The application sometimes fails with Bearer error="invalid_token" and OpenIddict error ID2088 because the issuer (iss claim) in the access token does not match the issuer expected by the API. In development, the SPA is running on http://localhost:5173 while tokens are issued by https://localhost:44…

DEV: Access token issuer explicitly set master ← access-token-issuer merged 02:05PM - 09 Dec 25 UTC (UTC) [image] JindrichSusen …

Access Token Issuer is Inconsistent in Development

jsusen (Jindřich Sušeň) December 8, 2025, 8:55am 4

Documentation added: