Since this commit: bdb9838#diff-41c516c6f9713627b4ce8db6b845098b587d92875f254d78041b7f9478b7a6d4R61 (included in 2.9.9).
Authentication is failing because it passes the JWT (client_assertion) in the body but the API does not allow this. It must be a query param (as it was before).
Here is Okta's documentation:
https://developer.okta.com/docs/reference/rest/#get-an-access-token-from-a-signed-jwt
Would it be possible to revert this commit?