struct

Authly::Code

Inherits JSON::Serializable < Struct < Value < Object

Patch: Authly::Code captures ISSUER (and CODE_TTL) into struct-level constants at class load time, which happens before any application-level Authly.configure call. Codes minted after our configure! therefore carry the upstream default issuer ("The Authority Server Provider") while Authly.jwt_decode (used by the token endpoint to redeem the code) validates against the currently-configured issuer ("POS") — and the mismatch raises JWT::InvalidIssuerError.

We override the JWT body to read the live config instead. Same fix applies to the code TTL.

Instance methods