OAuth2 cannot link to synology sso

i have do everythin as the document

the config as this

after sso login, jump back to gitea and show 500 error page

cmd log show this error

2025/03/02 05:35:20 ...rs/web/auth/oauth.go:128:

SignInOAuthCallback() [E] UserSignIn: oauth2: error validating JWT token: 

issuer in token does not match issuer in OpenIDConfig discovery