Error SQLDriver JWT token is invalid

[robsonmisseno]

Hi community, I appreciate if someone has any idea how to solve this error "JWT token is invalid". It happens whenever I insert a Snowflake Macro in Alteryx Canvas. 

[alexnajm · Accepted solution]

Since this is a custom macro, it''s hard to say what's happening underneath the hood - I would contact the owner of the macro.

Saying that though, you likely need to set up your Snowflake driver probably with the correct JWT token:https://help.alteryx.com/current/en/designer/data-sources/snowflake.html#idp419916

[robsonmisseno]

Thanks, it is weird, the workflows work normally when saved in Gallery, the problem occurs in the Alteryx Designer only

[apathetichell · Accepted solution]

While I do not 'know' what is wrong --- I am fairly confident that the issue is one of... your local cannot reach either the underlying function (serverless/cloud/whatever) used to generate the the JWT (self generated JWT for Snowflake) --- or your local cannot reach the private key used to generate the the JWT. It is also possible that your local cannot access the thumbprint of the public key used to generate the JWT.

Could I fix this ----> 99% sure. Can I troubleshoot it with the paucity of information you've given. maybe?

[alexnajm]

@robsonmisseno the JWT token is probably valid in the Server machine and not your computer which is what explains why it works there -  as @apathetichell mentioned you need to get your local workflow to generate the JWT token properly

[apathetichell]

going one more here --- AFAIK --- Alteryx will not take in the JWT token to connect via in-db. It requires the the JWT auth to be set up in the ODBC 64 --- or probably DCM. You need to have to have your registry set up correctly, your drive set up correctly --- and access to the private key (when self-generating you'd also need the public thumbprint).

I've build JWT generators for Snowflake in Python and Node --- they aren't that complex --- but what you are posting isn't enough to fix your issue.

[robsonmisseno · Accepted solution]

I had a particular issue, but could solve doing this: 

A. System clock skew (very common)

Snowflake requires the token to arrive within 60 seconds of the issue time (iat). If your workstation/server clock is off (or the login is delayed), you’ll get JWT_TOKEN_INVALID_ISSUE_TIME. Sync your machine with NTP and retry. Also check for high CPU/disk or network latency that could delay the request.

[apathetichell]

interesting... was the code hosted locally (on your machine) or on a server/cloud?