Get an access token with JWT Authentication | Developer Education

This screencast shows you how to get an access token manually using the DocuSign JWT OAuth2 Grant. The JWT authentication flow is ideal for system applications that use the DocuSign API without a user being present.

You can also implement JWT authentication flows programmatically using one of the DocuSign SDKs. Use the Quickstart to download and see example implementations of both JWT and auth code grant flows in the programming language of your choice.

Note:
The access token granted by JWT Grant expires after one hour, and no refresh token is provided. After the token expires, you must generate a new JWT and exchange it for a new access token.

Resources:
____________________________________________________

 

[chasedenecke]

Why is this integration process so complicated? You have like 6 different examples of how to do JWT integration and they're all different. You name the same variable 3 different things in different places. Your API sends cryptic error messages that give me no clue what's actually going wrong. This integration flow is so complicated it makes me want to stop using docusign altogether.

[anurp]

Docusign, why do you make us jump through hoops just to integrate your APIs with our application ? One of the worst integration flows I have ever encountered in more than 10 years as a dev

[karolrvn]

Why complicate it so much for server-side long-term integration? Other services use an API key.

[anurp]

Without a shadow of doubt, one of the toughest integration processes ever. I have not been more pained while integrating any other service/plugin as docusign. Even the documentation is incomplete. You have to keep guessing and trying all the time. Even with paid support it is very difficult to get your issues resolved.

[yacheritsi]

Am I correct that using the "code" here is just for confirming that the permissions grant was successful? The later steps are not actually needed for the JWT connection to be used.

[RafaVeraDataEng]

there is anyway to get the code without passing through the browser?
I mean, there is any way to implement this admin login and getting the code to get the access token?

[adautonery]

Hello, I'm trying to configure this api just to receive the processes from the envelopes, I don't have much experience as a developer, I use a Microsoft SSIS ETL tool with the C # language, but I've been checking the documentation for days but I can't even start, I'd like to know if anyone has done this integration that can help me. I'm checking out a lot of experienced developers with a lot of difficulties and I'm really worried!

[parassharma]

I followed the entire documentation but i got
{
"error": "invalid_grant",
"error_description":
}

Can you please help me with that ?

[GrahamBowers]

Why does my access token type present as application instead of bearer like yours? I've followed it step by step multiple times

[LuisMontes]

Why is any of this necessary for a server integration? I want to have my server make calls for captive recipients. Why not just have a client id and secret to make calls from the server and get URLs to redirect signers to?

[L_invites]

Pretty helpful.
I have a doubt in the similar context

My requirement is to test an api. I'm using rest assured for api testing.

I need to get the bearer token before making the request. Can I use an already generated jwt token and change the exp time to something in future year and use it. Or should I use the old token which is already expired and generate a new one with the grant type header which is given in this video.

Please help as I'm confused.
Our UI app uses grant type Authorization code and does not have client secret but has client id which is exchanged to fetch the Authorization code and then used for getting the token.

Hoping for positive replies.

[darencelim]

Are there any risks/security concerns with showing the integration key in the authorization uri? If someone knows/obtains the integration key of the app, can they use the integration key to do anything malicious or retrieve/send data from/to the app or the accounts associated with the app?

[ankushsaxena]

My signers are end users who may/may not have a DocuSign account. Is it required for me to use JWT grant flow with system user? My understanding is that anyone can create a DocuSign account. So, is it possible that I can try for OAuth code/Implicit grant flow by forcing user to register? Does the end user need to be part of the DocuSign account in order to use OAuth code/Implicit grant?

[angeltesting]

Where is the simplicity of your API that you had many years ago. Everything is so complicated now and the API documentation is so difficult to work with. I still can't get this example to work. Followed the video, also added 4000 to exp and used a grand_type recommended by DocuSign in another comment. Did anything in the video change the past few months?

Still getting this error:
{
"error": "invalid_grant",
"error_description": "unsupported_grant_type"
}

[talvanemagalhaes]

I followed your example, however, my PAYLOAD: DATA remains encrypted even though I have entered the correct PUBLIC KEY and PRIVETE KEY. You can help?

[jimcopeland]

Okay so now I have created a completely new app from scratch and this time I got the consent page. Now when I enter this I get "user not found" which is silly, because the id I entered is the user ID I got from the user management page... Unless that's not the right value?

[Ash_TV]

My question is I am trying to submit the JSON for API call does anyone have a link I can watch to complete that?

[jingfulin]

I am following your example, everything is ok when I am using authentication code to get access token.But when I change to JWT, I got a "consent required" error.The question is, how can I get consent? Cause I can only input "code" response_type when I try to get consent, and when I try to get access token via JWT, the returned code is not used!

[Jackinua]

You probably should have blur base64 encoded token in left side of JWT parser.

[nicolasmoura]

I have a dought: In your example of JWT example application, you are doing the tutorial on an Authorization Code grant app, why? Should exist an option JWT on Authentication, no?