Anybody ...? I don't even need an answer ... I'd just take a suggestion on what to look at next ...
"wid": "my workspace id",
"rid": "my report id",
"wcn": "my workspace collection",
"iss": "my domain",
Yes, I swapped out my token generator for a Microsoft implementation and found that I was base64 encoding my signing key one too many times. I fixed my generator and was able to get the JS sample to work. Hope this helps.