Last Modified: Oct 01, 2026
Affected Product(s):
BIG-IP APM
Known Affected Versions:
17.1.3.4, 17.1.3.5
Opened: Sep 30, 2026 Severity: 5-Cosmetic
When BIG-IP APM is configured with an Access Policy that includes an OAuth Client (or OAuth Scope) item, the following error-level messages may appear repeatedly in the /var/log/apm log file, once per OAuth login attempt: err apmd[<pid>]: 01490000:3: HTTPParser.cpp func: "parsePostParam()" line: <n> Msg: Duplicate entry found for [oauth-jwt-result] old value [0] new value [0] err apmd[<pid>]: 01490000:3: HTTPParser.cpp func: "parsePostParam()" line: <n> Msg: Duplicate entry found for [crypto-match-jwk-config] old value [/Common/<jwk-config>] new value [/Common/<jwk-config>] err apmd[<pid>]: 01490000:3: HTTPParser.cpp func: "parsePostParam()" line: <n> Msg: Duplicate entry found for [alg] old value [<n>] new value [<n>] These messages appear even though the OAuth Client authentication completes successfully, and end users are not affected
This is a cosmetic logging issue only; there is no impact on OAuth Client functionality, and end users authenticate successfully. However, because these messages are logged at ERR severity, external log monitoring, SIEM, or SOC tooling that alerts on ERR-level BIG-IP log entries may generate unnecessary false-positive alerts
This occurs on an Access Policy that uses an OAuth Client agent, where the BIG-IP system's internal cryptographic offload process verifies the ID token's JWT signature. This condition is met whenever an end user completes an OAuth login through the Access Policy (redirect to the authorization server, return with an authorization code, and token exchange)
None
None