Dry-run: erp_user_5

Assertion built and signed — no Auth0 call made.

ERP usererp_user_5
Vessel userh.jorstad@marcura.com
vessel_user_idoidc|entra-oidc-marcura-dev|YFqi0hZc-VD0LmiaZcZiSyNS6xC9UVBIYFbnDfQO258
erp_sessionerp-sess-108942ee-81bc-4b56-b9d8-718b1004a2e8

Assertion payload

{
  "iss": "https://erp-dev.vesselman.com",
  "aud": "urn:vesselman:token-exchange",
  "iat": 1789535373,
  "exp": 1789535433,
  "jti": "db1701aa-0288-4df9-85fd-569c646e503a",
  "vessel_user_id": "oidc|entra-oidc-marcura-dev|YFqi0hZc-VD0LmiaZcZiSyNS6xC9UVBIYFbnDfQO258",
  "erp_user": "erp_user_5",
  "erp_session": "erp-sess-108942ee-81bc-4b56-b9d8-718b1004a2e8"
}

Assertion (subject_token)

eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6Ing0OXItX3V3TTdKU1dPY3o0dlBJUFI1dmpjWG0ydVNuMVFnb3o0NG5oQjAifQ.eyJpc3MiOiJodHRwczovL2VycC1kZXYudmVzc2VsbWFuLmNvbSIsImF1ZCI6InVybjp2ZXNzZWxtYW46dG9rZW4tZXhjaGFuZ2UiLCJpYXQiOjE3ODk1MzUzNzMsImV4cCI6MTc4OTUzNTQzMywianRpIjoiZGIxNzAxYWEtMDI4OC00ZGY5LTg1ZmQtNTY5YzY0NmU1MDNhIiwidmVzc2VsX3VzZXJfaWQiOiJvaWRjfGVudHJhLW9pZGMtbWFyY3VyYS1kZXZ8WUZxaTBoWmMtVkQwTG1pYVpjWmlTeU5TNnhDOVVWQklZRmJuRGZRTzI1OCIsImVycF91c2VyIjoiZXJwX3VzZXJfNSIsImVycF9zZXNzaW9uIjoiZXJwLXNlc3MtMTA4OTQyZWUtODFiYy00YjU2LWI5ZDgtNzE4YjEwMDRhMmU4In0.C6GxbpD3jsmGWq0kqyYOslhFOkkKLQKU35rAbbaIwzBhCWLPePWztZ53I_hcXhGD87t-bdyYdaqx-GWV-oaFjAlJYxovIwNwKyOmVoUDaE8YGXd12Pik1SYlim48DaWKLbmUdpCqIGPyGswjKryt5dSHL_d7cmQwIYrgIji0L5Xj3UPLVjlbpyvNMOqcrSeG8lrLsBNpFx1g6czifiiE27z8BYunzEncoafPL1fsb_M2O_6cJ7kIFnb6fGxm4GhrAPqhDaBMFO7DVhBOctfL_yRbIwhy_1Q0PZ3DVn8w5DZrE79lA_xL-jtofa_2_b6a99wnBjUIRRxDnD5yy1mP2g

Equivalent BFF exchange (curl)

curl -X POST https://marcura-dev.eu.auth0.com/oauth/token \
  -d grant_type=urn:ietf:params:oauth:grant-type:token-exchange \
  -d subject_token_type=urn:vesselman:erp-assertion \
  -d "subject_token=<assertion above>" \
  -d client_id=6c9663GC8oDdv7qVUfNyLZ8k3Nd50laI \
  -d client_assertion_type=urn:ietf:params:oauth:client-assertion-type:jwt-bearer \
  -d "client_assertion=<private_key_jwt signed by the BFF key>" \
  -d "scope=openid profile email"

← ERP test client home