JWT Example
Audience Mismatch
Token is structurally valid but the aud claim is incorrect.
Token / Header Example
eyJhbGciOiJub25lIiwidHlwIjoiSldUIn0.eyJzdWIiOiJ1c2VyLTEiLCJhdWQiOiJ3cm9uZy1hcHAiLCJpYXQiOjE3MzU2ODk2MDB9.
Notes
- Always validate issuer and audience in token verification logic.
- Do not trust decoded payloads without signature checks.