---
title: Runbook — AUTH_AUDIENCE_MISMATCH (대상 불일치)
category: AUTH
error_codes: [AUTH_AUDIENCE_MISMATCH]
severity: P2
owner: oncall
last_updated: 2026-06-15
status: stub
---

# Runbook: AUTH_AUDIENCE_MISMATCH (`runbook://auth/audience-mismatch`)

## Symptoms

- HTTP 401 with `error.code=AUTH_AUDIENCE_MISMATCH`
- Token `aud` claim does not include this service's expected audience

## Diagnosis

- Check token `aud` claim value
- Compare against configured `spring.security.oauth2.resourceserver.jwt.audiences`

## Action

- Verify client is requesting tokens scoped to the correct audience
- Update audience configuration if service identifier changed

## Escalation

- Escalate to auth-platform team if misconfiguration is system-wide

---

> **Stub**: Phase D2 — author body after domain adoption. (feature-operational-runbook-contract D9)