Hello, I don't know when it started

curl --location 'https://api.medplum.com/oauth2/token' \
--header 'Content-Type: application/x-www-form-urlencoded' \
--data-urlencode 'client_assertion=here_my_jwt_value' \
--data-urlencode 'client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer' \
--data-urlencode 'grant_type=client_credentials'

requires client_id and client_secret

{
  "error": "invalid_request",
  "error_description": "Missing client_id"
}

however it should not

@yury.starav - it looks like you double-encoded the

client_assertion_type

parameter

I tested the same request with EPIC and it returns access token

@yury.starav , are you seeing success with the following?

curl --location 'https://api.medplum.com/oauth2/token' \
--header 'Content-Type: application/x-www-form-urlencoded' \
--data-urlencode 'client_assertion=here_my_jwt_value' \
--data-urlencode 'client_assertion_type=urn:ietf:params:oauth:client-assertion-type:jwt-bearer' \
--data-urlencode 'grant_type=client_credentials'

when I add client_id and client_secret

Do mind re-posting the latest failing query? Did it fail even after replacing "%3A" with ":"?

now it works