Intermittent Invalid Session Errors with Okta SDK (OAuth) in Spring Boot on AWS EBS

[cchaubey]

Describe the bug?

We are experiencing intermittent "invalid session" errors in our Spring Boot application running on AWS Elastic Beanstalk (EBS). This application utilizes the Okta SDK with an OAuth 2.0 configuration to authenticate calls to Okta APIs.
When the application is redeployed using an Okta API token configuration instead of OAuth 2.0, the issue does not occur.

Mar 7 11:02:55 ip-10-82-154-53 web[150640]: 2025-03-07T11:02:55.574Z TRACE 150640 --- [] [nio-8080-exec-9] o.s.web.method.HandlerMethod : Arguments: [ApiException{code=403, responseHeaders={Keep-Alive=[timeout=5, max=100], Transfer-Encoding=[chunked], Server=[nginx], Connection=[Keep-Alive], p3p=[CP="HONK"], Date=[Fri, 07 Mar 2025 11:02:55 GMT], set-cookie=[sid="";Version=1;Path=/;Max-Age=0, xids="";Version=1;Path=/;Max-Age=0, autolaunch_triggered=""; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/, activate_ca_modal_triggered=""; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/], Strict-Transport-Security=[max-age=315360000; includeSubDomains], x-xss-protection=[0], x-content-type-options=[nosniff], x-okta-request-id=[Z8rSXyeHyBYXMKc7TdLFkgAACc0], Vary=[Accept-Encoding], content-security-policy-report-only=[frame-ancestors 'self'; report-uri https://oktacsp.report-uri.com/r/t/csp/reportOnly; report-to csp], Content-Type=[application/json]}, responseBody='{"errorCode":"E0000005","errorSummary":"Invalid session","errorLink":"E0000005","errorId":"oaelZ1I-QI1RjKjJtRRkEvVrg","errorCauses":[]}'}]
Mar 7 11:02:55 ip-10-82-154-53 web[150640]: 2025-03-07T11:02:55.574Z ERROR 150640 --- [] [nio-8080-exec-9] c.w.i.u.config.GlobalExceptionHandler : {"errorCode":"E0000005","errorSummary":"Invalid session","errorLink":"E0000005","errorId":"oaelZ1I-QI1RjKjJtRRkEvVrg","errorCauses":[]} : {"errorCode":"E0000005","errorSummary":"Invalid session","errorLink":"E0000005","errorId":"oaelZ1I-QI1RjKjJtRRkEvVrg","errorCauses":[]}
Mar 7 11:02:55 ip-10-82-154-53 web[150640]: 2025-03-07T11:02:55.574Z DEBUG 150640 --- [] [nio-8080-exec-9] o.s.w.s.m.m.a.HttpEntityMethodProcessor : Using 'application/json', given [application/json, text/plain, /] and supported [application/json, application/*+json]

What is expected to happen?

We don't expect any Intermitted issue from SDK.

What is the actual behavior?

Getting Intermitted issue after 2 days of deployment.

Reproduction Steps?

Deploy springboot app in AWS EBS which uses okta-sdk-java , Oauth config to connect with okta server.

Additional Information?

No response

Java Version

<java.version>17</java.version>

SDK Version

20.0.1

OS version

No response

[prachi-okta]

Hi, thanks for reporting this! I will be taking a look at this.