当前不支持此功能. IAP期望Google帐户基础结构使用其私钥生成签名，因此这就是签名检查失败的原因.您能否告诉我更多有关为什么要避免OIDC令牌交换的信息? --Matthew，Google IAP工程

this is not currently supported. IAP is expecting a signature generated by the Google accounts infrastructure using its private key, so that's why the signature check is failing. Could you tell me more about why you'd like to avoid the OIDC token exchange? --Matthew, Google IAP Engineering