Create JWT Token
Exchange a signed ES256 client assertion for a short-lived bearer access token, using the OAuth 2.0 JWT bearer client assertion flow (RFC 7523) with a client_credentials grant. No client secret is transmitted. Requires a registered key pair; see Machine-to-machine authentication.
Body
OAuth 2.0 grant type.
client_credentials "client_credentials"
Client assertion type for private key JWT client authentication (RFC 7523).
urn:ietf:params:oauth:client-assertion-type:jwt-bearer "urn:ietf:params:oauth:client-assertion-type:jwt-bearer"
A JWT signed with your ES256 private key. Header: alg ES256, typ JWT, kid set to your KID. Claims: iss and sub set to your OAuthClientId, aud set to cb-gateway-m2m-blue, a random jti, iat set to now and exp set to now + 120 seconds. Generate a new assertion for every request. See Request an access token.
"eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjxLSUQ-In0..."
Your OAuth client ID from your onboarding pack. Must match the iss and sub claims of the client assertion.
"00000000-0000-0000-0000-000000000000"
Response
Access token generated successfully

