[Bug]: CDA Test Authentication Broken

[David-LRL]

Describe the bug

PKCE Authorization option in not available in CDA Test and RTS cannot post and returns 401 errors.

WARNING: Error storing time window from 2026-07-09T10:00Z[UTC] to 2026-07-18T10:00Z[UTC] for time series Taylorsville.Flow-Outflow.Inst.1Hour.0.National-CWMS-Forecast: Unauthorized request to: POST https://cwms-data-test.cwbi.us/cwms-data/timeseries?create-as-lrts=true&store-rule=DELETE_INSERT&override-protection=false
Error code: 401

API keys appear to still work.

Expected behavior

CDA Test Swagger should have Open Connect PKCE option and post in RTS 3.6 should authenticate using https://identity.cwbi.mil/auth/realms/cwbi/.well-known/openid-configuration auth URL.

To Reproduce

Go to https://cwms-data-test.cwbi.us/cwms-data/swagger-ui
Click Authorization
You will see lack of Open Connect PKCE

Additionally in RTS if you try to set up a CDA Test Connection when you select Open Connect it returns an error and does not self populate the Auth URL

Priority

Medium

Logs/Incident Identifier

No response

CURL Commands

CDA Version

2026.05.12-testf OAS 3.0

Additional context

No response

[krowvin]

@David-LRL

Just to confirm,

if you completely close the browser and then return to the swagger page and cac auth when it first opens does the PKCE option present?

Edit: your comment on RTS, if the above does work then I'm not sure how that would tie into the issue in RTS.

[David-LRL]

In a new browser instance I'm never prompted for cac auth upon load and "Available authorizations" options are still restricted to ApiKey (apiKey) and CwmsAAACacAuth (apiKey) in CDA Test when I click the Authorize. No PKCE option.

[David-LRL]

If I go to CDA Test’s Swagger in a new browser session I’m not prompted for a cac auth when it first opens and the PKCE option is NOT present. Only options for authorization are ApiKey (apiKey) and CwmsAAACacAuth (apiKey). David Wilson US Army Corps of Engineers Louisville District Water Management 600 Dr Martin Luther King Jr Pl Louisville, KY 40202 502-315-6389 From: Charles Graham ***@***.***> Sent: Monday, July 13, 2026 4:26 PM To: USACE/cwms-data-api ***@***.***> Cc: Wilson, David L CIV USARMY CELRL (USA) ***@***.***>; Mention ***@***.***> Subject: [Non-DoD Source] Re: [USACE/cwms-data-api] [Bug]: CDA Test Authentication Broken (Issue #1836) [Image removed by sender.]krowvin left a comment (USACE/cwms-data-api#1836)<BLOCKEDhttps://github.com/USACE/cwms-data-api/issues/1836#issuecomment-4962349202> @David-LRL<BLOCKEDhttps://github.com/David-LRL> Just to confirm, if you completely close the browser and then return to the swagger page and cac auth when it first opens does the PKCE option present? — Reply to this email directly, view it on GitHub<BLOCKEDhttps://github.com/USACE/cwms-data-api/issues/1836?email_source=notifications&email_token=AWGYBPQQRMZH6NVFYMDX4AL5EVATXA5CNFSNUABFM5UWIORPF5TWS5BNNB2WEL2JONZXKZKDN5WW2ZLOOQXTIOJWGIZTIOJSGAZKM4TFMFZW63VHNVSW45DJN5XKKZLWMVXHJLDGN5XXIZLSL5RWY2LDNM#issuecomment-4962349202>, or unsubscribe<BLOCKEDhttps://github.com/notifications/unsubscribe-auth/AWGYBPWFL45R2RARWDRYIDL5EVATXAVCNFSNUABFKJSXA33TNF2G64TZHMZTAMRRGAYDKOBSHNEXG43VMU5TIOBXGY2DMNJQGAY2C5QC>. Triage notifications, keep track of coding agent tasks and review pull requests on the go with GitHub Mobile for iOS<BLOCKEDhttps://github.com/notifications/mobile/ios/AWGYBPX4U46GQU3Z27QZRZT5EVATXA5CNFSNUABFM5UWIORPF5TWS5BNNB2WEL2JONZXKZKDN5WW2ZLOOQXTIOJWGIZTIOJSGAZKM4TFMFZW63VHNVSW45DJN5XKKZLWMVXHJKTGN5XXIZLSL5UW64Y> and Android<BLOCKEDhttps://github.com/notifications/mobile/android/AWGYBPQJDMJEBFGYFBAAOTT5EVATXA5CNFSNUABFM5UWIORPF5TWS5BNNB2WEL2JONZXKZKDN5WW2ZLOOQXTIOJWGIZTIOJSGAZKM4TFMFZW63VHNVSW45DJN5XKKZLWMVXHJLTGN5XXIZLSL5QW4ZDSN5UWI>. Download it today! You are receiving this because you were mentioned.Message ID: ***@***.***>