[Bug] Data Import failed with Error invalid Token when importing data through Hubble UI.

[jturkar]

Bug Type (问题类型)

others (please comment below)

Before submit

• I had searched in the issues and found no similar issues.

Environment (环境信息)

• Server Version: v1.x.x
• Toolchain Version: v1.x.x
• Data Size: xx vertices, xx edges

Expected & Actual behavior (期望与实际表现)

Expected to load data through Hubble UI Using Import data feature

Vertex/Edge example (问题点 / 边数据举例)

Schema [VertexLabel, EdgeLabel, IndexLabel] (元数据结构)

[dosubot]

Hi @jturkar! I'm Dosu and I’m helping the hugegraph-toolchain team.

This looks like the same issue reported in #721 — data import via Hubble fails with Invalid token when StandardAuthenticator is enabled [1].

There are multiple contributing causes:

1. Random JWT key regenerated on every server restart — By default, HugeGraph server generates a new random JWT signing key at startup [2]. If the server restarts during an import, all previously issued tokens become invalid, causing TokenGenerator.verify() to throw Invalid token [3].

2. No token refresh in Hubble's import pipeline — Hubble reads the token once when the import task starts and reuses it for the entire duration with no refresh or re-authentication [4] [5]. Long-running imports are vulnerable to token expiration.

Recommended fix — Set a persistent JWT secret in your rest-server.properties so tokens survive server restarts:

auth.token_secret=YourPersistent32CharacterSecretKey

This is also the recommended mitigation for CVE-2024-43441 and should be applied to all v1.5.0+ deployments.

Immediate workaround — If you need to get data imported right away, temporarily disable authentication by removing the auth.authenticator config and PASSWORD environment variable [1].

Also ensure your toolchain version includes the auth API path fix from PR #689, which updated auth endpoints to be compatible with the 1.7.0 server.

To reply, just mention @dosu.

---

^{How did I do? Good | Irrelevant | Incorrect | Verbose | Hallucination | Report 🐛 | Other}