Auth mode "user" was requested and a JWT was supplied, but no JWKS is configured — so the token cannot be verified. Server misconfiguration (status: 500), not a bad request.
"user"
status: 500