tech-log-backend/docs/runbooks/auth-audience-mismatch.md

title, category, error_codes, severity, owner, last_updated, status

title	category	error_codes	severity	owner	last_updated	status
Runbook — AUTH_AUDIENCE_MISMATCH (대상 불일치)	AUTH	AUTH_AUDIENCE_MISMATCH	P2	oncall	2026-06-15	stub

Runbook: AUTH_AUDIENCE_MISMATCH (runbook://auth/audience-mismatch)

Symptoms

• HTTP 401 with error.code=AUTH_AUDIENCE_MISMATCH
• Token aud claim does not include this service's expected audience

Diagnosis

• Check token aud claim value
• Compare against configured spring.security.oauth2.resourceserver.jwt.audiences

Action

• Verify client is requesting tokens scoped to the correct audience
• Update audience configuration if service identifier changed

Escalation

• Escalate to auth-platform team if misconfiguration is system-wide

---

Stub: Phase D2 — author body after domain adoption. (feature-operational-runbook-contract D9)