init: 클린 아키텍처 백엔드

2026-07-24 14:29:36 +09:00
parent 9eed16d097
commit 821fe00c32
971 changed files with 74769 additions and 1 deletions
@@ -0,0 +1,34 @@
+---
+title: Runbook — AUTH_TOKEN_INVALID_SIGNATURE (서명 검증 실패)
+category: AUTH
+error_codes: [AUTH_TOKEN_INVALID_SIGNATURE]
+severity: P1
+owner: oncall
+last_updated: 2026-06-15
+status: stub
+---
+
+# Runbook: AUTH_TOKEN_INVALID_SIGNATURE (`runbook://auth/token-invalid-signature`)
+
+## Symptoms
+
+- HTTP 401 with `error.code=AUTH_TOKEN_INVALID_SIGNATURE`
+- `log_level=ERROR` — may indicate forged tokens or wrong signing key
+
+## Diagnosis
+
+- Check if JWKS endpoint returned a new key set
+- Check for token forgery attempts in logs
+
+## Action
+
+- Verify JWKS key IDs match token headers
+- Alert security team if forgery suspected
+
+## Escalation
+
+- Immediate P1 escalation if forgery indicators present
+
+---
+
+> **Stub**: Phase D2 — author body after domain adoption. (feature-operational-runbook-contract D9)