AWS Authorizer Error: "the issuer in the OIDC discovery endpoint metadata does not match the configured issuer"
Last Updated:
Overview
When following Securing AWS HTTP APIs with JWT Authorizers and similar resources to set up AWS JWT Authorizers, the following error may be returned when validating the JWT:
error="invalid_token" error_description="the issuer in the OIDC discovery endpoint metadata does not match the configured issuer"Applies To
- Failed Login
- AWS Portal
- JWT Authorizer
Cause
The Issuer URL was inaccurately set up during the configuration of the JWT Authorizer by not including the trailing '/' of the Issuer URL.
Solution
Confirm the Issuer URL in AWS includes the trailing '/' and is otherwise accurately configured.
Example:
https://{TENANT_NAME}.{REGION}.auth0.com/
