Katalyst: Error: invalid_grant: Token is not active

Description

• A user in Katalyst receives a server‑side error when performing an operation, with a stack trace like:
  com.acdlabs.spectrus_portal_common.shared.exceptions.BaseServerException: invalid_grant: Token is not active
• The UI shows a generic “Error occurred on server side when performing rpc action. Please refer stack trace to your admin.”

Solution

• This error indicates that the OAuth or authentication token used by the Katalyst server for a downstream service (e.g., identity provider, external API) is no longer valid or active.
• Steps to resolve:
  • Verify the configured identity provider / OAuth server settings:
    • Client ID and secret.
    • Token endpoint and scopes.
  • Check token lifetime and refresh configuration:
    • Ensure refresh tokens are obtained and used correctly.
    • Confirm the application can renew tokens before they expire.
  • Re‑authenticate or re‑authorize the Katalyst application with the identity provider if a consent or configuration change invalidated tokens.
• After correcting token handling:
  • Restart the Katalyst application if required.
  • Have the user log out and log in again, then repeat the action that previously failed.
• If using an enterprise SSO/IdP, coordinate with identity/security teams to:
  • Confirm token policies.
  • Whitelist the Katalyst client application as needed.