Dry-run: erp_user_1

Assertion built and signed — no Auth0 call made.

ERP user	`erp_user_1`
Vessel user	`havard@vesselman.com`
vessel_user_id	`auth0\|69dcf6a2978ffff6332f75f0`
erp_session	`erp-sess-400b60b3-577c-471d-b15e-5462d1fe3675`

Assertion payload

{
  "iss": "https://erp-dev.vesselman.com",
  "aud": "urn:vesselman:token-exchange",
  "iat": 1789535397,
  "exp": 1789535457,
  "jti": "ef8223b5-4326-4b6b-a180-eaeb88b54813",
  "vessel_user_id": "auth0|69dcf6a2978ffff6332f75f0",
  "erp_user": "erp_user_1",
  "erp_session": "erp-sess-400b60b3-577c-471d-b15e-5462d1fe3675"
}

Assertion (subject_token)

eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6Ing0OXItX3V3TTdKU1dPY3o0dlBJUFI1dmpjWG0ydVNuMVFnb3o0NG5oQjAifQ.eyJpc3MiOiJodHRwczovL2VycC1kZXYudmVzc2VsbWFuLmNvbSIsImF1ZCI6InVybjp2ZXNzZWxtYW46dG9rZW4tZXhjaGFuZ2UiLCJpYXQiOjE3ODk1MzUzOTcsImV4cCI6MTc4OTUzNTQ1NywianRpIjoiZWY4MjIzYjUtNDMyNi00YjZiLWExODAtZWFlYjg4YjU0ODEzIiwidmVzc2VsX3VzZXJfaWQiOiJhdXRoMHw2OWRjZjZhMjk3OGZmZmY2MzMyZjc1ZjAiLCJlcnBfdXNlciI6ImVycF91c2VyXzEiLCJlcnBfc2Vzc2lvbiI6ImVycC1zZXNzLTQwMGI2MGIzLTU3N2MtNDcxZC1iMTVlLTU0NjJkMWZlMzY3NSJ9.ALgSKu8BieLBMEhKf4FGwNi9YNxaWCRWfAuZTnXKe6TVt-g88DxbHCs2MenR05vwCFzqHNp_Xxl7LCP-SRDDt78ABtfZ9xEYGIh3R_ne53YsLeamQL1TBTpCA_Ov1OrdeqNgJ0Z7LF41B7KY5cvZxHYQXIFX08wcf-snf1UfiOAOvk_wTGIUG03Z7M_vaTJjEdewfKMpiO2QzRJMEmizR2WGgAwKXceu02oOj4fDVYsAhRcC2Qbs7tFLCHjAlj9LUz4e1t4GboLgMXkPTD9VUwpS2uTOIfzU3r7rssBPWKT69gm9VgUBC3Uav4IR4amPyOhyiq86-VXM2eFu7vXS6g

Equivalent BFF exchange (curl)

curl -X POST https://marcura-dev.eu.auth0.com/oauth/token \
  -d grant_type=urn:ietf:params:oauth:grant-type:token-exchange \
  -d subject_token_type=urn:vesselman:erp-assertion \
  -d "subject_token=<assertion above>" \
  -d client_id=6c9663GC8oDdv7qVUfNyLZ8k3Nd50laI \
  -d client_assertion_type=urn:ietf:params:oauth:client-assertion-type:jwt-bearer \
  -d "client_assertion=<private_key_jwt signed by the BFF key>" \
  -d "scope=openid profile email"

← ERP test client home