Dry-run: erp_user_3

Assertion built and signed — no Auth0 call made.

ERP user	`erp_user_3`
Vessel user	`operations@northagency.no`
vessel_user_id	`auth0\|6a21582266777b8516430bc2`
erp_session	`erp-sess-106c1e7b-cfcf-43cb-bf9e-740f9cddf139`

Assertion payload

{
  "iss": "https://erp-dev.vesselman.com",
  "aud": "urn:vesselman:token-exchange",
  "iat": 1789535490,
  "exp": 1789535550,
  "jti": "3bd7c912-69f7-4eb3-9cff-73ff2fb337c8",
  "vessel_user_id": "auth0|6a21582266777b8516430bc2",
  "erp_user": "erp_user_3",
  "erp_session": "erp-sess-106c1e7b-cfcf-43cb-bf9e-740f9cddf139"
}

Assertion (subject_token)

eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6Ing0OXItX3V3TTdKU1dPY3o0dlBJUFI1dmpjWG0ydVNuMVFnb3o0NG5oQjAifQ.eyJpc3MiOiJodHRwczovL2VycC1kZXYudmVzc2VsbWFuLmNvbSIsImF1ZCI6InVybjp2ZXNzZWxtYW46dG9rZW4tZXhjaGFuZ2UiLCJpYXQiOjE3ODk1MzU0OTAsImV4cCI6MTc4OTUzNTU1MCwianRpIjoiM2JkN2M5MTItNjlmNy00ZWIzLTljZmYtNzNmZjJmYjMzN2M4IiwidmVzc2VsX3VzZXJfaWQiOiJhdXRoMHw2YTIxNTgyMjY2Nzc3Yjg1MTY0MzBiYzIiLCJlcnBfdXNlciI6ImVycF91c2VyXzMiLCJlcnBfc2Vzc2lvbiI6ImVycC1zZXNzLTEwNmMxZTdiLWNmY2YtNDNjYi1iZjllLTc0MGY5Y2RkZjEzOSJ9.CcYcF78Qll-kVmYT3iRlaWK669-aLurUAMBycg0UWRbMnvtkPs09K6_REb07jfbfLt8pow802jaMdgU2weiTPGgIYIhASuNKvGtSrZeskfjCTNK00Y5VHM5DeWGq2TRQ9yg3X0_0yQ4oOKw3UN60OWV41SIzyHVDtY4d79KPmLe-bMKyIpmht-Euei7JTVuvLyHOgWJ_bVuAYnr3YFSmJL6mZi9yj8K3Y95_MeziEpIeiMVEcZFj9sc8UCFS85naEhg30dasnIU8BbTDoBRGwe0y6K04MfEZGPwIiEsEJOMgAfsQztrCqXRtDhwyt6LNqhD43Rl36oh_ItcM0JVWUQ

Equivalent BFF exchange (curl)

curl -X POST https://marcura-dev.eu.auth0.com/oauth/token \
  -d grant_type=urn:ietf:params:oauth:grant-type:token-exchange \
  -d subject_token_type=urn:vesselman:erp-assertion \
  -d "subject_token=<assertion above>" \
  -d client_id=6c9663GC8oDdv7qVUfNyLZ8k3Nd50laI \
  -d client_assertion_type=urn:ietf:params:oauth:client-assertion-type:jwt-bearer \
  -d "client_assertion=<private_key_jwt signed by the BFF key>" \
  -d "scope=openid profile email"

← ERP test client home