function readOnly(count){ }
Starting November 20, the site will be set to read-only. On December 4, 2023,
forum discussions will move to the Trailblazer Community.
+ Start a Discussion
Jason Harris 1Jason Harris 1 

OAUth JWT Bearer flow - invalid assertion details

Hi,

In Java, I am attempting to POST a generated (in Java) JSON Web Token to https://login.salesforce.com/services/oauth2/token.

The form contains the correct fields:
grant_type : urn:ietf:params:oauth:grant-type:jwt-bearer
assertion : <generated token>

Where the <generated token> contains (encoded as per page here: https://help.salesforce.com/apex/HTViewHelpDoc?id=remoteaccess_oauth_jwt_flow.htm&language=en_US):

{\"alg\":\"RS256\"}.
'{'"iss": "<client id>", "sub": "integration@payliquid.com", "aud": "https://login.salesforce.com", "exp": "1427801530366"'}'.

which is then signed using the self-signed certificate uploaded to the Connected App in our org.

Everything seems correct but I can only get "Invalid Assertion" back. The user "integration@payliquid.com" is API Enabled. What else do I need to do or how do I determine what the actual issue is?
ShashankShashank (Salesforce Developers) 
Please see if you are still facing the issue by following the steps described here: https://help.salesforce.com/apex/HTViewHelpDoc?id=remoteaccess_oauth_jwt_flow.htm