AWS Authorizer Error: "the issuer in the OIDC discovery endpoint metadata does not match the configured issuer"
Sep 10, 2025
Overview
When following Securing AWS HTTP APIs with JWT Authorizers and similar resources to set up AWS JWT Authorizers, the following error may be returned when validating the JWT:
error="invalid_token" error_description="the issuer in the OIDC discovery endpoint metadata does not match the configured issuer"Applies To
- Failed Login
- AWS Portal
- JWT Authorizer
Cause
The Issuer URL was inaccurately set up during the configuration of the JWT Authorizer by not including the trailing '/' of the Issuer URL.
Solution
Confirm the Issuer URL in AWS includes the trailing '/' and is otherwise accurately configured.
Example:
https://{TENANT_NAME}.{REGION}.auth0.com/
