# \[Complete\]EVE SSO JWT Token update on 1 November 11:00 UTC

**URL:** <https://forums.eveonline.com/t/complete-eve-sso-jwt-token-update-on-1-november-11-00-utc/424277>\
**Category:** Third Party Developers\
**Created:** [October 18, 2023, 5:07pm UTC](https://forums.eveonline.com/t/complete-eve-sso-jwt-token-update-on-1-november-11-00-utc/424277 "2023-10-18T17:07:16Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![CCP\_Zelus](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/ccp_zelus/32/382070_2.png) [@CCP\_Zelus](https://forums.eveonline.com/u/CCP_Zelus)\
**Post date:** [October 18, 2023, 5:07pm UTC](https://forums.eveonline.com/t/complete-eve-sso-jwt-token-update-on-1-november-11-00-utc/424277/1 "2023-10-18T17:07:16Z")

</div>

Greetings 3rd party developers!

Just wanted to give notice of an update heading your way during downtime:

Tokens will now include the URL schema in the ‘iss’ (issuer) claim, aligning more closely with relevant specifications.

As an example, effectively the `iss` claim of the JWT token will change from `login.eveonline.com` to `https://login.eveonline.com`

This has been a part of the existing esi documentation here as point 2: [Validating JWT tokens from the EVE SSO | esi-docs](https://docs.esi.evetech.net/docs/sso/validating_eve_jwt.html#validate-the-issuer) so it should be included in the workflow of your app already, otherwise, it may need some adjustment to accommodate this.

Apologies for the late notice of this update, we just wanted to ensure it was communicated prior to the change.

Edit:  
11:25 UTC - 19th October: This change was implemented at 11:00 UTC, however, it has been temporarily reverted to resolve additional underlying issues. This deployment has been postponed for now. I’ll update this post once a new date/time is established.

17:00 UTC - 27th October: This is going to be re-run again on Monday 30th October at 11:00 UTC. Updating the thread title to reflect this as well.

10:10 UTC - 30th October: This is being postponed one more day for now until the 31st of October to ensure network upgrades go as smoothly as possible.

11:15 UTC - 31st October: This change was implemented at 11:00 UTC, however, it has been temporarily reverted to resolve additional underlying issues. This deployment has been postponed to 1 November 2023.

11:24 UTC - 1st November: This update is complete.

---

<div class="post-metadata">

**Author:** ![Ariel\_Rin](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/ariel_rin/32/380716_2.png) [@Ariel\_Rin](https://forums.eveonline.com/u/Ariel_Rin)\
**Post date:** [October 19, 2023, 6:23am UTC](https://forums.eveonline.com/t/complete-eve-sso-jwt-token-update-on-1-november-11-00-utc/424277/2 "2023-10-19T06:23:34Z")

</div>

Django-ESI 5.0.0 Supports this new Schema, previous versions had a bug that would have prevented our fallback mechanism from working.

Alliance Auth 3.7.1 ships with Django-ESI 5.0.0, but any 3.x version can be fixed with an update to Django-ESI 5.0.0

> **[5.0.0 · Tags · Alliance Auth / django-esi · GitLab](https://gitlab.com/allianceauth/django-esi/-/tags/5.0.0)**
>
> Django app for accessing the EVE Swagger Interface (ESI) - https://django-esi.readthedocs.io/en/latest/

> **[v3.7.1 · Alliance Auth / allianceauth · GitLab](https://gitlab.com/allianceauth/allianceauth/-/releases/v3.7.1)**
>
> Dependency Bump Django-ESI minimum to \>=5.0.0 Support for HTTPS Schema JWT Tokens, https://github.com/ccpgames/sso-issues/issues/41,

---

<div class="post-metadata">

**Author:** ![oOCKYOo](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/oockyoo/32/390969_2.png) [@oOCKYOo](https://forums.eveonline.com/u/oOCKYOo)\
**Post date:** [October 19, 2023, 2:55pm UTC](https://forums.eveonline.com/t/complete-eve-sso-jwt-token-update-on-1-november-11-00-utc/424277/3 "2023-10-19T14:55:42Z")

</div>

Hi, something else I encountered recently is tokens not working when every available scope is used. Tokens are issued during OAuth process but fail when used to make calls to ESI.

---

<div class="post-metadata">

**Author:** ![Joao\_Neto](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/joao_neto/32/382825_2.png) [@Joao\_Neto](https://forums.eveonline.com/u/Joao_Neto)\
**Post date:** [October 20, 2023, 9:51am UTC](https://forums.eveonline.com/t/complete-eve-sso-jwt-token-update-on-1-november-11-00-utc/424277/4 "2023-10-20T09:51:36Z")

</div>

This is a known bug: [Authorization failure when token is too long · Issue #1089 · esi/esi-issues · GitHub](https://github.com/esi/esi-issues/issues/1089)

You can drop some scopes, which don’t do anything. See [CarbonAlabel’s comment](https://github.com/esi/esi-issues/issues/1089#issuecomment-778840884) in the link above

---

<div class="post-metadata">

**Author:** ![CCP\_Zelus](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/ccp_zelus/32/382070_2.png) [@CCP\_Zelus](https://forums.eveonline.com/u/CCP_Zelus)\
**Post date:** [October 27, 2023, 5:12pm UTC](https://forums.eveonline.com/t/complete-eve-sso-jwt-token-update-on-1-november-11-00-utc/424277/5 "2023-10-27T17:12:01Z")

</div>

I just updated the change log and post title - this will be re-run again during downtime on Monday 30 October.

There is also a network upgrade scheduled for the same time - a separate thread has been set up to track potential downtime [as well.](https://forums.eveonline.com/t/extended-downtime-notification-30-october-2023/) Any unexpected downtime messaging will be relayed there.

Upon conclusion of the update, I’ll relay any related messages to this thread.

---

<div class="post-metadata">

**Author:** ![Nashez](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/nashez/32/391930_2.png) [@Nashez](https://forums.eveonline.com/u/Nashez)\
**Post date:** [October 28, 2023, 12:12pm UTC](https://forums.eveonline.com/t/complete-eve-sso-jwt-token-update-on-1-november-11-00-utc/424277/6 "2023-10-28T12:12:52Z")

</div>

Is this anything to do with incursions being broken?

---

<div class="post-metadata">

**Author:** ![CCP\_Zelus](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/ccp_zelus/32/382070_2.png) [@CCP\_Zelus](https://forums.eveonline.com/u/CCP_Zelus)\
**Post date:** [October 30, 2023, 10:11am UTC](https://forums.eveonline.com/t/complete-eve-sso-jwt-token-update-on-1-november-11-00-utc/424277/7 "2023-10-30T10:11:25Z")

</div>

Morning everyone.

This has been postponed one more day to the 31st of October, to allow for network upgrades scheduled for today to go as smoothly as possible.

I’ll once again update the thread tomorrow following the switchover.

---

<div class="post-metadata">

**Author:** ![CCP\_Zelus](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/ccp_zelus/32/382070_2.png) [@CCP\_Zelus](https://forums.eveonline.com/u/CCP_Zelus)\
**Post date:** [October 31, 2023, 5:34pm UTC](https://forums.eveonline.com/t/complete-eve-sso-jwt-token-update-on-1-november-11-00-utc/424277/8 "2023-10-31T17:34:23Z")

</div>

Hey everyone,

This was once again implemented during downtime on 31 October but rolled back.

This is going to be attempted during an extended downtime on Wednesday 1 November.

The initial post will be updated to reflect this change.

---

<div class="post-metadata">

**Author:** ![Herpaderp\_Aldent](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/herpaderp_aldent/32/392526_2.png) [@Herpaderp\_Aldent](https://forums.eveonline.com/u/Herpaderp_Aldent)\
**Post date:** [November 1, 2023, 1:34pm UTC](https://forums.eveonline.com/t/complete-eve-sso-jwt-token-update-on-1-november-11-00-utc/424277/9 "2023-11-01T13:34:24Z")

</div>

Late to the party but anyone using [GitHub - SocialiteProviders/Eveonline: [READ ONLY] Subtree split of the SocialiteProviders/Eveonline Provider (see SocialiteProviders/Providers)](https://github.com/SocialiteProviders/Eveonline) such as [https://seatplus.net/](https://seatplus.net/) is not affected by the change.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/eveonline/original/3X/4/1/41ec4921cbaca7a6f9ea556e7cc20018461eae5e.png) [@system](https://forums.eveonline.com/u/system)\
**Post date:** [January 30, 2024, 1:35pm UTC](https://forums.eveonline.com/t/complete-eve-sso-jwt-token-update-on-1-november-11-00-utc/424277/10 "2024-01-30T13:35:10Z")

</div>

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.
