---
title: Runbook — AUTH_ISSUER_MISMATCH (발급자 불일치)
category: AUTH
error_codes: [AUTH_ISSUER_MISMATCH]
severity: P2
owner: oncall
last_updated: 2026-06-15
status: stub
---

# Runbook: AUTH_ISSUER_MISMATCH (`runbook://auth/issuer-mismatch`)

## Symptoms

- HTTP 401 with `error.code=AUTH_ISSUER_MISMATCH`
- Token `iss` claim does not match configured expected issuer

## Diagnosis

- Compare token `iss` against `spring.security.oauth2.resourceserver.jwt.issuer-uri`
- Check if IdP environment changed

## Action

- Update issuer config if IdP migrated
- Reject tokens from unexpected issuers

## Escalation

- Escalate to platform-security if unexpected issuer detected

---

> **Stub**: Phase D2 — author body after domain adoption. (feature-operational-runbook-contract D9)