ruhaq (ruhaq) asked a question.
The client_assertion token has already been used
We are generating client_assertion token and passing it to oauth2/v1/token endpoint.
We are getting access_token.
When we try again to hit oauth2/v1/token again after few seconds with different client_assertion token it fails with below error.
{
"error": "invalid_client",
"error_description": "The client_assertion token has already been used."
}
When we try after 1/2 mins it works and start failing again for few mins.
Hello,
If this is the behavior you are seeing please open a support case so we can get your Org details and research our backend logs.
I resolved this same problem by not re-using the same "jti" field value in the JWT I was creating to send to the oauth2/v1/token endpoint.
Thank you, Robert. It worked for me as well. Okta should take note of this and update their documentation accordingly.😀