User creation successful but password not updated

[Abhilash-Kadu]

I am setting up the LMS in my local machine. I am using Sunbird Lern's userorg and sunbird-auth service. The Keycloak version is 7.0.1. I am able to create a user successfully but cannot set password which is needed for user login.

• Endpoints used:

localhost:9000/v1/user/create
localhost:9000/v1/ssouser/create

• Request:

{
"request": {
"firstName": "test",
"lastName": "user",
"channel": "sunbird",
"userName": "testuser",
"email":"[email protected]",
"emailVerified": true,
"password": "Test@123"
}
}

• Response:

{
"id": "api.user.create",
"ver": "v1",
"ts": "2023-08-18 08:15:49:732+0530",
"params": {
"resmsgid": "8269db61-0b36-4236-9d0d-19d449e9e9a1",
"msgid": "8269db61-0b36-4236-9d0d-19d449e9e9a1",
"err": null,
"status": "SUCCESS",
"errmsg": null
},
"responseCode": "OK",
"result": {
"userId": "01430921-f9dd-4c2d-9401-5bd31ecc22f5",
"response": "SUCCESS",
"err_msg": "User is created but password couldn't be updated.",
"errors": []
}
}

• Error while setting password:

javax.ws.rs.BadRequestException: HTTP 400 Bad Request

• Screenshot of error details:
  

[Abhilash-Kadu]

Logs for the same

{"timestamp":"2023-08-18T09:30:33.695+05:30","msg":"{"eid":"ERROR","ets":1692331233695,"ver":"3.0","mid":"87fb4491-66a2-4848-99a2-6b7c0b0449fe","actor":{"id":"ca5c8f80-b660-46ac-ac29-944a6c86ec48","type":"User"},"context":{"channel":"0137038836873134080","pdata":{"id":"local.sunbird.learning.service","pid":"learning-service","ver":"5.3.0"},"env":"User","cdata":[{"id":"87fb4491-66a2-4848-99a2-6b7c0b0449fe","type":"Request"}],"rollup":{}},"edata":{"err":"UOS_0069","stacktrace":"updatePassword: Exception occurred: org.jboss.resteasy.client.jaxrs.internal.ClientInvocation.handleErrorStatus(ClientInvocation.java:212)org.jboss.resteasy.client.jaxrs.internal.ClientInvocation.extractResult(ClientInvocation.java:189)org.jboss.resteasy.client.jaxrs.internal.proxy.extractors.BodyEntityExtractor.extractEntity(BodyEntityExtractor.java:60)org.jboss.resteasy.client.jaxrs.internal.proxy.ClientInvoker.invoke(ClientInvoker.java:107)org.jboss.resteasy.client.jaxrs.internal.proxy.ClientProxy.invoke(ClientProxy.java:76)com.sun.proxy.$Proxy57.grantToken(Unknown Source)org.keycloak.admin.client.token.TokenManager.grantToken(TokenManager.java:89)org.keycloak.admin.client.token.TokenManager.getAccessToken(TokenManager.java:69)org.keycloak.admin.client.token.TokenManager.getAccessTokenString(TokenManager.java:64)org.keycloak.admin.client.resource.BearerAuthFilter.filter(BearerAuthFilter.java:52)org.jboss.resteasy.client.jaxrs.internal.ClientInvocation.invoke(ClientInvocation.java:431)org.jboss.resteasy.client.jaxrs.internal.proxy.ClientInvoker.invoke(ClientInvoker.java:105)org.jboss.resteasy.client.jaxrs.internal.proxy.ClientProxy.invoke(ClientProxy.java:76)com.sun.proxy.$Proxy73.resetPassword(Unknown Source)org.sunbird.sso.impl.KeyCloakServiceImpl.updatePassword(KeyCloakServiceImpl.java:75)org.sunbird.util.user.UserUtil.updatePassword(UserUtil.java:298)org.sunbird.service.user.impl.SSOUserServiceImpl.createUserAndPassword(SSOUserServiceImpl.java:99)org.sunbird.actor.user.SSOUserCreateActor.processSSOUser(SSOUserCreateActor.java:117)org.sunbird.actor.user.SSOUserCreateActor.createSSOUser(SSOUserCreateActor.java:89)org.sunbird.actor.user.SSOUserCreateActor.onReceive(SSOUserCreateActor.java:61)org.sunbird.actor.core.BaseActor.onReceive(BaseActor.java:21)akka.actor.UntypedAbstractActor$$anonfun$receive$1.applyOrElse(AbstractActor.scala:291)akka.actor.Actor$class.aroundReceive$$$capture(Actor.scala:517)akka.actor.Actor$class.aroundReceive(Actor.scala)akka.actor.AbstractActor.aroundReceive(AbstractActor.scala:180)akka.actor.ActorCell.receiveMessage$$$capture(ActorCell.scala:588)akka.actor.ActorCell.receiveMessage(ActorCell.scala)akka.actor.ActorCell.invoke(ActorCell.scala:557)akka.dispatch.Mailbox.processMailbox(Mailbox.scala:258)akka.dispatch.Mailbox.run(Mailbox.scala:225)akka.dispatch.Mailbox.exec(Mailbox.scala:235)akka.dispatch.forkjoin.ForkJoinTask.doExec(ForkJoinTask.java:260)akka.dispatch.forkjoin.ForkJoinPool$WorkQueue.runTask(ForkJoinPool.java:1339)","errtype":"api_access","requestid":"87fb4491-66a2-4848-99a2-6b7c0b0449fe"}}","lname":"TelemetryEventLogger","tname":"application-akka.actor.most-used-one-dispatcher-135","level":"INFO","HOSTNAME":"prihir","application.home":"/home/prihir/work/Tekdi_Repo/DG/Repositories/sunbird/userorg-service/controller"}
{"timestamp":"2023-08-18T09:30:33.696+05:30","msg":"ProducerConfig values: \n\tmetric.reporters = []\n\tmetadata.max.age.ms = 300000\n\treconnect.backoff.ms = 50\n\tsasl.kerberos.ticket.renew.window.factor = 0.8\n\tbootstrap.servers = [SUNBIRD_KAFKA_URL_IS_UNDEFINED]\n\tssl.keystore.type = JKS\n\tsasl.mechanism = GSSAPI\n\tmax.block.ms = 0\n\tinterceptor.classes = null\n\tssl.truststore.password = null\n\tclient.id = prihir-default-logback-relaxed\n\tssl.endpoint.identification.algorithm = null\n\trequest.timeout.ms = 30000\n\tacks = 0\n\treceive.buffer.bytes = 32768\n\tssl.truststore.type = JKS\n\tretries = 0\n\tssl.truststore.location = null\n\tssl.keystore.password = null\n\tsend.buffer.bytes = 131072\n\tcompression.type = none\n\tmetadata.fetch.timeout.ms = 60000\n\tretry.backoff.ms = 100\n\tsasl.kerberos.kinit.cmd = /usr/bin/kinit\n\tbuffer.memory = 33554432\n\ttimeout.ms = 30000\n\tkey.serializer = class org.apache.kafka.common.serialization.ByteArraySerializer\n\tsasl.kerberos.service.name = null\n\tsasl.kerberos.ticket.renew.jitter = 0.05\n\tssl.trustmanager.algorithm = PKIX\n\tblock.on.buffer.full = false\n\tssl.key.password = null\n\tsasl.kerberos.min.time.before.relogin = 60000\n\tconnections.max.idle.ms = 540000\n\tmax.in.flight.requests.per.connection = 5\n\tmetrics.num.samples = 2\n\tssl.protocol = TLS\n\tssl.provider = null\n\tssl.enabled.protocols = [TLSv1.2, TLSv1.1, TLSv1]\n\tbatch.size = 16384\n\tssl.keystore.location = null\n\tssl.cipher.suites = null\n\tsecurity.protocol = PLAINTEXT\n\tmax.request.size = 1048576\n\tvalue.serializer = class org.apache.kafka.common.serialization.ByteArraySerializer\n\tssl.keymanager.algorithm = SunX509\n\tmetrics.sample.window.ms = 30000\n\tpartitioner.class = class org.apache.kafka.clients.producer.internals.DefaultPartitioner\n\tlinger.ms = 15000\n","lname":"org.apache.kafka.clients.producer.ProducerConfig","tname":"application-akka.actor.most-used-one-dispatcher-135","level":"INFO","HOSTNAME":"prihir","application

[Abhilash-Kadu]

The issue is resolved by deleting the predefined lms client in Sunbird realm of Keycloak and again create it. The newly created client has to be provided proper roles and permissions as described in Sunbird Keycloak documentation. The environment variable values has to be updated and the userOrg service has to be redeployed. Thank you.