clean-architecture-backend-template/docs/runbooks/auth-issuer-mismatch.md

title, category, error_codes, severity, owner, last_updated, status

title	category	error_codes	severity	owner	last_updated	status
Runbook — AUTH_ISSUER_MISMATCH (발급자 불일치)	AUTH	AUTH_ISSUER_MISMATCH	P2	oncall	2026-06-15	stub

Runbook: AUTH_ISSUER_MISMATCH (runbook://auth/issuer-mismatch)

Symptoms

• HTTP 401 with error.code=AUTH_ISSUER_MISMATCH
• Token iss claim does not match configured expected issuer

Diagnosis

• Compare token iss against spring.security.oauth2.resourceserver.jwt.issuer-uri
• Check if IdP environment changed

Action

• Update issuer config if IdP migrated
• Reject tokens from unexpected issuers

Escalation

• Escalate to platform-security if unexpected issuer detected

---

Stub: Phase D2 — author body after domain adoption. (feature-operational-runbook-contract D9)