35 lines
792 B
Markdown
35 lines
792 B
Markdown
---
|
|
title: Runbook — AUTH_ISSUER_MISMATCH (발급자 불일치)
|
|
category: AUTH
|
|
error_codes: [AUTH_ISSUER_MISMATCH]
|
|
severity: P2
|
|
owner: oncall
|
|
last_updated: 2026-06-15
|
|
status: stub
|
|
---
|
|
|
|
# Runbook: AUTH_ISSUER_MISMATCH (`runbook://auth/issuer-mismatch`)
|
|
|
|
## Symptoms
|
|
|
|
- HTTP 401 with `error.code=AUTH_ISSUER_MISMATCH`
|
|
- Token `iss` claim does not match configured expected issuer
|
|
|
|
## Diagnosis
|
|
|
|
- Compare token `iss` against `spring.security.oauth2.resourceserver.jwt.issuer-uri`
|
|
- Check if IdP environment changed
|
|
|
|
## Action
|
|
|
|
- Update issuer config if IdP migrated
|
|
- Reject tokens from unexpected issuers
|
|
|
|
## Escalation
|
|
|
|
- Escalate to platform-security if unexpected issuer detected
|
|
|
|
---
|
|
|
|
> **Stub**: Phase D2 — author body after domain adoption. (feature-operational-runbook-contract D9)
|