Aiera will provide customer with a shared secret for signing the JWT token. The JWT token should be signed using HS256 (HMAC-SHA256).
In the customers system, the JWT should be generated server side. The shared secret provided should not be exposed to the outside world in anyway (like by embedding it in client side javascript)
‣
The JWT token is expected to include these claims
JWT Claims
Claim
Type
Description
Required
sub
string
User ID in customer system
email
string
Email address / username of customer
exp
int
Expiration date of this token in seconds since epoch
jti
string
Unique ID of this JWT token
iat
int
Time in seconds since epoch representing when this token was created
first_name
string
Customers first name
last_name
string
Customers last name
tz
string
Customers time zone
org_id
string
Unique identifier for a sub-org to be used/created
