0

I get the following error, anyone got any ideas?

{

    "error_code": "ESRV306",

    "error_msg": {

        "error": "invalid client",

        "error_description": "The given JWT for client authentication is invalid."

    }

}

It is a post request with:

grant_type: urn:ietf:params:oauth:grant-type:jwt-bearer assertion: client_assertion_type:urn:ietf:params:oauth:client-assertion-type:jwt-bearer client_assertion:

both JWTs are valid, confirmed via jwt.io. Other claims included are:

iss,aud,exp (set to 15 minutes),iat(set to now), jti(random guid) and "kid" added in header

trying to get a bearer token back.

eglease
  • 2,445
  • 11
  • 18
  • 28
Skapoor
  • 1

1 Answers1

0

User error, I was passing client_JWT as assertion and client_assertion as User_JWT, switching them around helped...duh..

Skapoor
  • 1