Assertion built and signed — no Auth0 call made.
| ERP user | erp_user_2 |
|---|---|
| Vessel user | havard@vesselman.com |
| vessel_user_id | auth0|69dcf6a2978ffff6332f75f0 |
| erp_session | erp-sess-c54dcda6-3193-4464-ba10-e9a42a493199 |
{
"iss": "https://erp-dev.vesselman.com",
"aud": "urn:vesselman:token-exchange",
"iat": 1794445827,
"exp": 1794445887,
"jti": "95ab5bab-b047-4423-89ec-a3948e367490",
"vessel_user_id": "auth0|69dcf6a2978ffff6332f75f0",
"erp_user": "erp_user_2",
"erp_session": "erp-sess-c54dcda6-3193-4464-ba10-e9a42a493199"
}
eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6Ing0OXItX3V3TTdKU1dPY3o0dlBJUFI1dmpjWG0ydVNuMVFnb3o0NG5oQjAifQ.eyJpc3MiOiJodHRwczovL2VycC1kZXYudmVzc2VsbWFuLmNvbSIsImF1ZCI6InVybjp2ZXNzZWxtYW46dG9rZW4tZXhjaGFuZ2UiLCJpYXQiOjE3OTQ0NDU4MjcsImV4cCI6MTc5NDQ0NTg4NywianRpIjoiOTVhYjViYWItYjA0Ny00NDIzLTg5ZWMtYTM5NDhlMzY3NDkwIiwidmVzc2VsX3VzZXJfaWQiOiJhdXRoMHw2OWRjZjZhMjk3OGZmZmY2MzMyZjc1ZjAiLCJlcnBfdXNlciI6ImVycF91c2VyXzIiLCJlcnBfc2Vzc2lvbiI6ImVycC1zZXNzLWM1NGRjZGE2LTMxOTMtNDQ2NC1iYTEwLWU5YTQyYTQ5MzE5OSJ9.S4RbRrqBURTuPx-1dTFMex--mzrOtSVD-hYE0AgPVBWGNauvFbvPawW0xBQ6vq2mIsgSPOXIUaoKmJeRHMA6-_MqBk8GJ_tEDykxzS8OE6MJFvKAjXCsIEWCrLy6GUTN6dHFWfBDf1CPRqll1wyRRc_NsTgwC1QU1uoXI-O3EdFmNQviTELwqJEr5a_XnND50cabTacGDuNRO_OaJDbnU2H1bfw4D1S-sm3jv_nJMs81dt8C3wZxfjn3d1m116emcM1rn1r1erECxI-Hv3KbQ3bGYPfXzFWhBVGk0Zi0-6td8X1yN6lzLijXbscX1Dh3Nupci4d6BBEkHHvX3i1x3Q
curl -X POST https://marcura-dev.eu.auth0.com/oauth/token \ -d grant_type=urn:ietf:params:oauth:grant-type:token-exchange \ -d subject_token_type=urn:vesselman:erp-assertion \ -d "subject_token=<assertion above>" \ -d client_id=6c9663GC8oDdv7qVUfNyLZ8k3Nd50laI \ -d client_assertion_type=urn:ietf:params:oauth:client-assertion-type:jwt-bearer \ -d "client_assertion=<private_key_jwt signed by the BFF key>" \ -d "scope=openid profile email"