Hi, we’re using

client_secret_jwt

authentication for our worker servers with a custom issuer url, but we receive back this error:

{
  "error": "invalid_client",
  "error_description": "Client authentication failed (e.g., unknown client, no client authentication included, or unsupported authentication method). Claim 'audience' from 'client_assertion' must match the authorization server's token endpoint '<https://custom.url/oauth2/token>'."
}

even when setting aud to

<https://custom.url/oauth2/token>

, setting aud to

<https://xxx.projects.oryapis.com/oauth2/token>

works though. Following this guide does not see to fix the issue, not sure what we’ve missed, can you please advise?