Apikey Authenticator failed due to webservice token issue

[qifeng-bai]

Spatial including hub and service has to support apiKey since the external holders are relaying on it. We cannot remove the apiKey support from spatial at this moment.

after we configured webservice.jwt section in spatial-service config, When spatial-hub calls spatial-service via apiKey, it reports a 'invalid client' error from

https://github.com/AtlasOfLivingAustralia/ala-security-project/blob/43a1cc93baa3d68bacf975caf5e1ddda42d441eb/ala-ws-security/src/main/java/au/org/ala/ws/security/authenticator/AlaApiKeyAuthenticator.java#L79

The error message is :
rg.pac4j.core.exception.TechnicalException: Bad token response, error=invalid_client, description=null ... at au.org.ala.ws.tokens.TokenClient.executeTokenRequest(TokenClient.groovy:37)

However, after we removed the webservice.jwt section from spatial-service config, it works.

We can reproduce error from Spatial-hub -> Add to map -> Area -> import KML

It may be linked to this issue as well: AtlasOfLivingAustralia/spatial-hub#467