Skip to main content
Question

The public key identified by \"kid\" must correspond to the private key used for signing.

  • May 22, 2025
  • 1 reply
  • 14 views

Forum|alt.badge.img

com.q1labs.semsources.sources.boxrestapi.api.BoxRESTAPIInstance: [DEBUG] Unable to obtain an access token. Response status [400] from Box REST API. Error Response:
{"error":"invalid_grant","error_description":"Signature verification error. The public key identified by \"kid\" must correspond to the private key used for signing."}

1 reply

Forum|alt.badge.img

Hi There!

It looks like you already got this answered via our support team, but for others who find this and want guidance, you need to create a new public/private key pair in the developer console and use the new config file for authentication. 

Thanks, 

Alex, Box Developer Advocate