Skip to content

JWT Token Is Invalid Exception While Snowflake Private Key Authentication Enabled

If you're encountering issues where GRANT or REVOKE operations aren't functioning properly when key-pair authentication enabled, follow these steps to troubleshoot:

Troubleshooting Steps

  1. Log in to the Diagnostics UI.
  2. Go to the Pods section and locate the Snowflake pod.
  3. Click on the Logs tab and check for Message entries related to failed queries in the Audit logs.
  4. In the Pod Explorer logs, look for errors such as: 
    net.snowflake.client.jdbc.SnowflakeSQLException: JWT token is invalid

Root Cause

This error typically indicates an issue with the JWT token, most commonly caused by an incomplete or incorrect key-pair configuration. It may occur if the generated key-pair has not been properly configured—either the public key has not been assigned to the Snowflake user, or the necessary privileges have not been granted to allow its use.

Review and verify all steps outlined in the official documentation - Configure key-pair authentication on Snowflake to ensure the key-pair has been generated and configured correctly.

Comments