Posted by I run HCL Connections 8 CR15 with OIDC authentication against Keycloak.
I added Collabora as the new Editor in our test environment. Which seemed to work very well for the first test session.
The test users experienced a strange behaviour after 10 minutes. The editor would just show the collabora outline and a white screen.
No errors in the browser.
The container showed a 401 error. The SystemOut.log and traces for com.ibm.ws.security.oidc.*=all showed some errors:
CWTAI2050E: The JSON Web Token (JWT) or ID token is not valid because the issued at [iat] claim specifies a date later than the current time.
Which was a bit confusing at first glance. I’m able to work in connections for several hours without re-authenticating. Increasing the access_token timeout in keycloak solved the issue so far.
You can get the access token from the your browser’s developer tools network tab. Filter by ‘cool/ws’ an then it’s part of the url. Copy that value to https://jwt.io if you want to decode it.