# Payload contains: iss (Client ID), sub (referenceId), aud: "shopify", changes array with numeric variantId.

**URL:** <https://community.shopify.dev/t/payload-contains-iss-client-id-sub-referenceid-aud-shopify-changes-array-with-numeric-variantid/34456>\
**Category:** Extensions\
**Tags:** checkout-ui-ext\
**Created:** [May 19, 2026, 1:42pm UTC](https://community.shopify.dev/t/payload-contains-iss-client-id-sub-referenceid-aud-shopify-changes-array-with-numeric-variantid/34456 "2026-05-19T13:42:57Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Timur\_Tsybulka](https://avatars.discourse-cdn.com/v4/letter/t/bbe5ce/32.png) [@Timur\_Tsybulka](https://community.shopify.dev/u/Timur_Tsybulka)\
**Post date:** [May 19, 2026, 1:42pm UTC](https://community.shopify.dev/t/payload-contains-iss-client-id-sub-referenceid-aud-shopify-changes-array-with-numeric-variantid/34456/1 "2026-05-19T13:42:57Z")

</div>

We have a Shopify Post-Purchase extension.  
JWT is signed with HS256 using Client Secret (without shpss\_ prefix).  
Payload contains: iss (Client ID), sub (referenceId), aud: “shopify”, changes array with numeric variantId.  
calculateChangeset returns success, but applyChangeset always returns:  
{“errors”:[{“code”:“invalid\_request”,“message”:“Invalid token”}],“status”:“unprocessed”}

Tested on development store with test orders only (bogus gateway).  
Could this be a test order limitation?