Skip to main content
POST
Create JWT Token

Body

application/x-www-form-urlencoded
grant_type
enum<string>
required

OAuth 2.0 grant type.

Available options:
client_credentials
Example:

"client_credentials"

client_assertion_type
enum<string>
required

Client assertion type for private key JWT client authentication (RFC 7523).

Available options:
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
Example:

"urn:ietf:params:oauth:client-assertion-type:jwt-bearer"

client_assertion
string
required

A JWT signed with your ES256 private key. Header: alg ES256, typ JWT, kid set to your KID. Claims: iss and sub set to your OAuthClientId, aud set to cb-gateway-m2m-blue, a random jti, iat set to now and exp set to now + 120 seconds. Generate a new assertion for every request. See Request an access token.

Example:

"eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjxLSUQ-In0..."

OAuthClientId
string<uuid>
required

Your OAuth client ID from your onboarding pack. Must match the iss and sub claims of the client assertion.

Example:

"00000000-0000-0000-0000-000000000000"

Response

Access token generated successfully

accessToken
string
required

Bearer access token.

expiresIn
integer

Token lifetime in seconds.

Example:

1800

refreshToken
string | null

Always null for machine-to-machine clients. Request a new access token when the current one expires.

tokenType
string

Token type.

Example:

"Bearer"