client->ContentType= "application/x-www-form-urlencoded";
   TRESTRequestParameter *prm= request->Params->AddItem("Authorization", "Basic " +b64Encode(sett_client_ID +":" +sett_client_Secr), pkHTTPHEADER);
   prm->Options << poDoNotEncode;
   request->Params->AddItem("grant_type",    "password", pkGETorPOST);
   request->Params->AddItem("username",   "Lotus_DSS",   pkGETorPOST);
   request->Params->AddItem("password",   "",      pkGETorPOST);
   request->Params->AddItem("resource",   "urn:cryptopro:dss:signserver:signserver", pkGETorPOST);
   request->Execute();
   if( resp->StatusCode==200 )   token= JSONObject->GetValue("access_token")->Value();

{ "OperationCode": 2, "Parameters": [
    {"Name": "SignatureType",  "Value": "PDF"},
    {"Name": "PDFFormat",  "Value": "CAdES"},
    {"Name": "CertificateID",  "Value": "%certID%"},
    {"Name": "PDFCertificationLevel",  "Value": "CERTIFIED_NO_CHANGES_ALLOWED"},
    {"Name": "PDFReason",  "Value": "в подпись вносится"},
    {"Name": "PDFLocation",  "Value": " в подпись вносится"},
    {"Name": "DocumentType", "Value": "pdf"},
    {"Name": "DocumentInfo",  "Value": "в уведомление на 2й фактор приходит"},
    {"Name":"TSPAddress","Value":"https://dss.host.ru/TSP/tsp.srf"},
    {"Name": "PdfSignatureTemplateId",  "Value": 2},
    {"Name": "PdfSignatureAppearance",  "Value": "%signStampB64%" }
], "Document": "%docBase64%" }')

	req->Method= rmPOST;
	req->Params->AddItem("Authorization", "Bearer " +tokenAccess.text, pkHTTPHEADER)->Options << poDoNotEncode;
	req->AddBody(strReqJs, ctAPPLICATION_JSON);
	req->Execute();

	AnsiString strReqJs="{\"Resource\": \"urn:cryptopro:dss:signserver:signserver\",\
	\"ClientId\": \"" +settings["clientID"] +"\",\
	\"ClientSecret\": \"" +settings["clientSecr"] +"\",\
	\"TransactionTokenId\": " +transID +"}";     //transID уже с кавычками

	req->AddBody( strReqJs, ctAPPLICATION_JSON);//  for( int i=0; i<r2->Params->Count; i++ )  memLog->Lines->Add( r2->Params->Items[i]->ToString() );
   req->Execute();

	req->Params->AddItem("Authorization", "Bearer " +tokenAccess.text, pkHTTPHEADER)->Options << poDoNotEncode;

	AnsiString strReqJs="{\"Resource\": \"urn:cryptopro:dss:signserver:signserver\",\
	\"ClientId\": \"" +settings["clientID"] +"\",\
	\"ClientSecret\": \"" +settings["clientSecr"] +"\",\
	\"ChallengeResponse\": {\
		\"ChoiceChallengeResponse\": [ {\
			\"RefId\": " +transID +",\
			\"ChoiceSelected\": [{  \"RefID\": \"" +id2fa +"\" }]\
		} ]\
	}}";

	req->AddBody( strReqJs, ctAPPLICATION_JSON);//  for( int i=0; i<r2->Params->Count; i++ )  memLog->Lines->Add( r2->Params->Items[i]->ToString() );
	req->Execute();

	req->Method= rmPOST;
	req->Params->AddItem("Authorization", "Bearer " +tokenAccess.text, pkHTTPHEADER)->Options << poDoNotEncode;

	AnsiString strReqJs="{\
	\"Resource\": \"urn:cryptopro:dss:signserver:signserver\",\
	\"ClientId\": \"" +settings["clientID"] +"\",\
	\"ClientSecret\": \"" +settings["clientSecr"] +"\",\
	\"ChallengeResponse\": {\
	  \"TextChallengeResponse\":[{\
		 \"RefId\": " +transID + ",\
		 \"Value\": \"" +otp +"\"}\
	  ]}\
	}";

	req->AddBody( strReqJs, ctAPPLICATION_JSON);
	req->Execute();

	req->Method= rmPOST;
	req->Params->AddItem("Authorization", "Bearer " +tokenGetDoc.text, pkHTTPHEADER)->Options << poDoNotEncode;

	AnsiString strReqJs="{\"Signature\" : {\"PinCode\" : \"\"}}";
	req->AddBody( strReqJs, ctAPPLICATION_JSON);
	req->Execute();