service(ServletContainer.java:205)
at org.eclipse.jetty.ee10.servlet.ServletHolder.handle(ServletHolder.java:736)
at org.eclipse.jetty.ee10.servlet.ServletHandler$ChainEnd.doFilter(ServletHandler.java:1622)
at org.eclipse.jetty.ee10.servlet.ServletHandler$MappedServlet.handle(ServletHandler.java:1555)
at org.eclipse.jetty.ee10.servlet.ServletChannel.dispatch(ServletChannel.java:823)
at org.eclipse.jetty.ee10.servlet.ServletChannel.handle(ServletChannel.java:440)
at org.eclipse.jetty.ee10.servlet.ServletHandler.handle(ServletHandler.java:470)
at org.eclipse.jetty.server.handler.ContextHandler.handle(ContextHandler.java:1071)
at org.eclipse.jetty.server.handler.ContextHandlerCollection.handle(ContextHandlerCollection.java:181)
at org.eclipse.jetty.server.Server.handle(Server.java:182)
at org.eclipse.jetty.server.internal.HttpChannelState$HandlerInvoker.run(HttpChannelState.java:678)
at org.eclipse.jetty.server.internal.HttpConnection.onFillable(HttpConnection.java:416)
at org.eclipse.jetty.io.AbstractConnection$ReadCallback.succeeded(AbstractConnection.java:322)
at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:99)
at org.eclipse.jetty.io.SelectableChannelEndPoint$1.run(SelectableChannelEndPoint.java:53)
at org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.runTask(AdaptiveExecutionStrategy.java:480)
at org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.consumeTask(AdaptiveExecutionStrategy.java:443)
at org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.tryProduce(AdaptiveExecutionStrategy.java:293)
at org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.run(AdaptiveExecutionStrategy.java:201)
at org.eclipse.jetty.util.thread.ReservedThreadExecutor$ReservedThread.run(ReservedThreadExecutor.java:311)
at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:981)
at org.eclipse.jetty.util.thread.QueuedThreadPool$Runner.doRunJob(QueuedThreadPool.java:1211)
at org.eclipse.jetty.util.thread.QueuedThreadPool$Runner.run(QueuedThreadPool.java:1166)
at java.base/java.lang.Thread.run(Unknown Source)
Caused by: org.postgresql.util.PSQLException: ERROR: duplicate key value violates unique constraint "edc_jti_validation_pkey"
Detail: Key (token_id)=(7ddcdccf-2f86-48a1-b1ee-4a74d199e111) already exists.
at org.postgresql.core.v3.QueryExecutorImpl.receiveErrorResponse(QueryExecutorImpl.java:2734)
at org.postgresql.core.v3.QueryExecutorImpl.processResults(QueryExecutorImpl.java:2421)
at org.postgresql.core.v3.QueryExecutorImpl.execute(QueryExecutorImpl.java:372)
at org.postgresql.jdbc.PgStatement.executeInternal(PgStatement.java:518)
at org.postgresql.jdbc.PgStatement.execute(PgStatement.java:435)
at org.postgresql.jdbc.PgPreparedStatement.executeWithFlags(PgPreparedStatement.java:196)
at org.postgresql.jdbc.PgPreparedStatement.execute(PgPreparedStatement.java:182)
at org.eclipse.edc.sql.SqlQueryExecutor.execute(SqlQueryExecutor.java:57)
... 70 more
DEBUG 2025-10-30T07:40:24.954300206 DSP: Incoming CatalogRequestMessage for class org.eclipse.edc.connector.controlplane.catalog.spi.Catalog process
WARNING 2025-10-30T07:40:24.957743189 JTI Validation entry with id '7ddcdccf-2f86-48a1-b1ee-4a74d199e111' is expired

aonexyz · 2025-11-24T12:53:39Z

aonexyz
Nov 24, 2025

It looks like you are running into two related problems in the MVD deployment, both caused by expired JWTs that are still stored in the JTI validation table (edc_jti_validation) in PostgreSQL.

The important error is:

ERROR: duplicate key value violates unique constraint "edc_jti_validation_pkey"
Key (token_id)=... already exists.

This means:

A JWT token was previously validated and inserted into the JTI table.
The token expired (which is why you see constant messages like JTI Validation entry … is expired).
But the EDC components are still trying to re-validate the same expired token.
When they try to insert it again, PostgreSQL rejects it → duplicate key.
Once this starts happening, catalog exchange and DSP protocol calls begin to fail with Unauthorized: Token has expired (exp).

This behaviour typically appears after some weeks because self-issued ID tokens in the MVD have a relatively long TTL and eventually all components begin rejecting them at the same time.

Why this breaks the deployment

When an expired token is re-used:

Consumer Identity Hub reports continuous warnings
Provider Control Plane rejects the token (Unauthorized: Token has expired)
JTI validation tries to insert the same token again and crashes (duplicate key)
Catalog requests fail repeatedly, causing the whole dataspace flow to stop

This is expected if the environment hasn't rotated its key material or cleaned old JTIs.

How to Fix the Issue :

1. Clear the JTI validation table

On the PostgreSQL database used by identity-hub and controlplane:

DELETE FROM edc_jti_validation;

This is safe it only contains short-lived token IDs.

After clearing it, restart:

consumer-identityhub
provider-identityhub
provider-qna-controlplane
provider-catalog-server

This usually resolves the issue immediately.

2. Check that your system time is correct

If NTP drifted and the server time is off by >1–2 minutes, JWTs will be seen as invalid.

Verify:

timedatectl status`

If needed:

sudo timedatectl set-ntp true

3. Rotate keys / restart MVD after long uptime

The MVD uses self-issued ID tokens signed by ephemeral keys.
When these tokens expire simultaneously (weeks later), components begin sending expired tokens to each other.

A full restart of all MVD services forces:

new signing keys
new self-issued tokens
new JTI entries

4. (Optional) Reduce JTI expiry time

In your MVD config you can set:

edc.iam.identitytrust.validation.jti.ttl=300

This ensures expired entries are cleaned more aggressively.

1 reply

mxar-intracom-telecom Dec 6, 2025
Author

The issue still exists:

The steps I followed:

I cleared the edc_jti_validation table in Consumer and Provider Postgres running:

DELETE FROM edc_jti_validation;

I restarted the pods:
consumer-identityhub,
provider-identityhub,
provider-qna-controlplane,
provider-catalog-server

running the following commands:

kubectl rollout restart deployment consumer-identityhub -n mvd

kubectl rollout restart deployment provider-identityhub -n mvd

kubectl rollout restart deployment provider-qna-controlplane -n mvd

kubectl rollout restart deployment provider-catalog-server -n mvd

But I still have error messages in the following pods:

The logs in provider postgres:
kubectl logs -f provider-postgres-56fd4c7cd-q6kbg -n mvd

2025-12-04 11:45:52.885 UTC [3795522] ERROR: duplicate key value violates unique constraint "edc_jti_validation_pkey"
2025-12-04 11:45:52.885 UTC [3795522] DETAIL: Key (token_id)=(a2b5455f-d409-46f0-b106-13a091bdce46) already exists.
2025-12-04 11:45:52.885 UTC [3795522] STATEMENT: INSERT INTO edc_jti_validation (token_id, expires_at) VALUES ($1, $2)
RETURNING *
2025-12-04 11:45:53.067 UTC [3795683] ERROR: duplicate key value violates unique constraint "edc_jti_validation_pkey"
2025-12-04 11:45:53.067 UTC [3795683] DETAIL: Key (token_id)=(e383bcc6-e112-497c-a64e-25ea09c53c75) already exists.
2025-12-04 11:45:53.067 UTC [3795683] STATEMENT: INSERT INTO edc_jti_validation (token_id, expires_at) VALUES ($1, $2)
RETURNING *
2025-12-04 11:46:02.746 UTC [3795699] ERROR: duplicate key value violates unique constraint "edc_jti_validation_pkey"
2025-12-04 11:46:02.746 UTC [3795699] DETAIL: Key (token_id)=(f8fb4065-c6bd-427d-9a79-95542c4a232b) already exists.
2025-12-04 11:46:02.746 UTC [3795699] STATEMENT: INSERT INTO edc_jti_validation (token_id, expires_at) VALUES ($1, $2)
RETURNING *
2025-12-04 11:46:06.752 UTC [71] LOG: checkpoint complete: wrote 690 buffers (4.2%); 0 WAL file(s) added, 0 removed, 1 recycled; write=78.290 s, sync=0.003 s, total=78.300 s; sync files=40, longest=0.003 s, average=0.001 s; distance=13523 kB, estimate=13686 kB; lsn=2D/6F711C8, redo lsn=2D/6B89878
2025-12-04 11:47:11.199 UTC [3795699] ERROR: duplicate key value violates unique constraint "edc_jti_validation_pkey"
2025-12-04 11:47:11.199 UTC [3795699] DETAIL: Key (token_id)=(ea04369b-98d0-4bc5-a787-fd8ef6a6ed28) already exists.
2025-12-04 11:47:11.199 UTC [379^C

The logs in consumer identity hub:
kubectl logs -f consumer-identityhub-f67c5cd7f-whd26 -n mvd

WARNING 2025-12-06T07:39:43.213572677 JTI Validation entry with id 'accesstoken-f3fbf885-fa4e-4f7c-adb1-25ec882ae367' is expired
WARNING 2025-12-06T07:39:45.514725641 JTI Validation entry with id 'accesstoken-5fea1d90-c337-4dfb-82e4-390188e75fb4' is expired
WARNING 2025-12-06T07:39:54.680120535 JTI Validation entry with id 'accesstoken-000a7a72-cce1-4a65-80ef-431eb84b561e' is expired
WARNING 2025-12-06T07:41:30.451504814 JTI Validation entry with id 'accesstoken-11f0beb3-a143-4712-be12-52eaf287aca5' is expired
WARNING 2025-12-06T07:41:30.627194394 JTI Validation entry with id 'accesstoken-4e578f14-59b4-40e9-bad3-1f7f80cdfdd3' is expired
WARNING 2025-12-06T07:41:31.068829273 JTI Validation entry with id 'accesstoken-ff6a3502-7453-42df-88fd-ad3f4556c75f' is expired
WARNING 2025-12-06T07:41:32.915521286 JTI Validation entry with id 'accesstoken-e90bd571-c4a7-4c5e-9eb0-e54f01331287' is expired
WARNING 2025-12-06T07:41:42.606042626 JTI Validation entry with id 'accesstoken-aef7f52f-0f49-4faa-a80b-c9ca1f3202fd' is expired
WARNING 2025-12-06T07:43:17.844138182 JTI Validation entry with id 'accesstoken-44dfda7a-6f81-413d-8b76-b80a2a169a01' is expired
WARNING 2025-12-06T07:43:19.150053119 JTI Validation entry with id 'accesstoken-184eb528-0014-48d7-a44b-f0601d0b69db' is expired
WARNING 2025-12-06T07:43:20.113714582 JTI Validation entry with id 'accesstoken-f23ce27b-c7c4-4c3b-aac7-4b0521a626c9' is expired
WARNING 2025-12-06T07:43:20.450652285 JTI Validation entry with id 'accesstoken-67b11b68-24b7-493c-9ff1-b55112a57f01' is expired
WARNING 2025-12-06T07:43:30.558239875 JTI Validation entry with id 'accesstoken-c22e3326-2e7f-4175-9a8d-b4979dc2d562' is expired

The logs in consumer control plane:
kubectl logs -f consumer-controlplane-9cfbf6b88-kms6w -n mvd

DEBUG 2025-12-06T07:11:32.866273339 [ExecutionManager] The following work item has errored out. Will re-queue after a delay of 10 seconds: [WorkItem{id='did:web:provider-identityhub%3A7083:provider', url='http://provider-catalog-server-controlplane:8082/api/dsp', protocolName='dataspace-protocol-http', errors=[org.eclipse.edc.spi.EdcException: {"@type":"dspace:CatalogError","dspace:code":"401","dspace:reason":"Unauthorized","@context":{"dcat":"http://www.w3.org/ns/dcat#","dct":"http://purl.org/dc/terms/","odrl":"http://www.w3.org/ns/odrl/2/","dspace":"https://w3id.org/dspace/v0.8/","@vocab":"https://w3id.org/edc/v0.0.1/ns/","edc":"https://w3id.org/edc/v0.0.1/ns/"}}, org.eclipse.edc.spi.EdcException: {"@type":"dspace:CatalogError","dspace:code":"401","dspace:reason":"Unauthorized","@context":{"dcat":"http://www.w3.org/ns/dcat#","dct":"http://purl.org/dc/terms/","odrl":"http://www.w3.org/ns/odrl/2/","dspace":"https://w3id.org/dspace/v0.8/","@vocab":"https://w3id.org/edc/v0.0.1/ns/","edc":"https://w3id.org/edc/v0.0.1/ns/"}}]}]
SEVERE 2025-12-06T07:11:32.868352268 [ExecutionManager] Unexpected exception occurred while crawling: did:web:provider-identityhub%3A7083:provider
java.util.concurrent.CompletionException: org.eclipse.edc.spi.EdcException: {"@type":"dspace:CatalogError","dspace:code":"401","dspace:reason":"Unauthorized","@context":{"dcat":"http://www.w3.org/ns/dcat#","dct":"http://purl.org/dc/terms/","odrl":"http://www.w3.org/ns/odrl/2/","dspace":"https://w3id.org/dspace/v0.8/","@vocab":"https://w3id.org/edc/v0.0.1/ns/","edc":"https://w3id.org/edc/v0.0.1/ns/"}}
at java.base/java.util.concurrent.CompletableFuture.wrapInCompletionException(Unknown Source)
at java.base/java.util.concurrent.CompletableFuture.encodeRelay(Unknown Source)
at java.base/java.util.concurrent.CompletableFuture.completeRelay(Unknown Source)
at java.base/java.util.concurrent.CompletableFuture$UniCompose.tryFire(Unknown Source)
at java.base/java.util.concurrent.CompletableFuture.postComplete(Unknown Source)
at java.base/java.util.concurrent.CompletableFuture.complete(Unknown Source)
at dev.failsafe.spi.FailsafeFuture.completeResult(FailsafeFuture.java:99)
at dev.failsafe.AsyncExecutionImpl.complete(AsyncExecutionImpl.java:153)
at java.base/java.util.concurrent.CompletableFuture.uniWhenComplete(Unknown Source)
at java.base/java.util.concurrent.CompletableFuture.uniWhenCompleteStage(Unknown Source)
at java.base/java.util.concurrent.CompletableFuture.whenComplete(Unknown Source)
at dev.failsafe.AsyncExecutionImpl.executeAsync(AsyncExecutionImpl.java:143)
at dev.failsafe.AsyncExecutionImpl.record(AsyncExecutionImpl.java:100)
at dev.failsafe.AsyncExecutionImpl.recordResult(AsyncExecutionImpl.java:106)
at dev.failsafe.okhttp.FailsafeCall$1.onResponse(FailsafeCall.java:145)
at okhttp3.internal.connection.RealCall$AsyncCall.run(RealCall.kt:532)
at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
at java.base/java.lang.Thread.run(Unknown Source)
Caused by: org.eclipse.edc.spi.EdcException: {"@type":"dspace:CatalogError","dspace:code":"401","dspace:reason":"Unauthorized","@context":{"dcat":"http://www.w3.org/ns/dcat#","dct":"http://purl.org/dc/terms/","odrl":"http://www.w3.org/ns/odrl/2/","dspace":"https://w3id.org/dspace/v0.8/","@vocab":"https://w3id.org/edc/v0.0.1/ns/","edc":"https://w3id.org/edc/v0.0.1/ns/"}}
at org.eclipse.edc.catalog.cache.query.PagingCatalogFetcher.readCatalogFrom(PagingCatalogFetcher.java:99)
... 16 more
DEBUG 2025-12-06T07:11:32.868509172 [ExecutionManager] The following work item has errored out. Will re-queue after a delay of 21 seconds: [WorkItem{id='did:web:provider-identityhub%3A7083:provider', url='http://provider-catalog-server-controlplane:8082/api/dsp', protocolName='dataspace-protocol-http', errors=[org.eclipse.edc.spi.EdcException: {"@type":"dspace:CatalogError","dspace:code":"401","dspace:reason":"Unauthorized","@context":{"dcat":"http://www.w3.org/ns/dcat#","dct":"http://purl.org/dc/terms/","odrl":"http://www.w3.org/ns/odrl/2/","dspace":"https://w3id.org/dspace/v0.8/","@vocab":"https://w3id.org/edc/v0.0.1/ns/","edc":"https://w3id.org/edc/v0.0.1/ns/"}}, org.eclipse.edc.spi.EdcException: {"@type":"dspace:CatalogError","dspace:code":"401","dspace:reason":"Unauthorized","@context":{"dcat":"http://www.w3.org/ns/dcat#","dct":"http://purl.org/dc/terms/","odrl":"http://www.w3.org/ns/odrl/2/","dspace":"https://w3id.org/dspace/v0.8/","@vocab":"https://w3id.org/edc/v0.0.1/ns/","edc":"https://w3id.org/edc/v0.0.1/ns/"}}]}]
SEVERE 2025-12-06T07:11:32.870341928 [ExecutionManager] Unexpected exception occurred while crawling: did:web:provider-identityhub%3A7083:provider
java.util.concurrent.CompletionException: org.eclipse.edc.spi.EdcException: {"@type":"dspace:CatalogError","dspace:code":"401","dspace:reason":"Unauthorized","@context":{"dcat":"http://www.w3.org/ns/dcat#","dct":"http://purl.org/dc/terms/","odrl":"http://www.w3.org/ns/odrl/2/","dspace":"https://w3id.org/dspace/v0.8/","@vocab":"https://w3id.org/edc/v0.0.1/ns/","edc":"https://w3id.org/edc/v0.0.1/ns/"}}
at java.base/java.util.concurrent.CompletableFuture.wrapInCompletionException(Unknown Source)
at java.base/java.util.concurrent.CompletableFuture.encodeRelay(Unknown Source)
at java.base/java.util.concurrent.CompletableFuture.completeRelay(Unknown Source)
at java.base/java.util.concurrent.CompletableFuture$UniCompose.tryFire(Unknown Source)
at java.base/java.util.concurrent.CompletableFuture.postComplete(Unknown Source)
at java.base/java.util.concurrent.CompletableFuture.complete(Unknown Source)
at dev.failsafe.spi.FailsafeFuture.completeResult(FailsafeFuture.java:99)
at dev.failsafe.AsyncExecutionImpl.complete(AsyncExecutionImpl.java:153)
at java.base/java.util.concurrent.CompletableFuture.uniWhenComplete(Unknown Source)
at java.base/java.util.concurrent.CompletableFuture.uniWhenCompleteStage(Unknown Source)
at java.base/java.util.concurrent.CompletableFuture.whenComplete(Unknown Source)
at dev.failsafe.AsyncExecutionImpl.executeAsync(AsyncExecutionImpl.java:143)
at dev.failsafe.AsyncExecutionImpl.record(AsyncExecutionImpl.java:100)
at dev.failsafe.AsyncExecutionImpl.recordResult(AsyncExecutionImpl.java:106)
at dev.failsafe.okhttp.FailsafeCall$1.onResponse(FailsafeCall.java:145)
at okhttp3.internal.connection.RealCall$AsyncCall.run(RealCall.kt:532)
at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
at java.base/java.lang.Thread.run(Unknown Source)
Caused by: org.eclipse.edc.spi.EdcException: {"@type":"dspace:CatalogError","dspace:code":"401","dspace:reason":"Unauthorized","@context":{"dcat":"http://www.w3.org/ns/dcat#","dct":"http://purl.org/dc/terms/","odrl":"http://www.w3.org/ns/odrl/2/","dspace":"https://w3id.org/dspace/v0.8/","@vocab":"https://w3id.org/edc/v0.0.1/ns/","edc":"https://w3id.org/edc/v0.0.1/ns/"}}
at org.eclipse.edc.catalog.cache.query.PagingCatalogFetcher.readCatalogFrom(PagingCatalogFetcher.java:99)
... 16 more
DEBUG 2025-12-06T07:11:32.870457737 [ExecutionManager] The following work item has errored out. Will re-queue after a delay of 6 seconds: [WorkItem{id='did:web:provider-identityhub%3A7083:provider', url='http://provider-catalog-server-controlplane:8082/api/dsp', protocolName='dataspace-protocol-http', errors=[org.eclipse.edc.spi.EdcException: {"@type":"dspace:CatalogError","dspace:code":"401","dspace:reason":"Unauthorized","@context":{"dcat":"http://www.w3.org/ns/dcat#","dct":"http://purl.org/dc/terms/","odrl":"http://www.w3.org/ns/odrl/2/","dspace":"https://w3id.org/dspace/v0.8/","@vocab":"https://w3id.org/edc/v0.0.1/ns/","edc":"https://w3id.org/edc/v0.0.1/ns/"}}, org.eclipse.edc.spi.EdcException: {"@type":"dspace:CatalogError","dspace:code":"401","dspace:reason":"Unauthorized","@context":{"dcat":"http://www.w3.org/ns/dcat#","dct":"http://purl.org/dc/terms/","odrl":"http://www.w3.org/ns/odrl/2/","dspace":"https://w3id.org/dspace/v0.8/","@vocab":"https://w3id.org/edc/v0.0.1/ns/","edc":"https://w3id.org/edc/v0.0.1/ns/"}}, org.eclipse.edc.spi.EdcException: {"@type":"dspace:CatalogError","dspace:code":"401","dspace:reason":"Unauthorized","@context":{"dcat":"http://www.w3.org/ns/dcat#","dct":"http://purl.org/dc/terms/","odrl":"http://www.w3.org/ns/odrl/2/","dspace":"https://w3id.org/dspace/v0.8/","@vocab":"https://w3id.org/ed^

The logs in provider qna control plane:
kubectl logs -f provider-qna-controlplane-7789c8cdcf-94xgs -n mvd

DEBUG 2025-12-06T05:35:46.558057185 [DEMO] Node filter: skipping node 'did:web:provider-identityhub%3A7083:provider' for participant 'did:web:provider-identityhub%3A7083:provider'
DEBUG 2025-12-06T05:35:46.55814081 [ExecutionManager] Loaded 1 work items from storage
DEBUG 2025-12-06T05:35:46.613714914 [ExecutionManager] WorkItem [did:web:consumer-identityhub%3A7083:consumer] is done
DEBUG 2025-12-06T05:35:47.375656527 DSP: Incoming CatalogRequestMessage for class org.eclipse.edc.connector.controlplane.catalog.spi.Catalog process
WARNING 2025-12-06T05:35:47.380114275 JTI Validation entry with id 'f82ae9ed-4a16-4f29-bf8c-3ffaae3159c7' is expired
SEVERE 2025-12-06T05:35:47.949029791 JerseyExtension: Unexpected exception caught
org.eclipse.edc.spi.persistence.EdcPersistenceException: ERROR: duplicate key value violates unique constraint "edc_jti_validation_pkey"
Detail: Key (token_id)=(226834b8-0b55-493c-94c7-8c9ce9c913ff) already exists.
at org.eclipse.edc.sql.SqlQueryExecutor.execute(SqlQueryExecutor.java:59)
at org.eclipse.edc.jtivalidation.store.sql.SqlJtiValidationStore.lambda$storeEntry$0(SqlJtiValidationStore.java:55)
at org.eclipse.edc.transaction.local.LocalTransactionContext.execute(LocalTransactionContext.java:74)
at org.eclipse.edc.jtivalidation.store.sql.SqlJtiValidationStore.storeEntry(SqlJtiValidationStore.java:48)
at org.eclipse.edc.verifiablecredentials.jwt.rules.JtiValidationRule.checkRule(JtiValidationRule.java:48)
at org.eclipse.edc.token.TokenValidationServiceImpl.lambda$validate$2(TokenValidationServiceImpl.java:65)
at java.base/java.util.stream.ReferencePipeline$3$1.accept(Unknown Source)
at java.base/java.util.ArrayList$ArrayListSpliterator.forEachRemaining(Unknown Source)
at java.base/java.util.stream.AbstractPipeline.copyInto(Unknown Source)
at java.base/java.util.stream.AbstractPipeline.wrapAndCopyInto(Unknown Source)
at java.base/java.util.stream.ReduceOps$ReduceOp.evaluateSequential(Unknown Source)
at java.base/java.util.stream.AbstractPipeline.evaluate(Unknown Source)
at java.base/java.util.stream.ReferencePipeline.reduce(Unknown Source)
at org.eclipse.edc.token.TokenValidationServiceImpl.validate(TokenValidationServiceImpl.java:66)
at org.eclipse.edc.iam.identitytrust.core.validation.SelfIssueIdTokenValidationAction.apply(SelfIssueIdTokenValidationAction.java:53)
at org.eclipse.edc.iam.identitytrust.core.validation.SelfIssueIdTokenValidationAction.apply(SelfIssueIdTokenValidationAction.java:33)
at org.eclipse.edc.iam.identitytrust.service.IdentityAndTrustService.verifyJwtToken(IdentityAndTrustService.java:138)
at org.eclipse.edc.connector.controlplane.services.protocol.ProtocolTokenValidatorImpl.verify(ProtocolTokenValidatorImpl.java:66)
at org.eclipse.edc.connector.controlplane.services.spi.protocol.ProtocolTokenValidator.verify(ProtocolTokenValidator.java:42)
at org.eclipse.edc.connector.controlplane.services.catalog.CatalogProtocolServiceImpl.lambda$getCatalog$1(CatalogProtocolServiceImpl.java:60)
at org.eclipse.edc.transaction.local.LocalTransactionContext.execute(LocalTransactionContext.java:74)
at org.eclipse.edc.connector.controlplane.services.catalog.CatalogProtocolServiceImpl.getCatalog(CatalogProtocolServiceImpl.java:60)
at org.eclipse.edc.protocol.dsp.http.message.DspRequestHandlerImpl.createResource(DspRequestHandlerImpl.java:132)
at org.eclipse.edc.protocol.dsp.catalog.http.api.controller.BaseDspCatalogApiController.requestCatalog(BaseDspCatalogApiController.java:84)
at java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(Unknown Source)
at java.base/java.lang.reflect.Method.invoke(Unknown Source)
at org.glassfish.jersey.server.model.internal.ResourceMethodInvocationHandlerFactory.lambda$static$0(ResourceMethodInvocationHandlerFactory.java:52)
at org.glassfish.jersey.server.model.internal.AbstractJavaResourceMethodDispatcher$1.run(AbstractJavaResourceMethodDispatcher.java:146)
at org.glassfish.jersey.server.model.internal.AbstractJavaResourceMethodDispatcher.invoke(AbstractJavaResourceMethodDispatcher.java:189)
at org.glassfish.jersey.server.model.internal.JavaResourceMethodDispatcherProvider$ResponseOutInvoker.doDispatch(JavaResourceMethodDispatcherProvider.java:176)
at org.glassfish.jersey.server.model.internal.AbstractJavaResourceMethodDispatcher.dispatch(AbstractJavaResourceMethodDispatcher.java:93)
at org.glassfish.jersey.server.model.ResourceMethodInvoker.invoke(ResourceMethodInvoker.java:478)
at org.glassfish.jersey.server.model.ResourceMethodInvoker.apply(ResourceMethodInvoker.java:400)
at org.glassfish.jersey.server.model.ResourceMethodInvoker.apply(ResourceMethodInvoker.java:81)
at org.glassfish.jersey.server.ServerRuntime$1.run(ServerRuntime.java:274)
at org.glassfish.jersey.internal.Errors$1.call(Errors.java:248)
at org.glassfish.jersey.internal.Errors$1.call(Errors.java:244)
at org.glassfish.jersey.internal.Errors.process(Errors.java:292)
at org.glassfish.jersey.internal.Errors.process(Errors.java:274)
at org.glassfish.jersey.internal.Errors.process(Errors.java:244)
at org.glassfish.jersey.process.internal.RequestScope.runInScope(RequestScope.java:266)
at org.glassfish.jersey.server.ServerRuntime.process(ServerRuntime.java:253)
at org.glassfish.jersey.server.ApplicationHandler.handle(ApplicationHandler.java:696)
at org.glassfish.jersey.servlet.WebComponent.serviceImpl(WebComponent.java:397)
at org.glassfish.jersey.servlet.WebComponent.service(WebComponent.java:349)
at org.glassfish.jersey.servlet.ServletContainer.service(ServletContainer.java:358)
at org.glassfish.jersey.servlet.ServletContainer.service(ServletContainer.java:312)
at org.glassfish.jersey.servlet.ServletContainer.service(ServletContainer.java:205)
at org.eclipse.jetty.ee10.servlet.ServletHolder.handle(ServletHolder.java:736)
at org.eclipse.jetty.ee10.servlet.ServletHandler$ChainEnd.doFilter(ServletHandler.java:1622)
at org.eclipse.jetty.ee10.servlet.ServletHandler$MappedServlet.handle(ServletHandler.java:1555)
at org.eclipse.jetty.ee10.servlet.ServletChannel.dispatch(ServletChannel.java:823)
at org.eclipse.jetty.ee10.servlet.ServletChannel.handle(ServletChannel.java:440)
at org.eclipse.jetty.ee10.servlet.ServletHandler.handle(ServletHandler.java:470)
at org.eclipse.jetty.server.handler.ContextHandler.handle(ContextHandler.java:1071)
at org.eclipse.jetty.server.handler.ContextHandlerCollection.handle(ContextHandlerCollection.java:181)
at org.eclipse.jetty.server.Server.handle(Server.java:182)
at org.eclipse.jetty.server.internal.HttpChannelState$HandlerInvoker.run(HttpChannelState.java:678)
at org.eclipse.jetty.server.internal.HttpConnection.onFillable(HttpConnection.java:416)
at org.eclipse.jetty.io.AbstractConnection$ReadCallback.succeeded(AbstractConnection.java:322)
at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:99)
at org.eclipse.jetty.io.SelectableChannelEndPoint$1.run(SelectableChannelEndPoint.java:53)
at org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.runTask(AdaptiveExecutionStrategy.java:480)
at org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.consumeTask(AdaptiveExecutionStrategy.java:443)
at org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.tryProduce(AdaptiveExecutionStrategy.java:293)
at org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.run(AdaptiveExecutionStrategy.java:201)
at org.eclipse.jetty.util.thread.ReservedThreadExecutor$ReservedThread.run(ReservedThreadExecutor.java:311)
at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:981)
at org.eclipse.jetty.util.thread.QueuedThreadPool$Runner.doRunJob(QueuedThreadPool.java:1211)
at org.eclipse.jetty.util.thread.QueuedThreadPool$Runner.run(QueuedThreadPool.java:1166)
at java.base/java.lang.Thread.run(Unknown Source)
Caused by: org.postgresql.util.PSQLException: ERROR: duplicate key value violates unique constraint "edc_jti_validation_pkey"
Detail: Key (token_id)=(226834b8-0b55-493c-94c7-8c9ce9c913ff) already exists.
at org.postgresql.core.v3.QueryExecutorImpl.receiveErrorResponse(QueryExecutorImpl.java:2734)
at org.postgresql.core.v3.QueryExecutorImpl.processResults(QueryExecutorImpl.java:2421)
at org.postgresql.core.v3.QueryExecutorImpl.execute(QueryExecutorImpl.java:372)
at org.postgresql.jdbc.PgStatement.executeInternal(PgStatement.java:518)
at org.postgresql.jdbc.PgStatement.execute(PgStatement.java:435)
at org.postgresql.jdbc.PgPreparedStatement.executeWithFlags(PgPreparedStatement.java:196)
at org.postgresql.jdbc.PgPreparedStatement.execute(PgPreparedStatement.java:182)
at org.eclipse.edc.sql.SqlQueryExecutor.execute(SqlQueryExecutor.java:57)
... 70 more
SEVERE 2025-12-06T05:35:48.363771191 JerseyExtension: Unexpected exception caught
org.eclipse.edc.spi.persistence.EdcPersistenceException: ERROR: duplicate key value violates unique constraint "edc_jti_validation_pkey"
Detail: Key (token_id)=(de6e58a9-f025-4598-abc3-e214cb56a9ed) already exists.
at org.eclipse.edc.sql.SqlQueryExecutor.execute(SqlQueryExecutor.java:59)
at org.eclipse.edc.jtivalidation.store.sql.SqlJtiValidationStore.lambda$storeEntry$0(SqlJtiValidationStore.java:55)
at org.eclipse.edc.transaction.local.LocalTransactionContext.execute(LocalTransactionContext.java:74)
at org.eclipse.edc.jtivalidation.store.sql.SqlJtiValidationStore.storeEntry(SqlJtiValidationStore.java:48)
at org.eclipse.edc.verifiablecredentials.jwt.rules.JtiValidationRule.checkRule(JtiValidationRule.java:48)
at org.eclipse.edc.token.TokenValidationServiceImpl.lambda$validate$2(TokenValidationServiceImpl.java:65)
at java.base/java.util.stream.ReferencePipeline$3$1.accept(Unknown Source)
at java.base/java.util.ArrayList$ArrayListSpliterator.forEachRemaining(Unknown Source)
at java.base/java.util.stream.AbstractPipeline.copyInto(Unknown Source)
at java.base/java.util.stream.AbstractPipeline.wrapAndCopyInto(Unknown Source)
at java.base/java.util.stream.ReduceOps$ReduceOp.evaluateSequential(Unknown Source)
at java.base/java.util.stream.AbstractPipeline.evaluate(Unknown Source)
at java.base/java.util.stream.ReferencePipeline.reduce(Unknown Source)
at org.eclipse.edc.token.TokenValidationServiceImpl.validate(TokenValidationServiceImpl.java:66)
at org.eclipse.edc.iam.identitytrust.core.validation.SelfIssueIdTokenValidationAction.apply(SelfIssueIdTokenValidationAction.java:53)
at org.eclipse.edc.iam.identitytrust.core.validation.SelfIssueIdTokenValidationAction.apply(SelfIssueIdTokenValidationAction.java:33)
at org.eclipse.edc.iam.identitytrust.service.IdentityAndTrustService.verifyJwtToken(IdentityAndTrustService.java:138)
at org.eclipse.edc.connector.controlplane.services.protocol.ProtocolTokenValidatorImpl.verify(ProtocolTokenValidatorImpl.java:66)
at org.eclipse.edc.connector.controlplane.services.spi.protocol.ProtocolTokenValidator.verify(ProtocolTokenValidator.java:42)
at org.eclipse.edc.connector.controlplane.services.catalog.CatalogProtocolServiceImpl.lambda$getCatalog$1(CatalogProtocolServiceImpl.java:60)
at org.eclipse.edc.transaction.local.LocalTransactionContext.execute(LocalTransactionContext.java:74)
at org.eclipse.edc.connector.controlplane.services.catalog.CatalogProtocolServiceImpl.getCatalog(CatalogProtocolServiceImpl.java:60)
at org.eclipse.edc.protocol.dsp.http.message.DspRequestHandlerImpl.createResource(DspRequestHandlerImpl.java:132)
at org.eclipse.edc.protocol.dsp.catalog.http.api.controller.BaseDspCatalogApiController.requestCatalog(BaseDspCatalogApiController.java:84)
at java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(Unknown Source)
at java.base/java.lang.reflect.Method.invoke(Unknown Source)
at org.glassfish.jersey.server.model.internal.ResourceMethodInvocationHandlerFactory.lambda$static$0(ResourceMethodInvocationHandlerFactory.java:52)
at org.glassfish.jersey.server.model.internal.AbstractJavaResourceMethodDispatcher$1.run(AbstractJavaResourceMethodDispatcher.java:146)
at org.glassfish.jersey.server.model.internal.AbstractJavaResourceMethodDispatcher.invoke(AbstractJavaResourceMethodDispatcher.java:189)
at org.glassfish.jersey.server.model.internal.JavaResourceMethodDispatcherProvider$ResponseOutInvoker.doDispatch(JavaResourceMethodDispatcherProvider.java:176)
at org.glassfish.jersey.server.model.internal.AbstractJavaResourceMethodDispatcher.dispatch(AbstractJavaResourceMethodDispatcher.java:93)
at org.glassfish.jersey.server.model.ResourceMethodInvoker.invoke(ResourceMethodInvoker.java:478)
at org.glassfish.jersey.server.model.ResourceMethodInvoker.apply(ResourceMethodInvoker.java:400)
at org.glassfish.jersey.server.model.ResourceMethodInvoker.apply(ResourceMethodInvoker.java:81)
at org.glassfish.jersey.server.ServerRuntime$1.run(ServerRuntime.java:274)
at org.glassfish.jersey.internal.Errors$1.call(Errors.java:248)
at org.glassfish.jersey.internal.Errors$1.call(Errors.java:244)
at org.glassfish.jersey.internal.Errors.process(Errors.java:292)
at org.glassfish.jersey.internal.Errors.process(Errors.java:274)
at org.glassfish.jersey.internal.Errors.process(Errors.java:244)
at org.glassfish.jersey.process.internal.RequestScope.runInScope(RequestScope.java:266)
at org.glassfish.jersey.server.ServerRuntime.process(ServerRuntime.java:253)
at org.glassfish.jersey.server.ApplicationHandler.handle(ApplicationHandler.java:696)
at org.glassfish.jersey.servlet.WebComponent.serviceImpl(WebComponent.java:397)
at org.glassfish.jersey.servlet.WebComponent.service(WebComponent.java:349)
at org.glassfish.jersey.servlet.ServletContainer.service(ServletContainer.java:358)
at org.glassfish.jersey.servlet.ServletContainer.service(ServletContainer.java:312)
at org.glassfish.jersey.servlet.ServletContainer.service(ServletContainer.java:205)
at org.eclipse.jetty.ee10.servlet.ServletHolder.handle(ServletHolder.java:736)
at org.eclipse.jetty.ee10.servlet.ServletHandler$ChainEnd.doFilter(ServletHandler.java:1622)
at org.eclipse.jetty.ee10.servlet.ServletHandler$MappedServlet.handle(ServletHandler.java:1555)
at org.eclipse.jetty.ee10.servlet.ServletChannel.dispatch(ServletChannel.java:823)
at org.eclipse.jetty.ee10.servlet.ServletChannel.handle(ServletChannel.java:440)
at org.eclipse.jetty.ee10.servlet.ServletHandler.handle(ServletHandler.java:470)
at org.eclipse.jetty.server.handler.ContextHandler.handle(ContextHandler.java:1071)
at org.eclipse.jetty.server.handler.ContextHandlerCollection.handle(ContextHandlerCollection.java:181)
at org.eclipse.jetty.server.Server.handle(Server.java:182)
at org.eclipse.jetty.server.internal.HttpChannelState$HandlerInvoker.run(HttpChannelState.java:678)
at org.eclipse.jetty.server.internal.HttpConnection.onFillable(HttpConnection.java:416)
at org.eclipse.jetty.io.AbstractConnection$ReadCallback.succeeded(AbstractConnection.java:322)
at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:99)
at org.eclipse.jetty.io.SelectableChannelEndPoint$1.run(SelectableChannelEndPoint.java:53)
at org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.runTask(AdaptiveExecutionStrategy.java:480)
at org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.consumeTask(AdaptiveExecutionStrategy.java:443)
at org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.tryProduce(AdaptiveExecutionStrategy.java:293)
at org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.run(AdaptiveExecutionStrategy.java:201)
at org.eclipse.jetty.util.thread.ReservedThreadExecutor$ReservedThread.run(ReservedThreadExecutor.java:311)
at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:981)
at org.eclipse.jetty.util.thread.QueuedThreadPool$Runner.doRunJob(QueuedThreadPool.java:1211)
at org.eclipse.jetty.util.thread.QueuedThreadPool$Runner.run(QueuedThreadPool.java:1166)
at java.base/java.lang.Thread.run(Unknown Source)
Caused by: org.postgresql.util.PSQLException: ERROR: duplicate key value violates unique constraint "edc_jti_validation_pkey"
Detail: Key (token_id)=(de6e58a9-f025-4598-abc3-e214cb56a9ed) already exists.
at org.postgresql.core.v3.QueryExecutorImpl.receiveErrorResponse(QueryExecutorImpl.java:2734)
at org.postgresql.core.v3.QueryExecutorImpl.processResults(QueryExecutorImpl.java:2421)
at org.postgresql.core.v3.QueryExecutorImpl.execute(QueryExecutorImpl.java:372)
at org.postgresql.jdbc.PgStatement.executeInternal(PgStatement.java:518)
at org.postgresql.jdbc.PgStatement.execute(PgStatement.java:435)
at org.postgresql.jdbc.PgPreparedStatement.executeWithFlags(PgPreparedStatement.java:196)
at org.postgresql.jdbc.PgPreparedStatement.execute(PgPreparedStatement.java:182)
at org.eclipse.edc.sql.SqlQueryExecutor.execute(SqlQueryExecutor.java:57)
... 70 more
SEVERE 2025-12-06T05:35:48.785282711 JerseyExtension: Unexpected exception caught
org.eclipse.edc.spi.persistence.EdcPersistenceException: ERROR: duplicate key value violates unique constraint "edc_jti_validation_pkey"
Detail: Key (token_id)=(fe84585b-551e-4a15-b12e-1d7824424614) already exists.
at org.eclipse.edc.sql.SqlQueryExecutor.execute(SqlQueryExecutor.java:59)
at org.eclipse.edc.jtivalidation.store.sql.SqlJtiValidationStore.lambda$storeEntry$0(SqlJtiValidationStore.java:55)
at org.eclipse.edc.transaction.local.LocalTransactionContext.execute(LocalTransactionContext.java:74)
at org.eclipse.edc.jtivalidation.store.sql.SqlJtiValidationStore.storeEntry(SqlJtiValidationStore.java:48)
at org.eclipse.edc.verifiablecredentials.jwt.rules.JtiValidationRule.checkRule(JtiValidationRule.java:48)
at org.eclipse.edc.token.TokenValidationServiceImpl.lambda$validate$2(TokenValidationServiceImpl.java:65)
at java.base/java.util.stream.ReferencePipeline$3$1.accept(Unknown Source)
at java.base/java.util.ArrayList$ArrayListSpliterator.forEachRemaining(Unknown Source)
at java.base/java.util.stream.AbstractPipeline.copyInto(Unknown Source)
at java.base/java.util.stream.AbstractPipeline.wrapAndCopyInto(Unknown Source)
at java.base/java.util.stream.ReduceOps$ReduceOp.evaluateSequential(Unknown Source)
at java.base/java.util.stream.AbstractPipeline.evaluate(Unknown Source)
at java.base/java.util.stream.ReferencePipeline.reduce(Unknown Source)
at org.eclipse.edc.token.TokenValidationServiceImpl.validate(TokenValidationServiceImpl.java:66)
at org.eclipse.edc.iam.identitytrust.core.validation.SelfIssueIdTokenValidationAction.apply(SelfIssueIdTokenValidationAction.java:53)
at org.eclipse.edc.iam.identitytrust.core.validation.SelfIssueIdTokenValidationAction.apply(SelfIssueIdTokenValidationAction.java:33)
at org.eclipse.edc.iam.identitytrust.service.IdentityAndTrustService.verifyJwtToken(IdentityAndTrustService.java:138)
at org.eclipse.edc.connector.controlplane.services.protocol.ProtocolTokenValidatorImpl.verify(ProtocolTokenValidatorImpl.java:66)
at org.eclipse.edc.connector.controlplane.services.spi.protocol.ProtocolTokenValidator.verify(ProtocolTokenValidator.java:42)
at org.eclipse.edc.connector.controlplane.services.catalog.CatalogProtocolServiceImpl.lambda$getCatalog$1(CatalogProtocolServiceImpl.java:60)
at org.eclipse.edc.transaction.local.LocalTransactionContext.execute(LocalTransactionContext.java:74)
at org.eclipse.edc.connector.controlplane.services.catalog.CatalogProtocolServiceImpl.getCatalog(CatalogProtocolServiceImpl.java:60)
at org.eclipse.edc.protocol.dsp.http.message.DspRequestHandlerImpl.createResource(DspRequestHandlerImpl.java:132)
at org.eclipse.edc.protocol.dsp.catalog.http.api.controller.BaseDspCatalogApiController.requestCatalog(BaseDspCatalogApiController.java:84)
at java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(Unknown Source)
at java.base/java.lang.reflect.Method.invoke(Unknown Source)
at org.glassfish.jersey.server.model.internal.ResourceMethodInvocationHandlerFactory.lambda$static$0(ResourceMethodInvocationHandlerFactory.java:52)
at org.glassfish.jersey.server.model.internal.AbstractJavaResourceMethodDispatcher$1.run(AbstractJavaResourceMethodDispatcher.java:146)
at org.glassfish.jersey.server.model.internal.AbstractJavaResourceMethodDispatcher.invoke(AbstractJavaResourceMethodDispatcher.java:189)
at org.glassfish.jersey.server.model.internal.JavaResourceMethodDispatcherProvider$ResponseOutInvoker.doDispatch(JavaResourceMethodDispatcherProvider.java:176)
at org.glassfish.jersey.server.model.internal.AbstractJavaResourceMethodDispatcher.dispatch(AbstractJavaResourceMethodDispatcher.java:93)
at org.glassfish.jersey.server.model.ResourceMethodInvoker.invoke(ResourceMethodInvoker.java:478)
at org.glassfish.jersey.server.model.ResourceMethodInvoker.apply(ResourceMethodInvoker.java:400)
at org.glassfish.jersey.server.model.ResourceMethodInvoker.apply(ResourceMethodInvoker.java:81)
at org.glassfish.jersey.server.ServerRuntime$1.run(ServerRuntime.java:274)
at org.glassfish.jersey.internal.Errors$1.call(Errors.java:248)
at org.glassfish.jersey.internal.Errors$1.call(Errors.java:244)
at org.glassfish.jersey.internal.Errors.process(Errors.java:292)
at org.glassfish.jersey.internal.Errors.process(Errors.java:274)
at org.glassfish.jersey.internal.Errors.process(Errors.java:244)
at org.glassfish.jersey.process.internal.RequestScope.runInScope(RequestScope.java:266)
at org.glassfish.jersey.server.ServerRuntime.process(ServerRuntime.java:253)
at org.glassfish.jersey.server.ApplicationHandler.handle(ApplicationHandler.java:696)
at org.glassfish.jersey.servlet.WebComponent.serviceImpl(WebComponent.java:397)
at org.glassfish.jersey.servlet.WebComponent.service(WebComponent.java:349)
at org.glassfish.jersey.servlet.ServletContainer.service(ServletContainer.java:358)
at org.glassfish.jersey.servlet.ServletContainer.service(ServletContainer.java:312)
at org.glassfish.jersey.servlet.ServletContainer.service(ServletContainer.java:205)
at org.eclipse.jetty.ee10.servlet.ServletHolder.handle(ServletHolder.java:736)
at org.eclipse.jetty.ee10.servlet.ServletHandler$ChainEnd.doFilter(ServletHandler.java:1622)
at org.eclipse.jetty.ee10.servlet.ServletHandler$MappedServlet.handle(ServletHandler.java:1555)
at org.eclipse.jetty.ee10.servlet.ServletChannel.dispatch(ServletChannel.java:823)
at org.eclipse.jetty.ee10.servlet.ServletChannel.handle(ServletChannel.java:440)
at org.eclipse.jetty.ee10.servlet.ServletHandler.handle(ServletHandler.java:470)
at org.eclipse.jetty.server.handler.ContextHandler.handle(ContextHandler.java:1071)
at org.eclipse.jetty.server.handler.ContextHandlerCollection.handle(ContextHandlerCollection.java:181)
at org.eclipse.jetty.server.Server.handle(Server.java:182)
at org.eclipse.jetty.server.internal.HttpChannelState$HandlerInvoker.run(HttpChannelState.java:678)
at org.eclipse.jetty.server.internal.HttpConnection.onFillable(HttpConnection.java:416)
at org.eclipse.jetty.io.AbstractConnection$ReadCallback.succeeded(AbstractConnection.java:322)
at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:99)
at org.eclipse.jetty.io.SelectableChannelEndPoint$1.run(SelectableChannelEndPoint.java:53)
at org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.runTask(AdaptiveExecutionStrategy.java:480)
at org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.consumeTask(AdaptiveExecutionStrategy.java:443)
at org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.tryProduce(AdaptiveExecutionStrategy.java:293)
at org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.run(AdaptiveExecutionStrategy.java:201)
at org.eclipse.jetty.util.thread.ReservedThreadExecutor$ReservedThread.run(ReservedThreadExecutor.java:311)
at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:981)
at org.eclipse.jetty.util.thread.QueuedThreadPool$Runner.doRunJob(QueuedThreadPool.java:1211)
at org.eclipse.jetty.util.thread.QueuedThreadPool$Runner.run(QueuedThreadPool.java:1166)
at java.base/java.lang.Thread.run(Unknown Source)
Caused by: org.postgresql.util.PSQLException: ERROR: duplicate key value violates unique constraint "edc_jti_validation_pkey"

mxar-intracom-telecom · 2025-12-06T07:59:46Z

mxar-intracom-telecom
Dec 6, 2025
Author

The issue still exists:

The steps I followed:

1) I cleared the edc_jti_validation table in Consumer and Provider Postgres running:

DELETE FROM edc_jti_validation;

2) I restarted the pods:
consumer-identityhub,
provider-identityhub,
provider-qna-controlplane,
provider-catalog-server