Assertion built and signed — no Auth0 call made.
| ERP user | erp_user_5 |
|---|---|
| Vessel user | h.jorstad@marcura.com |
| vessel_user_id | oidc|entra-oidc-marcura-dev|YFqi0hZc-VD0LmiaZcZiSyNS6xC9UVBIYFbnDfQO258 |
| erp_session | erp-sess-5713c160-a923-4ebd-9b92-2d155692fad0 |
{
"iss": "https://erp-dev.vesselman.com",
"aud": "urn:vesselman:token-exchange",
"iat": 1794445828,
"exp": 1794445888,
"jti": "d95e2604-bc67-4677-8890-a386a73f1ea8",
"vessel_user_id": "oidc|entra-oidc-marcura-dev|YFqi0hZc-VD0LmiaZcZiSyNS6xC9UVBIYFbnDfQO258",
"erp_user": "erp_user_5",
"erp_session": "erp-sess-5713c160-a923-4ebd-9b92-2d155692fad0"
}
eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6Ing0OXItX3V3TTdKU1dPY3o0dlBJUFI1dmpjWG0ydVNuMVFnb3o0NG5oQjAifQ.eyJpc3MiOiJodHRwczovL2VycC1kZXYudmVzc2VsbWFuLmNvbSIsImF1ZCI6InVybjp2ZXNzZWxtYW46dG9rZW4tZXhjaGFuZ2UiLCJpYXQiOjE3OTQ0NDU4MjgsImV4cCI6MTc5NDQ0NTg4OCwianRpIjoiZDk1ZTI2MDQtYmM2Ny00Njc3LTg4OTAtYTM4NmE3M2YxZWE4IiwidmVzc2VsX3VzZXJfaWQiOiJvaWRjfGVudHJhLW9pZGMtbWFyY3VyYS1kZXZ8WUZxaTBoWmMtVkQwTG1pYVpjWmlTeU5TNnhDOVVWQklZRmJuRGZRTzI1OCIsImVycF91c2VyIjoiZXJwX3VzZXJfNSIsImVycF9zZXNzaW9uIjoiZXJwLXNlc3MtNTcxM2MxNjAtYTkyMy00ZWJkLTliOTItMmQxNTU2OTJmYWQwIn0.LfSe0EFnB8rRq-f-fnjHUilY_ihp4ApzOSx6110QkmaKf9a5f11V8lVN_YNBzVmP-OhZiQxOt0mKEpRAX4ioVjKRW43KgxQ8t-JhywHejBPb5wlynbB78vyzZLkQS5Cg62XdK2HanKWemzqE_UPoOmuxYvJ7UvxI-2_DzKsNCaDA-GneOrwmOGOoccdaQLEZB0EfcXkF9Tcyau-GUTiXRvuGTBNuGrgaoRi5Cm7xn2j5f73R0STX50y_Ra2Glihwk6xcnMhSutjRFgD3dBfAll6wu5B9p_Ko3voTJ_SYjp2LlV8sH4yjtbNdwUTRz89X_g-ENiHOu5pQ8pYHItQc0A
curl -X POST https://marcura-dev.eu.auth0.com/oauth/token \ -d grant_type=urn:ietf:params:oauth:grant-type:token-exchange \ -d subject_token_type=urn:vesselman:erp-assertion \ -d "subject_token=<assertion above>" \ -d client_id=6c9663GC8oDdv7qVUfNyLZ8k3Nd50laI \ -d client_assertion_type=urn:ietf:params:oauth:client-assertion-type:jwt-bearer \ -d "client_assertion=<private_key_jwt signed by the BFF key>" \ -d "scope=openid profile email"