noresponse 2.0.17

data/lib/no_response/auth.rb

@@ -0,0 +1,263 @@
+# typed: false
+# frozen_string_literal: true
+
+# Auth context adapters. Generated by tools/generate_auth_adapters.py; do not edit.
+#
+# Each adapter maps claims your backend has already verified into the
+# auth_context of an assessment request. Pass verified claims, not a raw token.
+#
+# The mapping is the claim map (contracts/api/v1/fixtures/assessment-contract/
+# auth-context-claim-map.json), run by the small interpreter below. Every SDK
+# runs the same table and the same vectors. A claim that is missing, mistyped
+# or out of range maps to absent, never to a stronger assurance.
+#
+# Claims and overrides are hashes as JSON.parse gives them (symbol keys are
+# accepted). Overrides use the auth_context field names, for example
+# :email_verified. Every method raises ArgumentError when the claims have no
+# valid issuer and subject or the provider is not a lowercase slug.
+
+require 'json'
+require 'time'
+
+module NoResponse
+  module Auth
+    CLAIM_MAP_JSON = <<~'JSON'
+      {"version":1,"kinds":{"id":{"pattern":"[A-Za-z0-9._:@/|+=~-]+","maxLength":256},"audience":{"pattern":"[A-Za-z0-9._:/-]+","maxLength":256},"role":{"pattern":"[A-Za-z0-9._:@/-]+","maxLength":64},"method":{"pattern":"[A-Za-z0-9._:-]+","maxLength":32},"issuer":{"pattern":"https://[\\x21-\\x7e]+","maxLength":256},"time":{"pattern":"[0-9]{4}-(0[1-9]|1[0-2])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:([0-5][0-9]|60)(\\.[0-9]+)?(Z|[+-]([01][0-9]|2[0-3]):[0-5][0-9])","maxLength":64}},"slug":"[a-z0-9][a-z0-9._-]{1,31}","constants":{"verified":true,"transport":"backend"},"base":{"issuer":{"op":"id","kind":"issuer","claims":["iss"],"required":true},"subject":{"op":"id","kind":"id","claims":["sub"],"required":true},"audiences":{"op":"list","kind":"audience","claims":["aud"],"split":"whitespace","max":8},"issued_at":{"op":"time","claims":["iat"]},"expires_at":{"op":"time","claims":["exp"]},"auth_time":{"op":"time","claims":["auth_time"]},"session_id":{"op":"id","kind":"id","claims":["sid"]},"token_id":{"op":"id","kind":"id","claims":["jti"]}},"providers":{"workos":{"fields":{"organization_id":{"op":"id","kind":"id","claims":["org_id"]},"roles":{"op":"list","kind":"role","claims":["roles","role"],"split":"whitespace","max":32},"scopes":{"op":"list","kind":"role","claims":["permissions"],"split":"whitespace","max":32},"impersonated":{"op":"actor","claims":["act"]}}},"clerk":{"disable":["issued_at"],"fields":{"organization_id":{"op":"id","kind":"id","claims":["o.id","org_id"]},"roles":{"op":"list","kind":"role","claims":["o.rol","org_role"],"split":"none","max":32},"scopes":{"op":"list","kind":"role","claims":["o.per","org_permissions"],"split":"comma_whitespace","max":32},"impersonated":{"op":"actor","claims":["act"]},"mfa":{"op":"mfa_factor_age","claim":"fva","index":1,"unitSeconds":60,"maxSeconds":315360000}}},"auth0":{"fields":{"organization_id":{"op":"id","kind":"id","claims":["org_id"]},"scopes":{"op":"list","kind":"role","claims":["scope","permissions"],"split":"whitespace","max":32},"email_verified":{"op":"bool","claims":["email_verified"]},"phone_verified":{"op":"bool","claims":["phone_number_verified"]},"impersonated":{"op":"actor","claims":["act"]},"mfa":{"op":"mfa_methods","kind":"method","claim":"amr","max":8,"mfaValue":"mfa","ignore":["pwd"]}}},"supabase":{"disable":["auth_time"],"fields":{"session_id":{"op":"id","kind":"id","claims":["session_id"]},"roles":{"op":"list","kind":"role","claims":["role"],"split":"none","max":1},"mfa":{"op":"mfa_aal","claim":"aal","present":["aal2"],"absent":["aal1"],"amr":"amr","methodKey":"method","factors":{"totp":"totp","mfa/phone":"mfa:phone","mfa/webauthn":"mfa:webauthn","mfa/recovery_code":"mfa:recovery_code"}},"assurance_level":{"op":"marker","value":"low","when":[{"claim":"is_anonymous","equals":true},{"claim":"app_metadata.provider","equals":"anonymous"}]}}},"firebase":{"disable":["session_id","token_id"],"fields":{"tenant_id":{"op":"id","kind":"id","claims":["firebase.tenant"]},"mfa":{"op":"mfa_factor","kind":"method","claim":"firebase.sign_in_second_factor"},"assurance_level":{"op":"marker","value":"low","when":[{"claim":"firebase.sign_in_provider","equals":"anonymous"}]}}},"cognito":{"fields":{"audiences":{"op":"list","kind":"audience","claims":["aud","client_id"],"split":"none","max":8},"session_id":{"op":"id","kind":"id","claims":["origin_jti"]},"roles":{"op":"list","kind":"role","claims":["cognito:groups"],"split":"none","max":32},"scopes":{"op":"list","kind":"role","claims":["scope"],"split":"whitespace","max":32},"mfa":{"op":"mfa_methods","kind":"method","claim":"amr","max":8,"mfaValue":"mfa","ignore":["pwd"]}}},"entra":{"fields":{"tenant_id":{"op":"id","kind":"id","claims":["tid"]},"token_id":{"op":"id","kind":"id","claims":["uti"]},"roles":{"op":"list","kind":"role","claims":["roles"],"split":"none","max":32},"scopes":{"op":"list","kind":"role","claims":["scp"],"split":"whitespace","max":32},"mfa":{"op":"mfa_methods","kind":"method","claim":"amr","max":8,"mfaValue":"mfa","ignore":["pwd","none"]}}},"keycloak":{"fields":{"session_id":{"op":"id","kind":"id","claims":["sid","session_state"]},"organization_id":{"op":"id","kind":"id","claims":["organization"],"single":true},"roles":{"op":"list","kind":"role","claims":["realm_access.roles"],"split":"none","max":32},"scopes":{"op":"list","kind":"role","claims":["scope"],"split":"whitespace","max":32},"impersonated":{"op":"actor","claims":["impersonator.id","impersonator.username"],"onlyTrue":true},"mfa":{"op":"mfa_methods","kind":"method","claim":"amr","max":8,"mfaValue":"mfa","ignore":["pwd"],"classes":{"pwd":"knowledge","pin":"knowledge","kba":"knowledge","otp":"possession","hwk":"possession","swk":"possession","sc":"possession","sms":"possession","tel":"possession","fpt":"inherence","face":"inherence","iris":"inherence","retina":"inherence","vbm":"inherence"}}}},"ory":{"disable":["issuer","audiences","issued_at","token_id"],"fields":{"subject":{"op":"id","kind":"id","claims":["identity.id"],"required":true},"session_id":{"op":"id","kind":"id","claims":["id"]},"expires_at":{"op":"time","claims":["expires_at"]},"auth_time":{"op":"time","claims":["authenticated_at"]},"session_created_at":{"op":"time","claims":["issued_at"]},"account_created_at":{"op":"time","claims":["identity.created_at"]},"organization_id":{"op":"id","kind":"id","claims":["identity.organization_id"]},"mfa":{"op":"mfa_aal","claim":"authenticator_assurance_level","present":["aal2"],"absent":["aal1"],"amr":"authentication_methods","methodKey":"method","levelKey":"aal","factors":{"totp":"totp","lookup_secret":"lookup_secret","webauthn":"webauthn","code":"code"}}}},"ory_oauth2":{"fields":{"mfa":{"op":"mfa_methods","kind":"method","claim":"amr","max":8,"mfaValue":"mfa","ignore":["password","pwd"],"classes":{"password":"knowledge","totp":"possession","lookup_secret":"possession","webauthn":"possession","code":"possession"}}}},"oidc":{"slugArgument":true,"fields":{}}}}
+    JSON
+
+    CLAIM_MAP = JSON.parse(CLAIM_MAP_JSON).freeze
+    KINDS = CLAIM_MAP['kinds'].transform_values do |kind|
+      [Regexp.new("\\A(?:#{kind['pattern']})\\z"), kind['maxLength']]
+    end.freeze
+    SLUG = Regexp.new("\\A(?:#{CLAIM_MAP['slug']})\\z")
+    SPLITTERS = {
+      'whitespace' => /[ \t\r\n\f\v]+/,
+      'comma_whitespace' => /[ \t\r\n\f\v,]+/
+    }.freeze
+    MAX_TIME = 253_402_300_799
+
+    class << self
+      # Map verified WorkOS AuthKit claims plus verified user or session record overrides.
+      def from_workos(claims, overrides = nil)
+        build('workos', 'workos', claims, overrides)
+      end
+
+      # Map verified Clerk session claims. Pass Session.created_at as :session_created_at.
+      def from_clerk(claims, overrides = nil)
+        build('clerk', 'clerk', claims, overrides)
+      end
+
+      # Map verified Auth0 ID token, userinfo or normalised session claims.
+      # Do not pass an opaque API access token.
+      def from_auth0(claims, overrides = nil)
+        build('auth0', 'auth0', claims, overrides)
+      end
+
+      # Map verified Supabase Auth access token claims (legacy HS256 secret or JWKS).
+      # Pass the user record's contact verification as overrides.
+      def from_supabase(claims, overrides = nil)
+        build('supabase', 'supabase', claims, overrides)
+      end
+
+      # Map verified Firebase ID token claims from the Admin SDK verifyIdToken.
+      # Custom claims never change the mapping.
+      def from_firebase(claims, overrides = nil)
+        build('firebase', 'firebase', claims, overrides)
+      end
+
+      # Map verified Amazon Cognito user pool ID or access token claims.
+      # Claims added by a pre token generation Lambda never change the mapping.
+      def from_cognito(claims, overrides = nil)
+        build('cognito', 'cognito', claims, overrides)
+      end
+
+      # Map verified Microsoft Entra ID v1.0 or v2.0 ID or access token claims.
+      def from_entra(claims, overrides = nil)
+        build('entra', 'entra', claims, overrides)
+      end
+
+      # Map verified Keycloak ID or access token claims.
+      def from_keycloak(claims, overrides = nil)
+        build('keycloak', 'keycloak', claims, overrides)
+      end
+
+      # Map an Ory session from toSession (Kratos FrontendApi).
+      # Pass your project URL as the :issuer override.
+      def from_ory(session, overrides = nil)
+        build('ory', 'ory', session, overrides)
+      end
+
+      # Map verified Ory OAuth2 and OpenID Connect (Hydra) ID token claims.
+      def from_ory_oauth2(claims, overrides = nil)
+        build('ory_oauth2', 'ory', claims, overrides)
+      end
+
+      # Generic OIDC adapter for providers without a first-class helper.
+      # provider is a lowercase slug.
+      def from_oidc(provider, claims, overrides = nil)
+        raise ArgumentError, 'provider must be a lowercase provider slug' unless provider.is_a?(String) && SLUG.match?(provider)
+
+        build('oidc', provider, claims, overrides)
+      end
+
+      private
+
+      def lookup(claims, path)
+        current = claims
+        path.split('.').each do |key|
+          return nil unless current.is_a?(Hash) && current.key?(key)
+
+          current = current[key]
+        end
+        current
+      end
+
+      def number?(value)
+        value.is_a?(Integer) || (value.is_a?(Float) && value.finite?)
+      end
+
+      def matches?(kind, value)
+        pattern, limit = KINDS.fetch(kind)
+        value.is_a?(String) && value.length <= limit && pattern.match?(value)
+      end
+
+      def lower(value)
+        value.tr('A-Z', 'a-z')
+      end
+
+      def map_rule(claims, rule)
+        case rule['op']
+        when 'id'
+          rule['claims'].each do |path|
+            value = lookup(claims, path)
+            value = value[0] if rule['single'] && value.is_a?(Array) && value.length == 1
+            return value if matches?(rule['kind'], value)
+          end
+          nil
+        when 'list' then map_list(claims, rule)
+        when 'time' then map_time(claims, rule)
+        when 'bool'
+          rule['claims'].each do |path|
+            value = lookup(claims, path)
+            return value if [true, false].include?(value)
+          end
+          nil
+        when 'actor'
+          acting = rule['claims'].any? do |path|
+            value = lookup(claims, path)
+            if value.is_a?(Hash)
+              %w[sub email].any? { |key| value[key].is_a?(String) && !value[key].empty? }
+            else
+              value.is_a?(String) && !value.empty?
+            end
+          end
+          acting || (rule['onlyTrue'] ? nil : false)
+        when 'mfa_factor_age'
+          value = lookup(claims, rule['claim'])
+          age = value.is_a?(Array) ? value[rule['index']] : nil
+          return nil unless number?(age)
+
+          seconds = age * rule['unitSeconds']
+          return nil unless seconds >= 0 && seconds <= rule['maxSeconds']
+
+          { 'present' => true, 'age_seconds' => seconds.to_i }
+        when 'mfa_aal'
+          level = lookup(claims, rule['claim'])
+          return nil unless level.is_a?(String)
+          return { 'present' => false } if rule['absent'].include?(level)
+          return nil unless rule['present'].include?(level)
+
+          entries = lookup(claims, rule['amr'])
+          methods = []
+          (entries.is_a?(Array) ? entries : []).each do |entry|
+            if rule.key?('levelKey')
+              level_value = entry.is_a?(Hash) ? entry[rule['levelKey']] : nil
+              next unless level_value.is_a?(String) && rule['present'].include?(level_value)
+            end
+            name = entry.is_a?(Hash) ? entry[rule['methodKey']] : entry
+            mapped = name.is_a?(String) ? rule['factors'][name] : nil
+            methods << mapped if mapped && !methods.include?(mapped)
+          end
+          methods.empty? ? { 'present' => true } : { 'present' => true, 'methods' => methods }
+        when 'mfa_factor'
+          value = lookup(claims, rule['claim'])
+          matches?(rule['kind'], value) ? { 'present' => true, 'methods' => [value] } : nil
+        when 'marker'
+          hit = rule['when'].any? do |test|
+            value = lookup(claims, test['claim'])
+            value.instance_of?(test['equals'].class) && value == test['equals']
+          end
+          hit ? rule['value'] : nil
+        when 'mfa_methods'
+          value = lookup(claims, rule['claim'])
+          return nil unless value.is_a?(Array)
+
+          kept = value.select { |item| matches?(rule['kind'], item) }.first(rule['max'])
+          methods = kept.reject { |item| rule['ignore'].include?(lower(item)) }
+          return nil if methods.empty?
+
+          classes = rule['classes'] || {}
+          spanned = kept.map { |item| classes[lower(item)] }.compact.uniq
+          present = kept.any? { |item| lower(item) == rule['mfaValue'] } || spanned.length >= 2
+          { 'present' => present, 'methods' => methods }
+        else
+          raise ArgumentError, "unknown claim map op #{rule['op']}"
+        end
+      end
+
+      def map_list(claims, rule)
+        split = rule['split'] || 'whitespace'
+        rule['claims'].each do |path|
+          value = lookup(claims, path)
+          items = list_items(value, split)
+          kept = items.select { |item| matches?(rule['kind'], item) }.first(rule['max'])
+          return kept unless kept.empty?
+        end
+        nil
+      end
+
+      def list_items(value, split)
+        return value if value.is_a?(Array)
+        return [] unless value.is_a?(String)
+
+        split == 'none' ? [value] : value.split(SPLITTERS.fetch(split))
+      end
+
+      def map_time(claims, rule)
+        rule['claims'].each do |path|
+          value = lookup(claims, path)
+          # Whole UTC seconds; the fraction is truncated.
+          return Time.at(value.to_i).utc.strftime('%Y-%m-%dT%H:%M:%SZ') if number?(value) && value >= 0 && value <= MAX_TIME
+          return value if matches?('time', value)
+        end
+        nil
+      end
+
+      def normalise(value)
+        JSON.parse(JSON.generate(value.nil? ? {} : value))
+      end
+
+      def build(name, provider, raw_claims, raw_overrides)
+        claims = normalise(raw_claims)
+        overrides = normalise(raw_overrides)
+        spec = CLAIM_MAP['providers'].fetch(name)
+        rules = CLAIM_MAP['base'].merge(spec['fields'])
+        (spec['disable'] || []).each { |field| rules.delete(field) }
+        wire = { 'provider' => provider }.merge(CLAIM_MAP['constants'])
+        rules.each do |field, rule|
+          value = map_rule(claims, rule)
+          wire[field] = value unless value.nil?
+        end
+        overrides.each { |field, value| wire[field] = value unless value.nil? }
+        audiences = wire['audiences']
+        wire['audience'] = audiences[0] if audiences.is_a?(Array) && !audiences.empty? && !wire.key?('audience')
+        %w[issuer subject].each do |key|
+          unless wire[key].is_a?(String) && !wire[key].empty?
+            raise ArgumentError, 'NoResponse auth context requires a verified issuer and subject'
+          end
+        end
+        Models::Shared::AuthContext.from_dict(wire)
+      end
+    end
+  end
+end

data/lib/no_response/issued_credential.rb

@@ -0,0 +1,21 @@
+# typed: true
+# frozen_string_literal: true
+
+# Hash an API key your signup gate issued. Hand-written beside the generated client.
+
+require 'digest'
+
+module NoResponse
+  module IssuedCredential
+    # SHA-256 of an issued API key, as 64 lower-case hex characters. The key
+    # never leaves your backend: send only this hash, as
+    # issued_credential.sha256 on the assessment request. The key is hashed as
+    # its UTF-8 bytes exactly as given, with no trimming or normalisation.
+    # Raises ArgumentError for a nil or empty key.
+    def self.sha256(key)
+      raise ArgumentError, 'issued key must be a non-empty string' unless key.is_a?(String) && !key.empty?
+
+      Digest::SHA256.hexdigest(key.dup.force_encoding(Encoding::UTF_8))
+    end
+  end
+end

data/lib/no_response/keys.rb

@@ -0,0 +1,318 @@
+# typed: true
+# frozen_string_literal: true
+
+require "faraday"
+require "faraday/multipart"
+require "faraday/retry"
+require "sorbet-runtime"
+
+require_relative "sdk_hooks/hooks"
+require_relative "utils/retries"
+
+module NoResponse
+  extend T::Sig
+
+  class Keys
+    extend T::Sig
+
+    # Your own API keys.
+
+    sig { params(sdk_config: SDKConfiguration).void }
+    def initialize(sdk_config)
+      @sdk_configuration = sdk_config
+    end
+
+    sig { params(base_url: String, url_variables: T.nilable(T::Hash[Symbol, T.any(String, T::Enum)])).returns(String) }
+    def get_url(base_url:, url_variables: nil)
+      sd_base_url, sd_options = @sdk_configuration.get_server_details
+
+      if base_url.nil?
+        base_url = sd_base_url
+      end
+
+      if url_variables.nil?
+        url_variables = sd_options
+      end
+
+      return Utils.template_url(base_url, url_variables)
+    end
+
+    sig {
+      params(
+        request: Models::Shared::KeyRotationRequest,
+        timeout_ms: T.nilable(Integer),
+        http_headers: T.nilable(T::Hash[T.any(String, Symbol), String])
+      )
+        .returns(Models::Operations::RotateApiKeyResponse)
+    }
+    def rotate(request:, timeout_ms: nil, http_headers: nil)
+      # rotate - Rotate the API key that signs the request.
+      # Mints a new key with the same scopes as the key that signs the request and returns it once. The presented key keeps working for overlap_seconds (default 24 hours, from 60 seconds to 7 days), then answers 401. A key accepts one rotation: rotating again with a key already in its overlap answers 409 key_rotation_in_progress, so rotate with the new key. Rotation is not idempotent: a retry after a lost answer mints another key.
+      url, params = @sdk_configuration.get_server_details
+      base_url = Utils.template_url(url, params)
+      url = "#{base_url}/v1/keys/rotate"
+      headers = {}
+      headers = T.cast(headers, T::Hash[String, String])
+      req_content_type, data, form = Utils.serialize_request_body(request, false, false, :request, :json)
+      headers["content-type"] = req_content_type
+      raise StandardError, "request body is required" if data.nil? && form.nil?
+
+      if form && !form.empty?
+        body = Utils.encode_form(form)
+      elsif Utils.match_content_type(req_content_type, "application/x-www-form-urlencoded")
+        body = URI.encode_www_form(T.cast(data, T::Hash[Symbol, Object]))
+      else
+        body = data
+      end
+
+      headers["Accept"] = "application/json"
+      headers["user-agent"] = @sdk_configuration.user_agent
+
+      security = @sdk_configuration.security_source&.call
+
+      timeout = (timeout_ms.to_f / 1000) unless timeout_ms.nil?
+      timeout ||= @sdk_configuration.timeout
+
+      connection = @sdk_configuration.client
+
+      hook_ctx = SDKHooks::HookContext.new(
+        config: @sdk_configuration,
+        base_url: base_url,
+        oauth2_scopes: nil,
+        operation_id: "rotateApiKey",
+        security_source: @sdk_configuration.security_source
+      )
+
+      error = T.let(nil, T.nilable(StandardError))
+      http_response = T.let(nil, T.nilable(Faraday::Response))
+
+      begin
+        http_response = T.must(connection).post(url) do |req|
+          req.body = body
+          req.headers.merge!(headers)
+          req.options.timeout = timeout unless timeout.nil?
+          Utils.configure_request_security(req, security)
+          http_headers&.each do |key, value|
+            req.headers[key.to_s] = value
+          end
+
+          @sdk_configuration.hooks.before_request(
+            hook_ctx: SDKHooks::BeforeRequestHookContext.new(
+              hook_ctx: hook_ctx
+            ),
+            request: req
+          )
+        end
+
+      rescue StandardError => e
+        error = e
+      ensure
+        if http_response.nil? || Utils.error_status?(http_response.status)
+          http_response = @sdk_configuration.hooks.after_error(
+            error: error,
+            hook_ctx: SDKHooks::AfterErrorHookContext.new(
+              hook_ctx: hook_ctx
+            ),
+            response: http_response
+          )
+        else
+          http_response = @sdk_configuration.hooks.after_success(
+            hook_ctx: SDKHooks::AfterSuccessHookContext.new(
+              hook_ctx: hook_ctx
+            ),
+            response: http_response
+          )
+        end
+
+        if http_response.nil?
+          raise error if !error.nil?
+          raise "no response"
+        end
+      end
+
+      content_type = http_response.headers.fetch("Content-Type", "application/octet-stream")
+      if Utils.match_status_code(http_response.status, ["201"])
+        if Utils.match_content_type(content_type, "application/json")
+          @sdk_configuration.hooks.after_success(
+            hook_ctx: SDKHooks::AfterSuccessHookContext.new(
+              hook_ctx: hook_ctx
+            ),
+            response: http_response
+          )
+          response_data = http_response.env.response_body
+          obj = Crystalline.unmarshal_json(JSON.parse(response_data), Models::Shared::KeyRotation)
+          result = obj
+          response = Models::Operations::RotateApiKeyResponse.new(
+            result: result,
+            headers: http_response.headers
+          )
+
+          return response
+        else
+          raise(
+            ::NoResponse::Models::Errors::APIStatusError.new(
+              status_code: http_response.status,
+              body: http_response.env.response_body,
+              raw_response: http_response
+            ),
+            "Unknown content type received"
+          )
+        end
+      elsif Utils.match_status_code(http_response.status, ["400"])
+        if Utils.match_content_type(content_type, "application/problem+json")
+          @sdk_configuration.hooks.after_success(
+            hook_ctx: SDKHooks::AfterSuccessHookContext.new(
+              hook_ctx: hook_ctx
+            ),
+            response: http_response
+          )
+          response_data = http_response.env.response_body
+          obj = Crystalline.unmarshal_json(JSON.parse(response_data), Models::Errors::BadRequestError)
+          raise obj
+        else
+          raise(
+            ::NoResponse::Models::Errors::APIStatusError.new(
+              status_code: http_response.status,
+              body: http_response.env.response_body,
+              raw_response: http_response
+            ),
+            "Unknown content type received"
+          )
+        end
+      elsif Utils.match_status_code(http_response.status, ["401"])
+        if Utils.match_content_type(content_type, "application/problem+json")
+          @sdk_configuration.hooks.after_success(
+            hook_ctx: SDKHooks::AfterSuccessHookContext.new(
+              hook_ctx: hook_ctx
+            ),
+            response: http_response
+          )
+          response_data = http_response.env.response_body
+          obj = Crystalline.unmarshal_json(JSON.parse(response_data), Models::Errors::AuthenticationError)
+          raise obj
+        else
+          raise(
+            ::NoResponse::Models::Errors::APIStatusError.new(
+              status_code: http_response.status,
+              body: http_response.env.response_body,
+              raw_response: http_response
+            ),
+            "Unknown content type received"
+          )
+        end
+      elsif Utils.match_status_code(http_response.status, ["403"])
+        if Utils.match_content_type(content_type, "application/problem+json")
+          @sdk_configuration.hooks.after_success(
+            hook_ctx: SDKHooks::AfterSuccessHookContext.new(
+              hook_ctx: hook_ctx
+            ),
+            response: http_response
+          )
+          response_data = http_response.env.response_body
+          obj = Crystalline.unmarshal_json(JSON.parse(response_data), Models::Errors::PermissionDeniedError)
+          raise obj
+        else
+          raise(
+            ::NoResponse::Models::Errors::APIStatusError.new(
+              status_code: http_response.status,
+              body: http_response.env.response_body,
+              raw_response: http_response
+            ),
+            "Unknown content type received"
+          )
+        end
+      elsif Utils.match_status_code(http_response.status, ["404"])
+        if Utils.match_content_type(content_type, "application/problem+json")
+          @sdk_configuration.hooks.after_success(
+            hook_ctx: SDKHooks::AfterSuccessHookContext.new(
+              hook_ctx: hook_ctx
+            ),
+            response: http_response
+          )
+          response_data = http_response.env.response_body
+          obj = Crystalline.unmarshal_json(JSON.parse(response_data), Models::Errors::NotFoundError)
+          raise obj
+        else
+          raise(
+            ::NoResponse::Models::Errors::APIStatusError.new(
+              status_code: http_response.status,
+              body: http_response.env.response_body,
+              raw_response: http_response
+            ),
+            "Unknown content type received"
+          )
+        end
+      elsif Utils.match_status_code(http_response.status, ["409"])
+        if Utils.match_content_type(content_type, "application/problem+json")
+          @sdk_configuration.hooks.after_success(
+            hook_ctx: SDKHooks::AfterSuccessHookContext.new(
+              hook_ctx: hook_ctx
+            ),
+            response: http_response
+          )
+          response_data = http_response.env.response_body
+          obj = Crystalline.unmarshal_json(JSON.parse(response_data), Models::Errors::ConflictError)
+          raise obj
+        else
+          raise(
+            ::NoResponse::Models::Errors::APIStatusError.new(
+              status_code: http_response.status,
+              body: http_response.env.response_body,
+              raw_response: http_response
+            ),
+            "Unknown content type received"
+          )
+        end
+      elsif Utils.match_status_code(http_response.status, ["429"])
+        if Utils.match_content_type(content_type, "application/problem+json")
+          @sdk_configuration.hooks.after_success(
+            hook_ctx: SDKHooks::AfterSuccessHookContext.new(
+              hook_ctx: hook_ctx
+            ),
+            response: http_response
+          )
+          response_data = http_response.env.response_body
+          obj = Crystalline.unmarshal_json(JSON.parse(response_data), Models::Errors::RateLimitError)
+          raise obj
+        else
+          raise(
+            ::NoResponse::Models::Errors::APIStatusError.new(
+              status_code: http_response.status,
+              body: http_response.env.response_body,
+              raw_response: http_response
+            ),
+            "Unknown content type received"
+          )
+        end
+      elsif Utils.match_status_code(http_response.status, ["4XX"])
+        raise(
+          ::NoResponse::Models::Errors::APIStatusError.new(
+            status_code: http_response.status,
+            body: http_response.env.response_body,
+            raw_response: http_response
+          ),
+          "API error occurred"
+        )
+      elsif Utils.match_status_code(http_response.status, ["5XX"])
+        raise(
+          ::NoResponse::Models::Errors::APIStatusError.new(
+            status_code: http_response.status,
+            body: http_response.env.response_body,
+            raw_response: http_response
+          ),
+          "API error occurred"
+        )
+      else
+        raise(
+          ::NoResponse::Models::Errors::APIStatusError.new(
+            status_code: http_response.status,
+            body: http_response.env.response_body,
+            raw_response: http_response
+          ),
+          "Unknown status code received"
+        )
+
+      end
+    end
+  end
+end