Assertion built and signed — no Auth0 call made.
| ERP user | erp_user_2 |
|---|---|
| Vessel user | havard@vesselman.com |
| vessel_user_id | auth0|69dcf6a2978ffff6332f75f0 |
| erp_session | erp-sess-acaac8aa-1100-4692-9caf-c4501ef978ed |
{
"iss": "https://erp-dev.vesselman.com",
"aud": "urn:vesselman:token-exchange",
"iat": 1789535408,
"exp": 1789535468,
"jti": "0cb06876-066b-4f18-b13e-95b812188dac",
"vessel_user_id": "auth0|69dcf6a2978ffff6332f75f0",
"erp_user": "erp_user_2",
"erp_session": "erp-sess-acaac8aa-1100-4692-9caf-c4501ef978ed"
}
eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6Ing0OXItX3V3TTdKU1dPY3o0dlBJUFI1dmpjWG0ydVNuMVFnb3o0NG5oQjAifQ.eyJpc3MiOiJodHRwczovL2VycC1kZXYudmVzc2VsbWFuLmNvbSIsImF1ZCI6InVybjp2ZXNzZWxtYW46dG9rZW4tZXhjaGFuZ2UiLCJpYXQiOjE3ODk1MzU0MDgsImV4cCI6MTc4OTUzNTQ2OCwianRpIjoiMGNiMDY4NzYtMDY2Yi00ZjE4LWIxM2UtOTViODEyMTg4ZGFjIiwidmVzc2VsX3VzZXJfaWQiOiJhdXRoMHw2OWRjZjZhMjk3OGZmZmY2MzMyZjc1ZjAiLCJlcnBfdXNlciI6ImVycF91c2VyXzIiLCJlcnBfc2Vzc2lvbiI6ImVycC1zZXNzLWFjYWFjOGFhLTExMDAtNDY5Mi05Y2FmLWM0NTAxZWY5NzhlZCJ9.HnXgiC995l2-209ZT1j1yBsXEyRhcVIcH3WvswqnnT5eDC8PMX7SplSMT2fcsbXFBtiXrE0Qps-fWWQVc1p-va6rP3ZF0XvBM6U0cnpSHBNJXjBQqZVIoIQBg_NgNN3QyrGNhwPSlpyvhqJ3n7AcbKl_Bj_lL4SZeqIko_2PieMRh5CteHQWx7YhR8oMcf68TucHK86sqpBMikCgbXMD2BWj50q3ZHu0-FgCyxoGuArIwl5CM4LgVW8oJ-v4yT2E_Vo4R6l484HtjyF8pQA9iUla5cU506-QYUaQOmi3YxBrqn5KbBu46aQIVazFGE_1XIXC4n-q3gyvwF4U-SzQjw
curl -X POST https://marcura-dev.eu.auth0.com/oauth/token \ -d grant_type=urn:ietf:params:oauth:grant-type:token-exchange \ -d subject_token_type=urn:vesselman:erp-assertion \ -d "subject_token=<assertion above>" \ -d client_id=6c9663GC8oDdv7qVUfNyLZ8k3Nd50laI \ -d client_assertion_type=urn:ietf:params:oauth:client-assertion-type:jwt-bearer \ -d "client_assertion=<private_key_jwt signed by the BFF key>" \ -d "scope=openid profile email"