Dry-run: erp_user_4

Assertion built and signed — no Auth0 call made.

ERP usererp_user_4
Vessel useroperations@northagency.no
vessel_user_idauth0|6a21582266777b8516430bc2
erp_sessionerp-sess-32713747-63d2-4591-aecc-43f47e781177

Assertion payload

{
  "iss": "https://erp-dev.vesselman.com",
  "aud": "urn:vesselman:token-exchange",
  "iat": 1789535494,
  "exp": 1789535554,
  "jti": "88e9463d-d813-408d-9c1d-4f4eba58886e",
  "vessel_user_id": "auth0|6a21582266777b8516430bc2",
  "erp_user": "erp_user_4",
  "erp_session": "erp-sess-32713747-63d2-4591-aecc-43f47e781177"
}

Assertion (subject_token)

eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6Ing0OXItX3V3TTdKU1dPY3o0dlBJUFI1dmpjWG0ydVNuMVFnb3o0NG5oQjAifQ.eyJpc3MiOiJodHRwczovL2VycC1kZXYudmVzc2VsbWFuLmNvbSIsImF1ZCI6InVybjp2ZXNzZWxtYW46dG9rZW4tZXhjaGFuZ2UiLCJpYXQiOjE3ODk1MzU0OTQsImV4cCI6MTc4OTUzNTU1NCwianRpIjoiODhlOTQ2M2QtZDgxMy00MDhkLTljMWQtNGY0ZWJhNTg4ODZlIiwidmVzc2VsX3VzZXJfaWQiOiJhdXRoMHw2YTIxNTgyMjY2Nzc3Yjg1MTY0MzBiYzIiLCJlcnBfdXNlciI6ImVycF91c2VyXzQiLCJlcnBfc2Vzc2lvbiI6ImVycC1zZXNzLTMyNzEzNzQ3LTYzZDItNDU5MS1hZWNjLTQzZjQ3ZTc4MTE3NyJ9.isMCW8-JwgDy_BzgrCVj78QWYFAQ_4pFHWiMQZ8CLqmdVY5g8kmyWOzc37hNiJsx8p-kXxzeEPG1s7_VqEdu6d78NzGpY3UofD-0hYQ9dBckQ8wHftDYZ5A9FhPEskIMpjB6yrL_wjhyMIbSlIcxfle_fX-lkhbbZuIKJFvUkwtf0fNxx8OY014aST-vaKtUwdsXVpVNqr3Y_WVK5QWqCtfO5R6nrc98TTXrvJxAR6jfz1o7_5TPdVdzmqdP2FXz4Tywy76qxLVLK_o8b-TZdpdDIfdg0Jv_au-4xftkuHnABR3-XXvCGXSBHK77RD6VcKBqrF4xhDYxh2Cg39omQA

Equivalent BFF exchange (curl)

curl -X POST https://marcura-dev.eu.auth0.com/oauth/token \
  -d grant_type=urn:ietf:params:oauth:grant-type:token-exchange \
  -d subject_token_type=urn:vesselman:erp-assertion \
  -d "subject_token=<assertion above>" \
  -d client_id=6c9663GC8oDdv7qVUfNyLZ8k3Nd50laI \
  -d client_assertion_type=urn:ietf:params:oauth:client-assertion-type:jwt-bearer \
  -d "client_assertion=<private_key_jwt signed by the BFF key>" \
  -d "scope=openid profile email"

← ERP test client home