Assertion built and signed — no Auth0 call made.
| ERP user | erp_user_5 |
|---|---|
| Vessel user | vessel_user_c |
| vessel_user_id | OIDC|ENTRA-OIDC-MARCURA-DEV|YFQI0HZC-VD0LMIAZCZISYNS6XC9UVBIYFBNDFQO258 |
| erp_session | erp-sess-8d8826e1-5fa0-4289-8a6b-7aa52c7c83f3 |
{
"iss": "https://erp-dev.vesselman.com",
"aud": "urn:vesselman:token-exchange",
"iat": 1781261446,
"exp": 1781261506,
"jti": "d713aefb-5417-44ad-b34b-a9ba2ac2620f",
"vessel_user_id": "OIDC|ENTRA-OIDC-MARCURA-DEV|YFQI0HZC-VD0LMIAZCZISYNS6XC9UVBIYFBNDFQO258",
"erp_user": "erp_user_5",
"erp_session": "erp-sess-8d8826e1-5fa0-4289-8a6b-7aa52c7c83f3"
}
eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6Ik05cTh6a3FjR19tZW1WMTduczFIU3lyRlVlbndIWFh5emdKaFlOVW56VjQifQ.eyJpc3MiOiJodHRwczovL2VycC1kZXYudmVzc2VsbWFuLmNvbSIsImF1ZCI6InVybjp2ZXNzZWxtYW46dG9rZW4tZXhjaGFuZ2UiLCJpYXQiOjE3ODEyNjE0NDYsImV4cCI6MTc4MTI2MTUwNiwianRpIjoiZDcxM2FlZmItNTQxNy00NGFkLWIzNGItYTliYTJhYzI2MjBmIiwidmVzc2VsX3VzZXJfaWQiOiJPSURDfEVOVFJBLU9JREMtTUFSQ1VSQS1ERVZ8WUZRSTBIWkMtVkQwTE1JQVpDWklTWU5TNlhDOVVWQklZRkJOREZRTzI1OCIsImVycF91c2VyIjoiZXJwX3VzZXJfNSIsImVycF9zZXNzaW9uIjoiZXJwLXNlc3MtOGQ4ODI2ZTEtNWZhMC00Mjg5LThhNmItN2FhNTJjN2M4M2YzIn0.fGMkam9WA2teEGQt5bq2lYPbj_Hn1NqsmkbkTt19WVFAL_zf4L1191RFNvzwXnXD1haErN4h9cx8mTO7aWRLQoAJs2N4hAnCLbkPkjs2_phn3frOu_RmzJzYI_K3lyaJhnGUV81icH-6AEwJ5tXmLQr3Jkyiqc7c_J4DzdZ9UKfMSj0kHn0gHaFDhEkEBhMDtCUYeGaRPpEnH5mOYyuWZDPbDD80KGZbm11kYkndNCUPsi3wW4Zenmq61psvZn_rtfkLSPSMQP7sUv6nPAMbEbobMboahqbD41OelKXxZRS9N2esnDEqEVJ442Q7zJ5wri1jc8tP42lO6C3G2s_zuQ
curl -X POST https://marcura-dev.eu.auth0.com/oauth/token \ -d grant_type=urn:ietf:params:oauth:grant-type:token-exchange \ -d subject_token_type=urn:vesselman:erp-assertion \ -d "subject_token=<assertion above>" \ -d client_id=Z5qO6B52BWN1UZ8DIZFvEIBaemoacD1Y \ -d client_assertion_type=urn:ietf:params:oauth:client-assertion-type:jwt-bearer \ -d "client_assertion=<private_key_jwt signed by the BFF key>" \ -d "scope=openid profile email"