ES /docs

Cognito get_user_by_access_token failed: Access token decoded but payload is empty, #<Cupix::Auth::V

Service
cupixworks-api
Occurrences
146
Status
Reported
Confidence
85%
Actionability
28%
Cluster ID
be95088e-1224-4705-b944-7df45f65302d
First Seen
2026-04-07 19:12 UTC
Last Seen
2026-07-13 05:03 UTC
Actions

Cognito get_user_by_access_token failed: Access token decoded but payload is empty, #<Cupix::Auth::V

RCA Summary#

Cross-region 인증 요청에서 JWT issuer 불일치로 인해 토큰 검증이 실패합니다. 토큰은 US 서버($APP_HOST=cupix.works)에서 발급되어 issuer가 https://flintco.cupix.works로 설정되었으나, EU 서버($APP_HOST=cupix-eu.works)에서 인증을 시도할 때 Cupixworks.match? regex가 cupix-eu.works 패턴만 허용하므로 매칭에 실패합니다. Cognito issuer 패턴도 매칭되지 않아, verify_jwt_access_token!decoded_access_token=nil, issuer=nilVerifiedAccessToken을 반환하고, 이후 "Access token decoded but payload is empty" 에러가 발생합니다.