Your kid is not in the JWKS the server knows about
What it means
The server looks up the kid from your header in your registered JWKS and does not find it.
Fix
Publish the key with that kid, or sign with a kid that is published.
Seen on real servers
{
"error": "invalid_client",
"error_description": "None of the keys found in the JWKS have kid equal to sandbox-typo"
}Check it with smart-doctor
Run your login and smart-doctor ranks this cause against the others, with the evidence it found.
npx smart-doctor check my-profileAlready have the server’s error? Explain it without running anything.
npx smart-doctor explain '{"error":"invalid_client","error_description":"None of the keys found in the JWKS have kid equal to sandbox-typo"}'