Improve Error Message When Incorrect Passphrase is Provided for Private Key

[amarc-sudo]

Hello,

First of all, thank you for this bundle and for maintaining it over the years—it’s been a great help!

I’ve encountered an issue where, if the environment variable contains an incorrect passphrase for decrypting the private key used to sign JWTs, no explicit error is thrown. Instead, it only notifies us that the JWT cannot be signed.

Here is the error message:

Uncaught PHP Exception Lexik\Bundle\JWTAuthenticationBundle\Exception\JWTEncodeFailureException: "Unable to create a signed JWT from the given configuration." at /usr/local/var/www/html/vendor/lexik/jwt-authentication-bundle/Encoder/LcobucciJWTEncoder.php line 38

Steps to Reproduce

1. Generate keys with a passphrase.
2. Store an incorrect passphrase in the environment variable.
3. Attempt to sign a JWT.

The error message could be improved to explicitly indicate that the passphrase is incorrect, making it easier to debug such cases.

Thank you!