Use https://jwt.io/ to generate bearer token. Use this: Algorithm: ES256 Header: { "alg": "ES256", "kid": "[your key id]", "typ": "JWT" } Payload: { "iss": "[your issuer id]", "iat": 1734613799, "exp": 1734614999, "aud": "appstoreconnect-v1" } Note that 'exp' should be less than 1200 seconds from 'iat'. Insert your private key as entire text from downloaded p8 file into 'verify signature' field. Copy generated bearer token from the 'encoded' field.

POST https://api.appstoreconnect.apple.com/v1/authorization use your bearer token. It works for me.