iss claim

RU: iss claim

In OIDC and OAuth 2.0, the issuer is the case-sensitive HTTPS URL that uniquely identifies an authorization server and is embedded as the iss claim in every token it mints. Token validators must reject tokens whose iss does not match the expected issuer, preventing token substitution across tenants or environments.