# OIDC Authentication troubleshooting issue: unable to view log details

**URL:** <https://forum.opensearch.org/t/oidc-authentication-troubleshooting-issue-unable-to-view-log-details/2800>\
**Category:** Security\
**Created:** [May 15, 2020, 10:11am UTC](https://forum.opensearch.org/t/oidc-authentication-troubleshooting-issue-unable-to-view-log-details/2800 "2020-05-15T10:11:02Z")\
**Posts on this page:** 1\
**Showing post:** 4

<div class="post-metadata">

**Author:** ![dfournout](https://avatars.discourse-cdn.com/v4/letter/d/8e8cbc/32.png) [@dfournout](https://forum.opensearch.org/u/dfournout)\
**Post date:** [May 25, 2020, 10:44am UTC](https://forum.opensearch.org/t/oidc-authentication-troubleshooting-issue-unable-to-view-log-details/2800/4 "2020-05-25T10:44:32Z")

</div>

> [@dfournout](#):
>
> `RS256`

The message is not very clear “INVALID\_KEY” but as it has been raised by checkSignatureKeySize, I’ve been able to find that the minimum key length authorized is 2048 ( see code [https://github.com/apache/cxf/blob/master/rt/rs/security/jose-parent/jose/src/main/java/org/apache/cxf/rs/security/jose/jws/JwsUtils.java](https://github.com/apache/cxf/blob/master/rt/rs/security/jose-parent/jose/src/main/java/org/apache/cxf/rs/security/jose/jws/JwsUtils.java) ).  
So we have to change the rsa key of our keycloak server which is a 1024 bit length.

---

_[View the full topic](https://forum.opensearch.org/t/oidc-authentication-troubleshooting-issue-unable-to-view-log-details/2800)._