Dry-run: erp_user_1

Assertion built and signed — no Auth0 call made.

ERP user	`erp_user_1`
Vessel user	`havard@vesselman.com`
vessel_user_id	`auth0\|69dcf6a2978ffff6332f75f0`
erp_session	`erp-sess-cfec55c7-d7a1-430e-9f24-5f14a8025637`

Assertion payload

{
  "iss": "https://erp-dev.vesselman.com",
  "aud": "urn:vesselman:token-exchange",
  "iat": 1794445828,
  "exp": 1794445888,
  "jti": "54111b04-bbee-40ce-9411-9b56e1b076b7",
  "vessel_user_id": "auth0|69dcf6a2978ffff6332f75f0",
  "erp_user": "erp_user_1",
  "erp_session": "erp-sess-cfec55c7-d7a1-430e-9f24-5f14a8025637"
}

Assertion (subject_token)

eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6Ing0OXItX3V3TTdKU1dPY3o0dlBJUFI1dmpjWG0ydVNuMVFnb3o0NG5oQjAifQ.eyJpc3MiOiJodHRwczovL2VycC1kZXYudmVzc2VsbWFuLmNvbSIsImF1ZCI6InVybjp2ZXNzZWxtYW46dG9rZW4tZXhjaGFuZ2UiLCJpYXQiOjE3OTQ0NDU4MjgsImV4cCI6MTc5NDQ0NTg4OCwianRpIjoiNTQxMTFiMDQtYmJlZS00MGNlLTk0MTEtOWI1NmUxYjA3NmI3IiwidmVzc2VsX3VzZXJfaWQiOiJhdXRoMHw2OWRjZjZhMjk3OGZmZmY2MzMyZjc1ZjAiLCJlcnBfdXNlciI6ImVycF91c2VyXzEiLCJlcnBfc2Vzc2lvbiI6ImVycC1zZXNzLWNmZWM1NWM3LWQ3YTEtNDMwZS05ZjI0LTVmMTRhODAyNTYzNyJ9.FFFUHJX03EcHAYYcV-dmRw4BxpXx1oDTd5PUH5OOGmNmK79a-5uc4S6vdRHvHX7vIL3Kx_gaANAS5cooqapiYFQ3C3OA1mnZ4tDNahHqLz_tpVumJBKPe0tUFfySgpmJ_CHAmESYtXKaatIUfoCb6W74D6Kyc01xerupoTBGdvfvxnIqjRWizv_PcOdWKsdmvAij5ban3MVsg4LZ3z_i1qT5ZoDLShe4DCmlbOR1fznuTEuKTyAl4RR697YD5icABdWrS0Ak22Tt7_fAwmIx9OAMR8F3h1wFxN7mVYQpHyHuHUK6sDqUToPVTrzSkSCQTQJ6nUXrlKuGiW5bTVWa8w

Equivalent BFF exchange (curl)

curl -X POST https://marcura-dev.eu.auth0.com/oauth/token \
  -d grant_type=urn:ietf:params:oauth:grant-type:token-exchange \
  -d subject_token_type=urn:vesselman:erp-assertion \
  -d "subject_token=<assertion above>" \
  -d client_id=6c9663GC8oDdv7qVUfNyLZ8k3Nd50laI \
  -d client_assertion_type=urn:ietf:params:oauth:client-assertion-type:jwt-bearer \
  -d "client_assertion=<private_key_jwt signed by the BFF key>" \
  -d "scope=openid profile email"

← ERP test client home