---
title: Runbook — AUTH_TOKEN_MALFORMED (토큰 파싱 실패)
category: AUTH
error_codes: [AUTH_TOKEN_MALFORMED]
severity: P3
owner: oncall
last_updated: 2026-06-15
status: stub
---

# Runbook: AUTH_TOKEN_MALFORMED (`runbook://auth/token-malformed`)

## Symptoms

- HTTP 401 responses with `error.code=AUTH_TOKEN_MALFORMED`
- Token present but fails JWT parse (not 3-part, non-base64, etc.)

## Diagnosis

- Inspect raw Authorization header value in logs
- Check if token generation tooling has a bug

## Action

- Identify source of malformed tokens
- Fix or update client token generation

## Escalation

- Escalate if spike suggests infrastructure issue

---

> **Stub**: Phase D2 — author body after domain adoption. (feature-operational-runbook-contract D9)