The function you implemented to use the JWT token is totally incorrect. Why do you still specify the user name and password? And I don't know how the Request.BasicAuthentication := True sets the Authorization header.

I don't have sample code in Python. But I have native code in PHP showing how to use the JWT token to exchange for access tokens.

private function authenticate(){

      $url = $_ENV["RC_SERVER_URL"] . "/restapi/oauth/token";

      $basic = $_ENV["RC_CLIENT_ID"] .":". $_ENV["RC_CLIENT_SECRET"];

      $headers = array (

              'Content-Type: application/x-www-form-urlencoded; charset=UTF-8',

              'Accept: application/json',

              'Authorization: Basic '.base64_encode($basic)

            );

      $body = http_build_query(array (

              'grant_type' => 'urn:ietf:params:oauth:grant-type:jwt-bearer',

              'assertion' => $_ENV["JWT_TOKEN"]

            ));

      try {

        $ch = curl_init($url);

        curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);

        curl_setopt($ch, CURLOPT_POST, TRUE);

        curl_setopt($ch, CURLOPT_RETURNTRANSFER, TRUE);

        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);

        curl_setopt($ch, CURLOPT_TIMEOUT, 600);

        curl_setopt($ch, CURLOPT_POSTFIELDS, $body);



        $strResponse = curl_exec($ch);

        $curlErrno = curl_errno($ch);

        if ($curlErrno) {

          throw new Exception($curlErrno);

        } else {

          $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);

          curl_close($ch);

          if ($httpCode == 200) {

            $date = new DateTime();

            $jsonObj = json_decode($strResponse);

            $tokensObj = array(

              "tokens" => $jsonObj,

              "timestamp" => $date->getTimestamp()

            );

            // Logged in successfully => Save tokens in session or write to file/database for reuse

            $_SESSION['sessionAccessToken'] =  json_encode($tokensObj, JSON_PRETTY_PRINT);

            return;

          }else{

            throw new Exception($strResponse);

          }

        }

      } catch (Exception $e) {

        throw $e;

      }

    }

You can get the entire project from here and convert the essential code to Python.

Hi Phong. Username and Password in my code, is equivalent to your line:

"RC_CLIENT_ID"] .":". $_ENV["RC_CLIENT_SECRET"];

I have to include that or I get an unknown client error message from the RingCentral server. It must be included. My Postman request is set up the same way, using Basic Auth and client ID (username) and Secret (password). Both Postman and my own Windows .exe result in the same error message: "message": "Unauthorized for this grant type"

I logged into my RingCentral account, located the production APP, went into it's Settings, then changed the "Auth" to "JWT auth flow", and clicked Submit.

I tried doing a RingOut, using Password Flow and the token was granted. (It shouldn't. It's supposed to fail, because the app is now supposed to only allow JST).

I then tried doing a RingOut using JWT as shown in my original post, and a token was not granted, and I got the same error message shown in my original post.

It seems there is something I'm supposed to do with the RingCentral APP to make this work. My request follows the instructions at

https://developers.ringcentral.com/guide/authentication/jwt-flow

Is there someone I can hire for the 20 or 30 minutes it would take to get this figured out? I need someone who can ensure my RingCentral APP and JWT is set up correctly, then, I need them to build a Postman request that works, that requests a token. From Postman, I should be able to translate into Freepascal's HTTP component.

I recommend you to submit a dev support ticket and someone can have a look at your app settings and help you out with postman API call too.