@cmarket/partner-sdk 9.3.0 → 9.5.0

package/README.md

@@ -13,7 +13,7 @@ CMARKET V6 Partner API 의 공식 클라이언트 SDK — 외부 ERP 가 입찰
 TypeScript / Node (npm):
 
 ```bash
-npm install @cmarket/partner-sdk@9.3.0
+npm install @cmarket/partner-sdk@9.5.0
 ```
 
 Java (Maven):
@@ -22,7 +22,7 @@ Java (Maven):
 <dependency>
   <groupId>net.c-market</groupId>
   <artifactId>partner-sdk</artifactId>
-  <version>9.3.0</version>
+  <version>9.5.0</version>
 </dependency>
 ```
 
@@ -39,6 +39,32 @@ Java (Maven):
 
 ## 인증 (Authentication)
 
+### SDK 자동관리 — `createPartnerClient` (권장 경로)
+
+`/v2` 통합자는 토큰 발급·캐시·만료 60초 전 선갱신·401 재발급 재시도·(선택) DPoP proof 를 직접 구현하지 말고 SDK 팩토리에 위임하세요. `createPartnerClient()` 가 반환하는 `v2`/`oauth` 클라이언트는 매 요청에 `Authorization` 헤더를 자동 부착합니다.
+
+```ts
+import { createPartnerClient } from '@cmarket/partner-sdk/partner-client';
+
+const client = createPartnerClient({
+  baseUrl: 'https://partner-api.c-market.net', // staging: https://partner-api.staging.c-market.net
+  clientId: process.env.CMARKET_CLIENT_ID!,
+  clientSecret: process.env.CMARKET_CLIENT_SECRET!,
+  scope: 'bids:write bids:read',
+  // dpop: true, // 키 바인딩 토큰(DPoP)을 쓰는 파트너만
+});
+
+// 토큰 발급/캐시/갱신은 SDK 가 처리 — write 는 Idempotency-Key 만 챙기면 됩니다.
+await client.v2.registerBid(
+  { buyerId: 'BUYER-001', projectName: '2026 사무용품 구매' },
+  { headers: { 'Idempotency-Key': crypto.randomUUID() } },
+);
+```
+
+Java 도 동일하게 `PartnerClient.create(config)` → `client.v2()` 로 사용합니다.
+
+아래 `### /v2 — OAuth2 Client Credentials` 이하는 토큰을 **직접 발급·관리**할 때의 계약 정본(수동/raw)입니다.
+
 ### `/v2` — OAuth2 Client Credentials (권장)
 
 `/v2` 호출은 OAuth2 client_credentials 그랜트(RFC 6749 §4.4)로 발급한 JWT access token 을 `Authorization: Bearer <token>` 헤더에 실어야 합니다.
@@ -271,6 +297,47 @@ curl -X POST "$BASE/v2/bids" \
   -d '{ "buyerId": "BUYER-001", "projectName": "2026 사무용품 구매" }'
 ```
 
+#### DPoP (키 바인딩 토큰) — proof 직접 서명
+
+DPoP 를 요구하는 파트너는 요청마다 짧은 수명의 proof JWT(RFC 9449)를 서명해 `DPoP` 헤더에, 토큰은 `Authorization: DPoP <token>` 로 실어야 합니다. SDK 를 쓰면 `dpop: true` 한 줄로 자동 처리되지만, raw 로 직접 서명하려면 다음과 같습니다(Node `jose`).
+
+- 클라이언트 수명 동안 **ES256 키쌍 1개**를 재사용하고, 공개키(JWK)를 proof 헤더에 넣습니다.
+- proof payload: `htm`(HTTP 메서드), `htu`(쿼리 제외 요청 URL), `iat`, `jti`(고유). 리소스 호출에는 access token 해시 `ath` 도 포함(토큰 엔드포인트 proof 에는 `ath` 없음).
+- proof 헤더: `alg=ES256`, `typ=dpop+jwt`, `jwk`(공개키).
+
+```ts
+import { SignJWT, exportJWK, generateKeyPair, type JWK } from 'jose';
+
+const { privateKey, publicKey } = await generateKeyPair('ES256', { extractable: true });
+const jwk = (await exportJWK(publicKey)) as JWK;
+
+async function dpopProof(htm: string, htu: string, accessToken?: string) {
+  const payload: Record<string, unknown> = { htm, htu, jti: crypto.randomUUID() };
+  if (accessToken) {
+    const digest = new Uint8Array(
+      await crypto.subtle.digest('SHA-256', new TextEncoder().encode(accessToken)),
+    );
+    payload.ath = Buffer.from(digest).toString('base64url'); // access token 해시 바인딩
+  }
+  return new SignJWT(payload)
+    .setProtectedHeader({ alg: 'ES256', typ: 'dpop+jwt', jwk })
+    .setIssuedAt()
+    .sign(privateKey);
+}
+
+// 1) 토큰 발급 — 토큰 엔드포인트 proof 에는 ath 없음
+const tokenProof = await dpopProof('POST', `${BASE}/oauth/token`);
+// fetch(`${BASE}/oauth/token`, { method: 'POST', headers: { DPoP: tokenProof, ... }, body });
+
+// 2) /v2 호출 — Authorization: DPoP + access token 해시(ath) 포함 proof
+const callProof = await dpopProof('POST', `${BASE}/v2/bids`, accessToken);
+// fetch(`${BASE}/v2/bids`, {
+//   method: 'POST',
+//   headers: { Authorization: `DPoP ${accessToken}`, DPoP: callProof, 'Idempotency-Key': crypto.randomUUID() },
+//   body,
+// });
+```
+
 ## 첫 성공 확인 (First success)
 
 1. `/oauth/token` 호출이 200 + `access_token` 을 반환하면 자격증명·스코프가 유효합니다(401 `invalid_client` 면 client_id/secret 확인).
@@ -278,6 +345,24 @@ curl -X POST "$BASE/v2/bids" \
 3. `registerBid` 가 2xx 를 반환하면 입찰이 등록된 것입니다. 같은 `Idempotency-Key` + 같은 body 로 재호출하면 동일 응답이 replay 됩니다.
 4. 403 `insufficient-scope` 면 토큰 발급 시 `scope` 에 해당 권한을 포함했는지(그리고 키에 그 스코프가 부여됐는지) 확인하세요.
 
+## 임베드 UI (발주기관 ERP iframe)
+
+발주기관 담당자가 ERP 화면 안에서 재로그인 없이 cmarket 공고 등록 화면을 쓰게 하려면
+Partner API 의 `POST /v2/embed/launch`(scope `embed:launch`)로 일회성 launch code(60초)를
+발급하고, 프론트에서는 임베드 SDK 로 iframe 을 마운트하세요:
+
+```html
+<script src="https://cdn.jsdelivr.net/npm/@cmarket/embed@0.1.0/dist/embed.umd.js"></script>
+<script>
+  CMarketEmbed.mount('#slot', { launchCode: code, screen: 'bid-register' });
+</script>
+```
+
+npm(`npm install @cmarket/embed`)으로도 동일 API 를 제공합니다. 상세 통합 가이드·보안
+설계·버전 핀 규율은 [@cmarket/embed](https://www.npmjs.com/package/@cmarket/embed) README 를
+참고하세요. CDN URL 은 반드시 버전을 핀하고(`latest` 금지), 임베드 origin 은 온보딩 시
+CMARKET 운영팀에 등록해야 합니다(미등록 origin 은 iframe 로드가 차단됩니다).
+
 ## 버전 정책
 
 - URI versioning. `/v1`, `/v2` 모두 운영 중이며 어느 쪽도 deprecated 아닙니다.
@@ -288,7 +373,7 @@ curl -X POST "$BASE/v2/bids" \
 
 ---
 
-## @cmarket/partner-sdk@9.3.0
+## @cmarket/partner-sdk@9.5.0
 
 This generator creates TypeScript/JavaScript client that utilizes [axios](https://github.com/axios/axios). The generated Node module can be used in the following environments:
 
@@ -326,7 +411,7 @@ navigate to the folder of your consuming project and run one of the following co
 _published:_
 
 ```
-npm install @cmarket/partner-sdk@9.3.0 --save
+npm install @cmarket/partner-sdk@9.5.0 --save
 ```
 
 _unPublished (not recommended):_
@@ -352,6 +437,7 @@ Class | Method | HTTP request | Description
 *PartnerV1Api* | [**v1RequestSplitInvoice**](docs/PartnerV1Api.md#v1requestsplitinvoice) | **POST** /v1/invoices/split-requests | 계산서 분할 발급 청구 — V5 충실
 *PartnerV1Api* | [**v1SubmitNegotiationScores**](docs/PartnerV1Api.md#v1submitnegotiationscores) | **POST** /v1/awards/nego-eval | 협상(H/K) 점수평가 — V5 충실
 *PartnerV2Api* | [**completeAcceptance**](docs/PartnerV2Api.md#completeacceptance) | **POST** /v2/bids/{bidId}/acceptance | 검수완료 전송
+*PartnerV2Api* | [**createEmbedLaunch**](docs/PartnerV2Api.md#createembedlaunch) | **POST** /v2/embed/launch | 임베드 launch code 발급 (iframe SSO)
 *PartnerV2Api* | [**getBidResults**](docs/PartnerV2Api.md#getbidresults) | **GET** /v2/bids/{bidId}/results | 입찰 결과 조회
 *PartnerV2Api* | [**getBidSettlement**](docs/PartnerV2Api.md#getbidsettlement) | **GET** /v2/bids/{bidId}/settlement | 입찰결과 정산정보 조회
 *PartnerV2Api* | [**getBidStatement**](docs/PartnerV2Api.md#getbidstatement) | **GET** /v2/bids/{bidId}/statement | 거래명세서 조회
@@ -395,6 +481,8 @@ Class | Method | HTTP request | Description
  - [ContractDocumentItemDto](docs/ContractDocumentItemDto.md)
  - [CreateBidRequestDto](docs/CreateBidRequestDto.md)
  - [CreateBidV1RequestDto](docs/CreateBidV1RequestDto.md)
+ - [EmbedLaunchRequestDto](docs/EmbedLaunchRequestDto.md)
+ - [EmbedLaunchResponseDto](docs/EmbedLaunchResponseDto.md)
  - [FileUploadedResponseDto](docs/FileUploadedResponseDto.md)
  - [HealthResponseDto](docs/HealthResponseDto.md)
  - [HierarchicalRegionDto](docs/HierarchicalRegionDto.md)

package/api/oauth-api.ts

@@ -4,7 +4,7 @@
  * CMARKET V6 Partner API
  * 외부 ERP 연동용 RESTful API.  ## 버전별 인증 - **_/v2** — OAuth2 Bearer JWT (`client_credentials` 플로우). `/oauth/token` 에서 토큰 발급 후 `Authorization: Bearer <token>` 헤더. - **_/v1** — V5 충실 platform-auth. `X-Platform-Id`(cate_set.api_id) / `X-Platform-Secret`(cate_set.api_secret, MD5-hex) 헤더로 전송.
  *
- * The version of the OpenAPI document: 9.3.0
+ * The version of the OpenAPI document: 9.5.0
  * Contact: semo.io.kr@gmail.com
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/api/partner-v1-api.ts

@@ -4,7 +4,7 @@
  * CMARKET V6 Partner API
  * 외부 ERP 연동용 RESTful API.  ## 버전별 인증 - **_/v2** — OAuth2 Bearer JWT (`client_credentials` 플로우). `/oauth/token` 에서 토큰 발급 후 `Authorization: Bearer <token>` 헤더. - **_/v1** — V5 충실 platform-auth. `X-Platform-Id`(cate_set.api_id) / `X-Platform-Secret`(cate_set.api_secret, MD5-hex) 헤더로 전송.
  *
- * The version of the OpenAPI document: 9.3.0
+ * The version of the OpenAPI document: 9.5.0
  * Contact: semo.io.kr@gmail.com
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/api/partner-v2-api.ts

@@ -4,7 +4,7 @@
  * CMARKET V6 Partner API
  * 외부 ERP 연동용 RESTful API.  ## 버전별 인증 - **_/v2** — OAuth2 Bearer JWT (`client_credentials` 플로우). `/oauth/token` 에서 토큰 발급 후 `Authorization: Bearer <token>` 헤더. - **_/v1** — V5 충실 platform-auth. `X-Platform-Id`(cate_set.api_id) / `X-Platform-Secret`(cate_set.api_secret, MD5-hex) 헤더로 전송.
  *
- * The version of the OpenAPI document: 9.3.0
+ * The version of the OpenAPI document: 9.5.0
  * Contact: semo.io.kr@gmail.com
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
@@ -40,6 +40,10 @@ import type { CompleteAcceptanceRequestDto } from '../models';
 // @ts-ignore
 import type { CreateBidRequestDto } from '../models';
 // @ts-ignore
+import type { EmbedLaunchRequestDto } from '../models';
+// @ts-ignore
+import type { EmbedLaunchResponseDto } from '../models';
+// @ts-ignore
 import type { FileUploadedResponseDto } from '../models';
 // @ts-ignore
 import type { HealthResponseDto } from '../models';
@@ -105,6 +109,45 @@ export const PartnerV2ApiAxiosParamCreator = function (configuration?: Configura
                 options: localVarRequestOptions,
             };
         },
+        /**
+         * 스코프 `embed:launch` 필수. 발주기관 담당자(memberId)용 일회성 launch code(60초 TTL)를 발급한다. code 는 URL 에 싣지 말고 @cmarket/embed SDK 의 postMessage 핸드셰이크로만 iframe 에 전달할 것. memberId 가 이 API 키의 발주처 소속이 아니면 403, 미허용 screen 은 400.
+         * @summary 임베드 launch code 발급 (iframe SSO)
+         * @param {EmbedLaunchRequestDto} embedLaunchRequestDto 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        createEmbedLaunch: async (embedLaunchRequestDto: EmbedLaunchRequestDto, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'embedLaunchRequestDto' is not null or undefined
+            assertParamExists('createEmbedLaunch', 'embedLaunchRequestDto', embedLaunchRequestDto)
+            const localVarPath = `/v2/embed/launch`;
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'POST', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication partner-oauth2 required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+            localVarHeaderParameter['Accept'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+            localVarRequestOptions.data = serializeDataIfNeeded(embedLaunchRequestDto, localVarRequestOptions, configuration)
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
         /**
          * V5 /entendrec 후속. scope bids:read.
          * @summary 입찰 결과 조회
@@ -455,6 +498,19 @@ export const PartnerV2ApiFp = function(configuration?: Configuration) {
             const localVarOperationServerBasePath = operationServerMap['PartnerV2Api.completeAcceptance']?.[localVarOperationServerIndex]?.url;
             return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
+        /**
+         * 스코프 `embed:launch` 필수. 발주기관 담당자(memberId)용 일회성 launch code(60초 TTL)를 발급한다. code 는 URL 에 싣지 말고 @cmarket/embed SDK 의 postMessage 핸드셰이크로만 iframe 에 전달할 것. memberId 가 이 API 키의 발주처 소속이 아니면 403, 미허용 screen 은 400.
+         * @summary 임베드 launch code 발급 (iframe SSO)
+         * @param {EmbedLaunchRequestDto} embedLaunchRequestDto 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async createEmbedLaunch(embedLaunchRequestDto: EmbedLaunchRequestDto, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<EmbedLaunchResponseDto>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.createEmbedLaunch(embedLaunchRequestDto, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['PartnerV2Api.createEmbedLaunch']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
         /**
          * V5 /entendrec 후속. scope bids:read.
          * @summary 입찰 결과 조회
@@ -583,6 +639,16 @@ export const PartnerV2ApiFactory = function (configuration?: Configuration, base
         completeAcceptance(bidId: string, idempotencyKey: string, completeAcceptanceRequestDto: CompleteAcceptanceRequestDto, options?: RawAxiosRequestConfig): AxiosPromise<AcceptanceResultResponseDto> {
             return localVarFp.completeAcceptance(bidId, idempotencyKey, completeAcceptanceRequestDto, options).then((request) => request(axios, basePath));
         },
+        /**
+         * 스코프 `embed:launch` 필수. 발주기관 담당자(memberId)용 일회성 launch code(60초 TTL)를 발급한다. code 는 URL 에 싣지 말고 @cmarket/embed SDK 의 postMessage 핸드셰이크로만 iframe 에 전달할 것. memberId 가 이 API 키의 발주처 소속이 아니면 403, 미허용 screen 은 400.
+         * @summary 임베드 launch code 발급 (iframe SSO)
+         * @param {EmbedLaunchRequestDto} embedLaunchRequestDto 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        createEmbedLaunch(embedLaunchRequestDto: EmbedLaunchRequestDto, options?: RawAxiosRequestConfig): AxiosPromise<EmbedLaunchResponseDto> {
+            return localVarFp.createEmbedLaunch(embedLaunchRequestDto, options).then((request) => request(axios, basePath));
+        },
         /**
          * V5 /entendrec 후속. scope bids:read.
          * @summary 입찰 결과 조회
@@ -686,6 +752,17 @@ export class PartnerV2Api extends BaseAPI {
         return PartnerV2ApiFp(this.configuration).completeAcceptance(bidId, idempotencyKey, completeAcceptanceRequestDto, options).then((request) => request(this.axios, this.basePath));
     }
 
+    /**
+     * 스코프 `embed:launch` 필수. 발주기관 담당자(memberId)용 일회성 launch code(60초 TTL)를 발급한다. code 는 URL 에 싣지 말고 @cmarket/embed SDK 의 postMessage 핸드셰이크로만 iframe 에 전달할 것. memberId 가 이 API 키의 발주처 소속이 아니면 403, 미허용 screen 은 400.
+     * @summary 임베드 launch code 발급 (iframe SSO)
+     * @param {EmbedLaunchRequestDto} embedLaunchRequestDto 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    public createEmbedLaunch(embedLaunchRequestDto: EmbedLaunchRequestDto, options?: RawAxiosRequestConfig) {
+        return PartnerV2ApiFp(this.configuration).createEmbedLaunch(embedLaunchRequestDto, options).then((request) => request(this.axios, this.basePath));
+    }
+
     /**
      * V5 /entendrec 후속. scope bids:read.
      * @summary 입찰 결과 조회

package/api.ts

@@ -4,7 +4,7 @@
  * CMARKET V6 Partner API
  * 외부 ERP 연동용 RESTful API.  ## 버전별 인증 - **_/v2** — OAuth2 Bearer JWT (`client_credentials` 플로우). `/oauth/token` 에서 토큰 발급 후 `Authorization: Bearer <token>` 헤더. - **_/v1** — V5 충실 platform-auth. `X-Platform-Id`(cate_set.api_id) / `X-Platform-Secret`(cate_set.api_secret, MD5-hex) 헤더로 전송.
  *
- * The version of the OpenAPI document: 9.3.0
+ * The version of the OpenAPI document: 9.5.0
  * Contact: semo.io.kr@gmail.com
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/base.ts

@@ -4,7 +4,7 @@
  * CMARKET V6 Partner API
  * 외부 ERP 연동용 RESTful API.  ## 버전별 인증 - **_/v2** — OAuth2 Bearer JWT (`client_credentials` 플로우). `/oauth/token` 에서 토큰 발급 후 `Authorization: Bearer <token>` 헤더. - **_/v1** — V5 충실 platform-auth. `X-Platform-Id`(cate_set.api_id) / `X-Platform-Secret`(cate_set.api_secret, MD5-hex) 헤더로 전송.
  *
- * The version of the OpenAPI document: 9.3.0
+ * The version of the OpenAPI document: 9.5.0
  * Contact: semo.io.kr@gmail.com
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/common.ts

@@ -4,7 +4,7 @@
  * CMARKET V6 Partner API
  * 외부 ERP 연동용 RESTful API.  ## 버전별 인증 - **_/v2** — OAuth2 Bearer JWT (`client_credentials` 플로우). `/oauth/token` 에서 토큰 발급 후 `Authorization: Bearer <token>` 헤더. - **_/v1** — V5 충실 platform-auth. `X-Platform-Id`(cate_set.api_id) / `X-Platform-Secret`(cate_set.api_secret, MD5-hex) 헤더로 전송.
  *
- * The version of the OpenAPI document: 9.3.0
+ * The version of the OpenAPI document: 9.5.0
  * Contact: semo.io.kr@gmail.com
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/configuration.ts

@@ -3,7 +3,7 @@
  * CMARKET V6 Partner API
  * 외부 ERP 연동용 RESTful API.  ## 버전별 인증 - **_/v2** — OAuth2 Bearer JWT (`client_credentials` 플로우). `/oauth/token` 에서 토큰 발급 후 `Authorization: Bearer <token>` 헤더. - **_/v1** — V5 충실 platform-auth. `X-Platform-Id`(cate_set.api_id) / `X-Platform-Secret`(cate_set.api_secret, MD5-hex) 헤더로 전송.
  *
- * The version of the OpenAPI document: 9.3.0
+ * The version of the OpenAPI document: 9.5.0
  * Contact: semo.io.kr@gmail.com
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/api/oauth-api.d.ts

@@ -2,7 +2,7 @@
  * CMARKET V6 Partner API
  * 외부 ERP 연동용 RESTful API.  ## 버전별 인증 - **_/v2** — OAuth2 Bearer JWT (`client_credentials` 플로우). `/oauth/token` 에서 토큰 발급 후 `Authorization: Bearer <token>` 헤더. - **_/v1** — V5 충실 platform-auth. `X-Platform-Id`(cate_set.api_id) / `X-Platform-Secret`(cate_set.api_secret, MD5-hex) 헤더로 전송.
  *
- * The version of the OpenAPI document: 9.3.0
+ * The version of the OpenAPI document: 9.5.0
  * Contact: semo.io.kr@gmail.com
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/api/oauth-api.js

@@ -5,7 +5,7 @@
  * CMARKET V6 Partner API
  * 외부 ERP 연동용 RESTful API.  ## 버전별 인증 - **_/v2** — OAuth2 Bearer JWT (`client_credentials` 플로우). `/oauth/token` 에서 토큰 발급 후 `Authorization: Bearer <token>` 헤더. - **_/v1** — V5 충실 platform-auth. `X-Platform-Id`(cate_set.api_id) / `X-Platform-Secret`(cate_set.api_secret, MD5-hex) 헤더로 전송.
  *
- * The version of the OpenAPI document: 9.3.0
+ * The version of the OpenAPI document: 9.5.0
  * Contact: semo.io.kr@gmail.com
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/api/partner-v1-api.d.ts

@@ -2,7 +2,7 @@
  * CMARKET V6 Partner API
  * 외부 ERP 연동용 RESTful API.  ## 버전별 인증 - **_/v2** — OAuth2 Bearer JWT (`client_credentials` 플로우). `/oauth/token` 에서 토큰 발급 후 `Authorization: Bearer <token>` 헤더. - **_/v1** — V5 충실 platform-auth. `X-Platform-Id`(cate_set.api_id) / `X-Platform-Secret`(cate_set.api_secret, MD5-hex) 헤더로 전송.
  *
- * The version of the OpenAPI document: 9.3.0
+ * The version of the OpenAPI document: 9.5.0
  * Contact: semo.io.kr@gmail.com
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/api/partner-v1-api.js

@@ -5,7 +5,7 @@
  * CMARKET V6 Partner API
  * 외부 ERP 연동용 RESTful API.  ## 버전별 인증 - **_/v2** — OAuth2 Bearer JWT (`client_credentials` 플로우). `/oauth/token` 에서 토큰 발급 후 `Authorization: Bearer <token>` 헤더. - **_/v1** — V5 충실 platform-auth. `X-Platform-Id`(cate_set.api_id) / `X-Platform-Secret`(cate_set.api_secret, MD5-hex) 헤더로 전송.
  *
- * The version of the OpenAPI document: 9.3.0
+ * The version of the OpenAPI document: 9.5.0
  * Contact: semo.io.kr@gmail.com
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/api/partner-v2-api.d.ts

@@ -2,7 +2,7 @@
  * CMARKET V6 Partner API
  * 외부 ERP 연동용 RESTful API.  ## 버전별 인증 - **_/v2** — OAuth2 Bearer JWT (`client_credentials` 플로우). `/oauth/token` 에서 토큰 발급 후 `Authorization: Bearer <token>` 헤더. - **_/v1** — V5 충실 platform-auth. `X-Platform-Id`(cate_set.api_id) / `X-Platform-Secret`(cate_set.api_secret, MD5-hex) 헤더로 전송.
  *
- * The version of the OpenAPI document: 9.3.0
+ * The version of the OpenAPI document: 9.5.0
  * Contact: semo.io.kr@gmail.com
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
@@ -21,6 +21,8 @@ import type { BidSettlementResponseDto } from '../models';
 import type { BidStatementResponseDto } from '../models';
 import type { CompleteAcceptanceRequestDto } from '../models';
 import type { CreateBidRequestDto } from '../models';
+import type { EmbedLaunchRequestDto } from '../models';
+import type { EmbedLaunchResponseDto } from '../models';
 import type { FileUploadedResponseDto } from '../models';
 import type { HealthResponseDto } from '../models';
 import type { MarkBidFailedRequestDto } from '../models';
@@ -40,6 +42,14 @@ export declare const PartnerV2ApiAxiosParamCreator: (configuration?: Configurati
      * @throws {RequiredError}
      */
     completeAcceptance: (bidId: string, idempotencyKey: string, completeAcceptanceRequestDto: CompleteAcceptanceRequestDto, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     * 스코프 `embed:launch` 필수. 발주기관 담당자(memberId)용 일회성 launch code(60초 TTL)를 발급한다. code 는 URL 에 싣지 말고 @cmarket/embed SDK 의 postMessage 핸드셰이크로만 iframe 에 전달할 것. memberId 가 이 API 키의 발주처 소속이 아니면 403, 미허용 screen 은 400.
+     * @summary 임베드 launch code 발급 (iframe SSO)
+     * @param {EmbedLaunchRequestDto} embedLaunchRequestDto
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    createEmbedLaunch: (embedLaunchRequestDto: EmbedLaunchRequestDto, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
     /**
      * V5 /entendrec 후속. scope bids:read.
      * @summary 입찰 결과 조회
@@ -122,6 +132,14 @@ export declare const PartnerV2ApiFp: (configuration?: Configuration) => {
      * @throws {RequiredError}
      */
     completeAcceptance(bidId: string, idempotencyKey: string, completeAcceptanceRequestDto: CompleteAcceptanceRequestDto, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<AcceptanceResultResponseDto>>;
+    /**
+     * 스코프 `embed:launch` 필수. 발주기관 담당자(memberId)용 일회성 launch code(60초 TTL)를 발급한다. code 는 URL 에 싣지 말고 @cmarket/embed SDK 의 postMessage 핸드셰이크로만 iframe 에 전달할 것. memberId 가 이 API 키의 발주처 소속이 아니면 403, 미허용 screen 은 400.
+     * @summary 임베드 launch code 발급 (iframe SSO)
+     * @param {EmbedLaunchRequestDto} embedLaunchRequestDto
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    createEmbedLaunch(embedLaunchRequestDto: EmbedLaunchRequestDto, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<EmbedLaunchResponseDto>>;
     /**
      * V5 /entendrec 후속. scope bids:read.
      * @summary 입찰 결과 조회
@@ -204,6 +222,14 @@ export declare const PartnerV2ApiFactory: (configuration?: Configuration, basePa
      * @throws {RequiredError}
      */
     completeAcceptance(bidId: string, idempotencyKey: string, completeAcceptanceRequestDto: CompleteAcceptanceRequestDto, options?: RawAxiosRequestConfig): AxiosPromise<AcceptanceResultResponseDto>;
+    /**
+     * 스코프 `embed:launch` 필수. 발주기관 담당자(memberId)용 일회성 launch code(60초 TTL)를 발급한다. code 는 URL 에 싣지 말고 @cmarket/embed SDK 의 postMessage 핸드셰이크로만 iframe 에 전달할 것. memberId 가 이 API 키의 발주처 소속이 아니면 403, 미허용 screen 은 400.
+     * @summary 임베드 launch code 발급 (iframe SSO)
+     * @param {EmbedLaunchRequestDto} embedLaunchRequestDto
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    createEmbedLaunch(embedLaunchRequestDto: EmbedLaunchRequestDto, options?: RawAxiosRequestConfig): AxiosPromise<EmbedLaunchResponseDto>;
     /**
      * V5 /entendrec 후속. scope bids:read.
      * @summary 입찰 결과 조회
@@ -286,6 +312,14 @@ export declare class PartnerV2Api extends BaseAPI {
      * @throws {RequiredError}
      */
     completeAcceptance(bidId: string, idempotencyKey: string, completeAcceptanceRequestDto: CompleteAcceptanceRequestDto, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<AcceptanceResultResponseDto, any, {}>>;
+    /**
+     * 스코프 `embed:launch` 필수. 발주기관 담당자(memberId)용 일회성 launch code(60초 TTL)를 발급한다. code 는 URL 에 싣지 말고 @cmarket/embed SDK 의 postMessage 핸드셰이크로만 iframe 에 전달할 것. memberId 가 이 API 키의 발주처 소속이 아니면 403, 미허용 screen 은 400.
+     * @summary 임베드 launch code 발급 (iframe SSO)
+     * @param {EmbedLaunchRequestDto} embedLaunchRequestDto
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    createEmbedLaunch(embedLaunchRequestDto: EmbedLaunchRequestDto, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<EmbedLaunchResponseDto, any, {}>>;
     /**
      * V5 /entendrec 후속. scope bids:read.
      * @summary 입찰 결과 조회

package/dist/api/partner-v2-api.js

@@ -5,7 +5,7 @@
  * CMARKET V6 Partner API
  * 외부 ERP 연동용 RESTful API.  ## 버전별 인증 - **_/v2** — OAuth2 Bearer JWT (`client_credentials` 플로우). `/oauth/token` 에서 토큰 발급 후 `Authorization: Bearer <token>` 헤더. - **_/v1** — V5 충실 platform-auth. `X-Platform-Id`(cate_set.api_id) / `X-Platform-Secret`(cate_set.api_secret, MD5-hex) 헤더로 전송.
  *
- * The version of the OpenAPI document: 9.3.0
+ * The version of the OpenAPI document: 9.5.0
  * Contact: semo.io.kr@gmail.com
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
@@ -78,6 +78,40 @@ const PartnerV2ApiAxiosParamCreator = function (configuration) {
                 options: localVarRequestOptions,
             };
         }),
+        /**
+         * 스코프 `embed:launch` 필수. 발주기관 담당자(memberId)용 일회성 launch code(60초 TTL)를 발급한다. code 는 URL 에 싣지 말고 @cmarket/embed SDK 의 postMessage 핸드셰이크로만 iframe 에 전달할 것. memberId 가 이 API 키의 발주처 소속이 아니면 403, 미허용 screen 은 400.
+         * @summary 임베드 launch code 발급 (iframe SSO)
+         * @param {EmbedLaunchRequestDto} embedLaunchRequestDto
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        createEmbedLaunch: (embedLaunchRequestDto_1, ...args_1) => __awaiter(this, [embedLaunchRequestDto_1, ...args_1], void 0, function* (embedLaunchRequestDto, options = {}) {
+            // verify required parameter 'embedLaunchRequestDto' is not null or undefined
+            (0, common_1.assertParamExists)('createEmbedLaunch', 'embedLaunchRequestDto', embedLaunchRequestDto);
+            const localVarPath = `/v2/embed/launch`;
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'POST' }, baseOptions), options);
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication partner-oauth2 required
+            // http bearer authentication required
+            yield (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+            localVarHeaderParameter['Accept'] = 'application/json';
+            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(embedLaunchRequestDto, localVarRequestOptions, configuration);
+            return {
+                url: (0, common_1.toPathString)(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        }),
         /**
          * V5 /entendrec 후속. scope bids:read.
          * @summary 입찰 결과 조회
@@ -390,6 +424,22 @@ const PartnerV2ApiFp = function (configuration) {
                 return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
             });
         },
+        /**
+         * 스코프 `embed:launch` 필수. 발주기관 담당자(memberId)용 일회성 launch code(60초 TTL)를 발급한다. code 는 URL 에 싣지 말고 @cmarket/embed SDK 의 postMessage 핸드셰이크로만 iframe 에 전달할 것. memberId 가 이 API 키의 발주처 소속이 아니면 403, 미허용 screen 은 400.
+         * @summary 임베드 launch code 발급 (iframe SSO)
+         * @param {EmbedLaunchRequestDto} embedLaunchRequestDto
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        createEmbedLaunch(embedLaunchRequestDto, options) {
+            return __awaiter(this, void 0, void 0, function* () {
+                var _a, _b, _c;
+                const localVarAxiosArgs = yield localVarAxiosParamCreator.createEmbedLaunch(embedLaunchRequestDto, options);
+                const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+                const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['PartnerV2Api.createEmbedLaunch']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+                return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+            });
+        },
         /**
          * V5 /entendrec 후속. scope bids:read.
          * @summary 입찰 결과 조회
@@ -542,6 +592,16 @@ const PartnerV2ApiFactory = function (configuration, basePath, axios) {
         completeAcceptance(bidId, idempotencyKey, completeAcceptanceRequestDto, options) {
             return localVarFp.completeAcceptance(bidId, idempotencyKey, completeAcceptanceRequestDto, options).then((request) => request(axios, basePath));
         },
+        /**
+         * 스코프 `embed:launch` 필수. 발주기관 담당자(memberId)용 일회성 launch code(60초 TTL)를 발급한다. code 는 URL 에 싣지 말고 @cmarket/embed SDK 의 postMessage 핸드셰이크로만 iframe 에 전달할 것. memberId 가 이 API 키의 발주처 소속이 아니면 403, 미허용 screen 은 400.
+         * @summary 임베드 launch code 발급 (iframe SSO)
+         * @param {EmbedLaunchRequestDto} embedLaunchRequestDto
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        createEmbedLaunch(embedLaunchRequestDto, options) {
+            return localVarFp.createEmbedLaunch(embedLaunchRequestDto, options).then((request) => request(axios, basePath));
+        },
         /**
          * V5 /entendrec 후속. scope bids:read.
          * @summary 입찰 결과 조회
@@ -644,6 +704,16 @@ class PartnerV2Api extends base_1.BaseAPI {
     completeAcceptance(bidId, idempotencyKey, completeAcceptanceRequestDto, options) {
         return (0, exports.PartnerV2ApiFp)(this.configuration).completeAcceptance(bidId, idempotencyKey, completeAcceptanceRequestDto, options).then((request) => request(this.axios, this.basePath));
     }
+    /**
+     * 스코프 `embed:launch` 필수. 발주기관 담당자(memberId)용 일회성 launch code(60초 TTL)를 발급한다. code 는 URL 에 싣지 말고 @cmarket/embed SDK 의 postMessage 핸드셰이크로만 iframe 에 전달할 것. memberId 가 이 API 키의 발주처 소속이 아니면 403, 미허용 screen 은 400.
+     * @summary 임베드 launch code 발급 (iframe SSO)
+     * @param {EmbedLaunchRequestDto} embedLaunchRequestDto
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    createEmbedLaunch(embedLaunchRequestDto, options) {
+        return (0, exports.PartnerV2ApiFp)(this.configuration).createEmbedLaunch(embedLaunchRequestDto, options).then((request) => request(this.axios, this.basePath));
+    }
     /**
      * V5 /entendrec 후속. scope bids:read.
      * @summary 입찰 결과 조회

package/dist/api.d.ts

@@ -2,7 +2,7 @@
  * CMARKET V6 Partner API
  * 외부 ERP 연동용 RESTful API.  ## 버전별 인증 - **_/v2** — OAuth2 Bearer JWT (`client_credentials` 플로우). `/oauth/token` 에서 토큰 발급 후 `Authorization: Bearer <token>` 헤더. - **_/v1** — V5 충실 platform-auth. `X-Platform-Id`(cate_set.api_id) / `X-Platform-Secret`(cate_set.api_secret, MD5-hex) 헤더로 전송.
  *
- * The version of the OpenAPI document: 9.3.0
+ * The version of the OpenAPI document: 9.5.0
  * Contact: semo.io.kr@gmail.com
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/api.js

@@ -5,7 +5,7 @@
  * CMARKET V6 Partner API
  * 외부 ERP 연동용 RESTful API.  ## 버전별 인증 - **_/v2** — OAuth2 Bearer JWT (`client_credentials` 플로우). `/oauth/token` 에서 토큰 발급 후 `Authorization: Bearer <token>` 헤더. - **_/v1** — V5 충실 platform-auth. `X-Platform-Id`(cate_set.api_id) / `X-Platform-Secret`(cate_set.api_secret, MD5-hex) 헤더로 전송.
  *
- * The version of the OpenAPI document: 9.3.0
+ * The version of the OpenAPI document: 9.5.0
  * Contact: semo.io.kr@gmail.com
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/base.d.ts

@@ -2,7 +2,7 @@
  * CMARKET V6 Partner API
  * 외부 ERP 연동용 RESTful API.  ## 버전별 인증 - **_/v2** — OAuth2 Bearer JWT (`client_credentials` 플로우). `/oauth/token` 에서 토큰 발급 후 `Authorization: Bearer <token>` 헤더. - **_/v1** — V5 충실 platform-auth. `X-Platform-Id`(cate_set.api_id) / `X-Platform-Secret`(cate_set.api_secret, MD5-hex) 헤더로 전송.
  *
- * The version of the OpenAPI document: 9.3.0
+ * The version of the OpenAPI document: 9.5.0
  * Contact: semo.io.kr@gmail.com
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/base.js

@@ -5,7 +5,7 @@
  * CMARKET V6 Partner API
  * 외부 ERP 연동용 RESTful API.  ## 버전별 인증 - **_/v2** — OAuth2 Bearer JWT (`client_credentials` 플로우). `/oauth/token` 에서 토큰 발급 후 `Authorization: Bearer <token>` 헤더. - **_/v1** — V5 충실 platform-auth. `X-Platform-Id`(cate_set.api_id) / `X-Platform-Secret`(cate_set.api_secret, MD5-hex) 헤더로 전송.
  *
- * The version of the OpenAPI document: 9.3.0
+ * The version of the OpenAPI document: 9.5.0
  * Contact: semo.io.kr@gmail.com
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/common.d.ts

@@ -2,7 +2,7 @@
  * CMARKET V6 Partner API
  * 외부 ERP 연동용 RESTful API.  ## 버전별 인증 - **_/v2** — OAuth2 Bearer JWT (`client_credentials` 플로우). `/oauth/token` 에서 토큰 발급 후 `Authorization: Bearer <token>` 헤더. - **_/v1** — V5 충실 platform-auth. `X-Platform-Id`(cate_set.api_id) / `X-Platform-Secret`(cate_set.api_secret, MD5-hex) 헤더로 전송.
  *
- * The version of the OpenAPI document: 9.3.0
+ * The version of the OpenAPI document: 9.5.0
  * Contact: semo.io.kr@gmail.com
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/common.js

@@ -5,7 +5,7 @@
  * CMARKET V6 Partner API
  * 외부 ERP 연동용 RESTful API.  ## 버전별 인증 - **_/v2** — OAuth2 Bearer JWT (`client_credentials` 플로우). `/oauth/token` 에서 토큰 발급 후 `Authorization: Bearer <token>` 헤더. - **_/v1** — V5 충실 platform-auth. `X-Platform-Id`(cate_set.api_id) / `X-Platform-Secret`(cate_set.api_secret, MD5-hex) 헤더로 전송.
  *
- * The version of the OpenAPI document: 9.3.0
+ * The version of the OpenAPI document: 9.5.0
  * Contact: semo.io.kr@gmail.com
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/configuration.d.ts

@@ -2,7 +2,7 @@
  * CMARKET V6 Partner API
  * 외부 ERP 연동용 RESTful API.  ## 버전별 인증 - **_/v2** — OAuth2 Bearer JWT (`client_credentials` 플로우). `/oauth/token` 에서 토큰 발급 후 `Authorization: Bearer <token>` 헤더. - **_/v1** — V5 충실 platform-auth. `X-Platform-Id`(cate_set.api_id) / `X-Platform-Secret`(cate_set.api_secret, MD5-hex) 헤더로 전송.
  *
- * The version of the OpenAPI document: 9.3.0
+ * The version of the OpenAPI document: 9.5.0
  * Contact: semo.io.kr@gmail.com
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).