@emilgroup/account-sdk 1.49.1-beta.8 → 1.49.1-beta.9

package/.openapi-generator/FILES

@@ -19,6 +19,8 @@ models/inline-response200.ts
 models/inline-response503.ts
 models/list-accounts-response-class.ts
 models/policy-class.ts
+models/register-account-policy-request-dto.ts
+models/register-policy-response-class.ts
 models/update-account-request-dto.ts
 models/update-account-response-class.ts
 package.json

package/README.md

@@ -17,11 +17,11 @@ Although this package can be used in both TypeScript and JavaScript, it is inten
 Navigate to the folder of your consuming project and run one of the following commands:
 
 ```
-npm install @emilgroup/account-sdk@1.49.1-beta.8 --save
+npm install @emilgroup/account-sdk@1.49.1-beta.9 --save
 ```
 or 
 ```
-yarn add @emilgroup/account-sdk@1.49.1-beta.8
+yarn add @emilgroup/account-sdk@1.49.1-beta.9
 ```
 
 And then you can import `AccountsApi`.

package/api/accounts-api.ts

@@ -29,6 +29,10 @@ import { GetAccountResponseClass } from '../models';
 // @ts-ignore
 import { ListAccountsResponseClass } from '../models';
 // @ts-ignore
+import { RegisterAccountPolicyRequestDto } from '../models';
+// @ts-ignore
+import { RegisterPolicyResponseClass } from '../models';
+// @ts-ignore
 import { UpdateAccountRequestDto } from '../models';
 // @ts-ignore
 import { UpdateAccountResponseClass } from '../models';
@@ -306,6 +310,57 @@ export const AccountsApiAxiosParamCreator = function (configuration?: Configurat
                 options: localVarRequestOptions,
             };
         },
+        /**
+         * This will register an already existing policy to the account, so that the     policy shows up among the account\'s policies. Both the policy code and the policy number     must refer to a policy that was created beforehand.  **Required Permissions**  \"partner-management.partners.create\"
+         * @summary Create the account policy
+         * @param {string} code Unique identifier for the object.
+         * @param {RegisterAccountPolicyRequestDto} registerAccountPolicyRequestDto 
+         * @param {string} [authorization] Bearer Token: provided by the login endpoint under the name accessToken.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        registerPolicy: async (code: string, registerAccountPolicyRequestDto: RegisterAccountPolicyRequestDto, authorization?: string, options: AxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'code' is not null or undefined
+            assertParamExists('registerPolicy', 'code', code)
+            // verify required parameter 'registerAccountPolicyRequestDto' is not null or undefined
+            assertParamExists('registerPolicy', 'registerAccountPolicyRequestDto', registerAccountPolicyRequestDto)
+            const localVarPath = `/accountservice/v1/accounts/{code}/policies`
+                .replace(`{${"code"}}`, encodeURIComponent(String(code)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            let baseAccessToken;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+                baseAccessToken = configuration.accessToken;
+            }
+
+            const localVarRequestOptions = { method: 'POST', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication bearer required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            if (authorization !== undefined && authorization !== null || baseAccessToken !== undefined && baseAccessToken !== null) {
+                localVarHeaderParameter['Authorization'] = String(authorization ? authorization : baseAccessToken);
+            }
+
+
+    
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+            localVarRequestOptions.data = serializeDataIfNeeded(registerAccountPolicyRequestDto, localVarRequestOptions, configuration)
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
         /**
          * Updates the specified account by setting the values of the parameters passed. Any parameters not provided will be left unchanged.  **Required Permissions**  \"partner-management.partners.update\"
          * @summary Update the account
@@ -435,6 +490,19 @@ export const AccountsApiFp = function(configuration?: Configuration) {
             const localVarAxiosArgs = await localVarAxiosParamCreator.listAccounts(authorization, pageSize, pageToken, filter, search, order, expand, filters, options);
             return createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration);
         },
+        /**
+         * This will register an already existing policy to the account, so that the     policy shows up among the account\'s policies. Both the policy code and the policy number     must refer to a policy that was created beforehand.  **Required Permissions**  \"partner-management.partners.create\"
+         * @summary Create the account policy
+         * @param {string} code Unique identifier for the object.
+         * @param {RegisterAccountPolicyRequestDto} registerAccountPolicyRequestDto 
+         * @param {string} [authorization] Bearer Token: provided by the login endpoint under the name accessToken.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async registerPolicy(code: string, registerAccountPolicyRequestDto: RegisterAccountPolicyRequestDto, authorization?: string, options?: AxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<RegisterPolicyResponseClass>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.registerPolicy(code, registerAccountPolicyRequestDto, authorization, options);
+            return createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration);
+        },
         /**
          * Updates the specified account by setting the values of the parameters passed. Any parameters not provided will be left unchanged.  **Required Permissions**  \"partner-management.partners.update\"
          * @summary Update the account
@@ -521,6 +589,18 @@ export const AccountsApiFactory = function (configuration?: Configuration, baseP
         listAccounts(authorization?: string, pageSize?: number, pageToken?: string, filter?: 'firstName' | 'code' | 'email' | 'createdAt' | 'birthDate' | 'accountNumber' | 'title' | 'lastName' | 'gender' | 'street' | 'houseNumber' | 'zipCode' | 'city' | 'phone' | 'type' | 'companyName' | 'name' | 'partnerCode', search?: string, order?: 'id' | 'firstName' | 'lastName' | 'email' | 'createdAt' | 'accountNumber', expand?: 'policies', filters?: string, options?: any): AxiosPromise<ListAccountsResponseClass> {
             return localVarFp.listAccounts(authorization, pageSize, pageToken, filter, search, order, expand, filters, options).then((request) => request(axios, basePath));
         },
+        /**
+         * This will register an already existing policy to the account, so that the     policy shows up among the account\'s policies. Both the policy code and the policy number     must refer to a policy that was created beforehand.  **Required Permissions**  \"partner-management.partners.create\"
+         * @summary Create the account policy
+         * @param {string} code Unique identifier for the object.
+         * @param {RegisterAccountPolicyRequestDto} registerAccountPolicyRequestDto 
+         * @param {string} [authorization] Bearer Token: provided by the login endpoint under the name accessToken.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        registerPolicy(code: string, registerAccountPolicyRequestDto: RegisterAccountPolicyRequestDto, authorization?: string, options?: any): AxiosPromise<RegisterPolicyResponseClass> {
+            return localVarFp.registerPolicy(code, registerAccountPolicyRequestDto, authorization, options).then((request) => request(axios, basePath));
+        },
         /**
          * Updates the specified account by setting the values of the parameters passed. Any parameters not provided will be left unchanged.  **Required Permissions**  \"partner-management.partners.update\"
          * @summary Update the account
@@ -697,6 +777,34 @@ export interface AccountsApiListAccountsRequest {
     readonly filters?: string
 }
 
+/**
+ * Request parameters for registerPolicy operation in AccountsApi.
+ * @export
+ * @interface AccountsApiRegisterPolicyRequest
+ */
+export interface AccountsApiRegisterPolicyRequest {
+    /**
+     * Unique identifier for the object.
+     * @type {string}
+     * @memberof AccountsApiRegisterPolicy
+     */
+    readonly code: string
+
+    /**
+     * 
+     * @type {RegisterAccountPolicyRequestDto}
+     * @memberof AccountsApiRegisterPolicy
+     */
+    readonly registerAccountPolicyRequestDto: RegisterAccountPolicyRequestDto
+
+    /**
+     * Bearer Token: provided by the login endpoint under the name accessToken.
+     * @type {string}
+     * @memberof AccountsApiRegisterPolicy
+     */
+    readonly authorization?: string
+}
+
 /**
  * Request parameters for updateAccount operation in AccountsApi.
  * @export
@@ -792,6 +900,18 @@ export class AccountsApi extends BaseAPI {
         return AccountsApiFp(this.configuration).listAccounts(requestParameters.authorization, requestParameters.pageSize, requestParameters.pageToken, requestParameters.filter, requestParameters.search, requestParameters.order, requestParameters.expand, requestParameters.filters, options).then((request) => request(this.axios, this.basePath));
     }
 
+    /**
+     * This will register an already existing policy to the account, so that the     policy shows up among the account\'s policies. Both the policy code and the policy number     must refer to a policy that was created beforehand.  **Required Permissions**  \"partner-management.partners.create\"
+     * @summary Create the account policy
+     * @param {AccountsApiRegisterPolicyRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountsApi
+     */
+    public registerPolicy(requestParameters: AccountsApiRegisterPolicyRequest, options?: AxiosRequestConfig) {
+        return AccountsApiFp(this.configuration).registerPolicy(requestParameters.code, requestParameters.registerAccountPolicyRequestDto, requestParameters.authorization, options).then((request) => request(this.axios, this.basePath));
+    }
+
     /**
      * Updates the specified account by setting the values of the parameters passed. Any parameters not provided will be left unchanged.  **Required Permissions**  \"partner-management.partners.update\"
      * @summary Update the account

package/base.ts

@@ -102,10 +102,14 @@ export class BaseAPI {
             this.configuration = configuration;
             this.basePath = configuration.basePath || this.basePath;
 
-            // Use config token if provided, otherwise use tokenData token
-            const configToken = this.configuration.accessToken;
-            const storedToken = accessToken ? `Bearer ${accessToken}` : '';
-            this.configuration.accessToken = configToken || storedToken;
+            if (configuration.cookieAuth) {
+                this.useCookieAuth();
+            } else {
+                // Use config token if provided, otherwise use tokenData token
+                const configToken = this.configuration.accessToken;
+                const storedToken = accessToken ? `Bearer ${accessToken}` : '';
+                this.configuration.accessToken = configToken || storedToken;
+            }
         } else {
             const { accessToken, username } = this.tokenData;
 
@@ -119,6 +123,12 @@ export class BaseAPI {
         this.attachInterceptor(axios);
     }
 
+    // Cookie mode: the browser sends the HttpOnly access cookie, so no token is read from storage.
+    private useCookieAuth() {
+        this.configuration.username = this.configuration.username || this.tokenData.username;
+        this.configuration.baseOptions = { ...this.configuration.baseOptions, withCredentials: true };
+    }
+
     selectEnvironment(env: Environment) {
         this.selectBasePath(env);
     }
@@ -152,10 +162,12 @@ export class BaseAPI {
         const { data: { accessToken, permissions } } = response;
 
         this.configuration.username = username;
-        this.configuration.accessToken = `Bearer ${accessToken}`;
         this.tokenData.username = username;
-        this.tokenData.accessToken = accessToken;
         this.tokenData.permissions = permissions;
+        if (!this.configuration.cookieAuth) {
+            this.configuration.accessToken = `Bearer ${accessToken}`;
+            this.tokenData.accessToken = accessToken;
+        }
 
         // Switch workspace if provided
         if (targetWorkspace) {
@@ -178,7 +190,7 @@ export class BaseAPI {
             url: `${this.configuration.basePath}/authservice/v1/workspaces/switch`,
             headers: {
                 'Content-Type': 'application/json',
-                'Authorization': `Bearer ${this.configuration.accessToken}`,
+                ...(this.configuration.cookieAuth ? {} : { 'Authorization': `Bearer ${this.configuration.accessToken}` }),
             },
             data: {
                 username: this.configuration.username,
@@ -190,10 +202,12 @@ export class BaseAPI {
         const response = await globalAxios.request<SwitchWorkspaceResponseClass>(options);
 
         const { data: { accessToken, permissions } } = response;
-        
-        this.configuration.accessToken = `Bearer ${accessToken}`;
-        this.tokenData.accessToken = accessToken;
+
         this.tokenData.permissions = permissions;
+        if (!this.configuration.cookieAuth) {
+            this.configuration.accessToken = `Bearer ${accessToken}`;
+            this.tokenData.accessToken = accessToken;
+        }
 
         this.storeTokenData({
             ...this.tokenData
@@ -233,6 +247,11 @@ export class BaseAPI {
 
     private storeTokenData(tokenData?: TokenData) {
         if (typeof window !== 'undefined') {
+            if (tokenData && this.configuration?.cookieAuth) {
+                // Cookie mode saves who is logged in, never the token; a token saved by apps not yet migrated stays.
+                const { username, permissions } = tokenData;
+                tokenData = { ...(defaultStorage().get<TokenData>(TOKEN_DATA) || {}), username, permissions };
+            }
             defaultStorage().set<TokenData>(TOKEN_DATA, tokenData);
         }
     }
@@ -263,15 +282,17 @@ export class BaseAPI {
                         originalConfig._retry = true;
                         try {
                             const { accessToken: tokenString, permissions } = await this.refreshTokenInternal();
-                            const accessToken = `Bearer ${tokenString}`;
                             this.tokenData.permissions = permissions;
 
                             delete originalConfig.headers['Authorization']
 
-                            originalConfig.headers['Authorization'] = accessToken;
-
-                            this.configuration.accessToken = accessToken;
-                            this.tokenData.accessToken = tokenString;
+                            // In cookie mode the refresh reply renewed the access cookie, so retry without a header.
+                            if (!this.configuration.cookieAuth) {
+                                const accessToken = `Bearer ${tokenString}`;
+                                originalConfig.headers['Authorization'] = accessToken;
+                                this.configuration.accessToken = accessToken;
+                                this.tokenData.accessToken = tokenString;
+                            }
 
                             this.storeTokenData(this.tokenData);
 

package/configuration.ts

@@ -21,6 +21,7 @@ export interface ConfigurationParameters {
     basePath?: string;
     baseOptions?: any;
     formDataCtor?: new () => any;
+    cookieAuth?: boolean;
 }
 
 export class Configuration {
@@ -74,6 +75,15 @@ export class Configuration {
      */
     formDataCtor?: new () => any;
 
+    /**
+     * Authenticate with the HttpOnly access cookie instead of a stored token: every call sends credentials.
+     * The browser holds one cookie, so use it with one logged-in account; log out through the auth service.
+     *
+     * @type {boolean}
+     * @memberof Configuration
+     */
+    cookieAuth?: boolean;
+
     constructor(param: ConfigurationParameters = {}) {
         this.apiKey = param.apiKey;
         this.username = param.username;
@@ -82,6 +92,7 @@ export class Configuration {
         this.basePath = param.basePath;
         this.baseOptions = param.baseOptions;
         this.formDataCtor = param.formDataCtor;
+        this.cookieAuth = param.cookieAuth;
     }
 
     /**

package/dist/api/accounts-api.d.ts

@@ -16,6 +16,8 @@ import { CreateAccountRequestDto } from '../models';
 import { CreateAccountResponseClass } from '../models';
 import { GetAccountResponseClass } from '../models';
 import { ListAccountsResponseClass } from '../models';
+import { RegisterAccountPolicyRequestDto } from '../models';
+import { RegisterPolicyResponseClass } from '../models';
 import { UpdateAccountRequestDto } from '../models';
 import { UpdateAccountResponseClass } from '../models';
 /**
@@ -76,6 +78,16 @@ export declare const AccountsApiAxiosParamCreator: (configuration?: Configuratio
      * @throws {RequiredError}
      */
     listAccounts: (authorization?: string, pageSize?: number, pageToken?: string, filter?: 'firstName' | 'code' | 'email' | 'createdAt' | 'birthDate' | 'accountNumber' | 'title' | 'lastName' | 'gender' | 'street' | 'houseNumber' | 'zipCode' | 'city' | 'phone' | 'type' | 'companyName' | 'name' | 'partnerCode', search?: string, order?: 'id' | 'firstName' | 'lastName' | 'email' | 'createdAt' | 'accountNumber', expand?: 'policies', filters?: string, options?: AxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     * This will register an already existing policy to the account, so that the     policy shows up among the account\'s policies. Both the policy code and the policy number     must refer to a policy that was created beforehand.  **Required Permissions**  \"partner-management.partners.create\"
+     * @summary Create the account policy
+     * @param {string} code Unique identifier for the object.
+     * @param {RegisterAccountPolicyRequestDto} registerAccountPolicyRequestDto
+     * @param {string} [authorization] Bearer Token: provided by the login endpoint under the name accessToken.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    registerPolicy: (code: string, registerAccountPolicyRequestDto: RegisterAccountPolicyRequestDto, authorization?: string, options?: AxiosRequestConfig) => Promise<RequestArgs>;
     /**
      * Updates the specified account by setting the values of the parameters passed. Any parameters not provided will be left unchanged.  **Required Permissions**  \"partner-management.partners.update\"
      * @summary Update the account
@@ -145,6 +157,16 @@ export declare const AccountsApiFp: (configuration?: Configuration) => {
      * @throws {RequiredError}
      */
     listAccounts(authorization?: string, pageSize?: number, pageToken?: string, filter?: 'firstName' | 'code' | 'email' | 'createdAt' | 'birthDate' | 'accountNumber' | 'title' | 'lastName' | 'gender' | 'street' | 'houseNumber' | 'zipCode' | 'city' | 'phone' | 'type' | 'companyName' | 'name' | 'partnerCode', search?: string, order?: 'id' | 'firstName' | 'lastName' | 'email' | 'createdAt' | 'accountNumber', expand?: 'policies', filters?: string, options?: AxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<ListAccountsResponseClass>>;
+    /**
+     * This will register an already existing policy to the account, so that the     policy shows up among the account\'s policies. Both the policy code and the policy number     must refer to a policy that was created beforehand.  **Required Permissions**  \"partner-management.partners.create\"
+     * @summary Create the account policy
+     * @param {string} code Unique identifier for the object.
+     * @param {RegisterAccountPolicyRequestDto} registerAccountPolicyRequestDto
+     * @param {string} [authorization] Bearer Token: provided by the login endpoint under the name accessToken.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    registerPolicy(code: string, registerAccountPolicyRequestDto: RegisterAccountPolicyRequestDto, authorization?: string, options?: AxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<RegisterPolicyResponseClass>>;
     /**
      * Updates the specified account by setting the values of the parameters passed. Any parameters not provided will be left unchanged.  **Required Permissions**  \"partner-management.partners.update\"
      * @summary Update the account
@@ -214,6 +236,16 @@ export declare const AccountsApiFactory: (configuration?: Configuration, basePat
      * @throws {RequiredError}
      */
     listAccounts(authorization?: string, pageSize?: number, pageToken?: string, filter?: 'firstName' | 'code' | 'email' | 'createdAt' | 'birthDate' | 'accountNumber' | 'title' | 'lastName' | 'gender' | 'street' | 'houseNumber' | 'zipCode' | 'city' | 'phone' | 'type' | 'companyName' | 'name' | 'partnerCode', search?: string, order?: 'id' | 'firstName' | 'lastName' | 'email' | 'createdAt' | 'accountNumber', expand?: 'policies', filters?: string, options?: any): AxiosPromise<ListAccountsResponseClass>;
+    /**
+     * This will register an already existing policy to the account, so that the     policy shows up among the account\'s policies. Both the policy code and the policy number     must refer to a policy that was created beforehand.  **Required Permissions**  \"partner-management.partners.create\"
+     * @summary Create the account policy
+     * @param {string} code Unique identifier for the object.
+     * @param {RegisterAccountPolicyRequestDto} registerAccountPolicyRequestDto
+     * @param {string} [authorization] Bearer Token: provided by the login endpoint under the name accessToken.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    registerPolicy(code: string, registerAccountPolicyRequestDto: RegisterAccountPolicyRequestDto, authorization?: string, options?: any): AxiosPromise<RegisterPolicyResponseClass>;
     /**
      * Updates the specified account by setting the values of the parameters passed. Any parameters not provided will be left unchanged.  **Required Permissions**  \"partner-management.partners.update\"
      * @summary Update the account
@@ -368,6 +400,31 @@ export interface AccountsApiListAccountsRequest {
      */
     readonly filters?: string;
 }
+/**
+ * Request parameters for registerPolicy operation in AccountsApi.
+ * @export
+ * @interface AccountsApiRegisterPolicyRequest
+ */
+export interface AccountsApiRegisterPolicyRequest {
+    /**
+     * Unique identifier for the object.
+     * @type {string}
+     * @memberof AccountsApiRegisterPolicy
+     */
+    readonly code: string;
+    /**
+     *
+     * @type {RegisterAccountPolicyRequestDto}
+     * @memberof AccountsApiRegisterPolicy
+     */
+    readonly registerAccountPolicyRequestDto: RegisterAccountPolicyRequestDto;
+    /**
+     * Bearer Token: provided by the login endpoint under the name accessToken.
+     * @type {string}
+     * @memberof AccountsApiRegisterPolicy
+     */
+    readonly authorization?: string;
+}
 /**
  * Request parameters for updateAccount operation in AccountsApi.
  * @export
@@ -445,6 +502,15 @@ export declare class AccountsApi extends BaseAPI {
      * @memberof AccountsApi
      */
     listAccounts(requestParameters?: AccountsApiListAccountsRequest, options?: AxiosRequestConfig): Promise<import("axios").AxiosResponse<ListAccountsResponseClass, any, {}>>;
+    /**
+     * This will register an already existing policy to the account, so that the     policy shows up among the account\'s policies. Both the policy code and the policy number     must refer to a policy that was created beforehand.  **Required Permissions**  \"partner-management.partners.create\"
+     * @summary Create the account policy
+     * @param {AccountsApiRegisterPolicyRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountsApi
+     */
+    registerPolicy(requestParameters: AccountsApiRegisterPolicyRequest, options?: AxiosRequestConfig): Promise<import("axios").AxiosResponse<RegisterPolicyResponseClass, any, {}>>;
     /**
      * Updates the specified account by setting the values of the parameters passed. Any parameters not provided will be left unchanged.  **Required Permissions**  \"partner-management.partners.update\"
      * @summary Update the account

package/dist/api/accounts-api.js

@@ -365,6 +365,59 @@ var AccountsApiAxiosParamCreator = function (configuration) {
                 });
             });
         },
+        /**
+         * This will register an already existing policy to the account, so that the     policy shows up among the account\'s policies. Both the policy code and the policy number     must refer to a policy that was created beforehand.  **Required Permissions**  \"partner-management.partners.create\"
+         * @summary Create the account policy
+         * @param {string} code Unique identifier for the object.
+         * @param {RegisterAccountPolicyRequestDto} registerAccountPolicyRequestDto
+         * @param {string} [authorization] Bearer Token: provided by the login endpoint under the name accessToken.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        registerPolicy: function (code, registerAccountPolicyRequestDto, authorization, options) {
+            if (options === void 0) { options = {}; }
+            return __awaiter(_this, void 0, void 0, function () {
+                var localVarPath, localVarUrlObj, baseOptions, baseAccessToken, localVarRequestOptions, localVarHeaderParameter, localVarQueryParameter, headersFromBaseOptions;
+                return __generator(this, function (_a) {
+                    switch (_a.label) {
+                        case 0:
+                            // verify required parameter 'code' is not null or undefined
+                            (0, common_1.assertParamExists)('registerPolicy', 'code', code);
+                            // verify required parameter 'registerAccountPolicyRequestDto' is not null or undefined
+                            (0, common_1.assertParamExists)('registerPolicy', 'registerAccountPolicyRequestDto', registerAccountPolicyRequestDto);
+                            localVarPath = "/accountservice/v1/accounts/{code}/policies"
+                                .replace("{".concat("code", "}"), encodeURIComponent(String(code)));
+                            localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+                            if (configuration) {
+                                baseOptions = configuration.baseOptions;
+                                baseAccessToken = configuration.accessToken;
+                            }
+                            localVarRequestOptions = __assign(__assign({ method: 'POST' }, baseOptions), options);
+                            localVarHeaderParameter = {};
+                            localVarQueryParameter = {};
+                            // authentication bearer required
+                            // http bearer authentication required
+                            return [4 /*yield*/, (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration)];
+                        case 1:
+                            // authentication bearer required
+                            // http bearer authentication required
+                            _a.sent();
+                            if (authorization !== undefined && authorization !== null || baseAccessToken !== undefined && baseAccessToken !== null) {
+                                localVarHeaderParameter['Authorization'] = String(authorization ? authorization : baseAccessToken);
+                            }
+                            localVarHeaderParameter['Content-Type'] = 'application/json';
+                            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+                            headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+                            localVarRequestOptions.headers = __assign(__assign(__assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+                            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(registerAccountPolicyRequestDto, localVarRequestOptions, configuration);
+                            return [2 /*return*/, {
+                                    url: (0, common_1.toPathString)(localVarUrlObj),
+                                    options: localVarRequestOptions,
+                                }];
+                    }
+                });
+            });
+        },
         /**
          * Updates the specified account by setting the values of the parameters passed. Any parameters not provided will be left unchanged.  **Required Permissions**  \"partner-management.partners.update\"
          * @summary Update the account
@@ -541,6 +594,28 @@ var AccountsApiFp = function (configuration) {
                 });
             });
         },
+        /**
+         * This will register an already existing policy to the account, so that the     policy shows up among the account\'s policies. Both the policy code and the policy number     must refer to a policy that was created beforehand.  **Required Permissions**  \"partner-management.partners.create\"
+         * @summary Create the account policy
+         * @param {string} code Unique identifier for the object.
+         * @param {RegisterAccountPolicyRequestDto} registerAccountPolicyRequestDto
+         * @param {string} [authorization] Bearer Token: provided by the login endpoint under the name accessToken.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        registerPolicy: function (code, registerAccountPolicyRequestDto, authorization, options) {
+            return __awaiter(this, void 0, void 0, function () {
+                var localVarAxiosArgs;
+                return __generator(this, function (_a) {
+                    switch (_a.label) {
+                        case 0: return [4 /*yield*/, localVarAxiosParamCreator.registerPolicy(code, registerAccountPolicyRequestDto, authorization, options)];
+                        case 1:
+                            localVarAxiosArgs = _a.sent();
+                            return [2 /*return*/, (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)];
+                    }
+                });
+            });
+        },
         /**
          * Updates the specified account by setting the values of the parameters passed. Any parameters not provided will be left unchanged.  **Required Permissions**  \"partner-management.partners.update\"
          * @summary Update the account
@@ -636,6 +711,18 @@ var AccountsApiFactory = function (configuration, basePath, axios) {
         listAccounts: function (authorization, pageSize, pageToken, filter, search, order, expand, filters, options) {
             return localVarFp.listAccounts(authorization, pageSize, pageToken, filter, search, order, expand, filters, options).then(function (request) { return request(axios, basePath); });
         },
+        /**
+         * This will register an already existing policy to the account, so that the     policy shows up among the account\'s policies. Both the policy code and the policy number     must refer to a policy that was created beforehand.  **Required Permissions**  \"partner-management.partners.create\"
+         * @summary Create the account policy
+         * @param {string} code Unique identifier for the object.
+         * @param {RegisterAccountPolicyRequestDto} registerAccountPolicyRequestDto
+         * @param {string} [authorization] Bearer Token: provided by the login endpoint under the name accessToken.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        registerPolicy: function (code, registerAccountPolicyRequestDto, authorization, options) {
+            return localVarFp.registerPolicy(code, registerAccountPolicyRequestDto, authorization, options).then(function (request) { return request(axios, basePath); });
+        },
         /**
          * Updates the specified account by setting the values of the parameters passed. Any parameters not provided will be left unchanged.  **Required Permissions**  \"partner-management.partners.update\"
          * @summary Update the account
@@ -723,6 +810,18 @@ var AccountsApi = /** @class */ (function (_super) {
         if (requestParameters === void 0) { requestParameters = {}; }
         return (0, exports.AccountsApiFp)(this.configuration).listAccounts(requestParameters.authorization, requestParameters.pageSize, requestParameters.pageToken, requestParameters.filter, requestParameters.search, requestParameters.order, requestParameters.expand, requestParameters.filters, options).then(function (request) { return request(_this.axios, _this.basePath); });
     };
+    /**
+     * This will register an already existing policy to the account, so that the     policy shows up among the account\'s policies. Both the policy code and the policy number     must refer to a policy that was created beforehand.  **Required Permissions**  \"partner-management.partners.create\"
+     * @summary Create the account policy
+     * @param {AccountsApiRegisterPolicyRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountsApi
+     */
+    AccountsApi.prototype.registerPolicy = function (requestParameters, options) {
+        var _this = this;
+        return (0, exports.AccountsApiFp)(this.configuration).registerPolicy(requestParameters.code, requestParameters.registerAccountPolicyRequestDto, requestParameters.authorization, options).then(function (request) { return request(_this.axios, _this.basePath); });
+    };
     /**
      * Updates the specified account by setting the values of the parameters passed. Any parameters not provided will be left unchanged.  **Required Permissions**  \"partner-management.partners.update\"
      * @summary Update the account

package/dist/base.d.ts

@@ -63,6 +63,7 @@ export declare class BaseAPI {
     protected configuration: Configuration | undefined;
     private tokenData?;
     constructor(configuration?: Configuration, basePath?: string, axios?: AxiosInstance);
+    private useCookieAuth;
     selectEnvironment(env: Environment): void;
     selectBasePath(path: string): void;
     getPermissions(): Array<string>;

package/dist/base.js

@@ -128,10 +128,15 @@ var BaseAPI = /** @class */ (function () {
             var accessToken = this.tokenData.accessToken;
             this.configuration = configuration;
             this.basePath = configuration.basePath || this.basePath;
-            // Use config token if provided, otherwise use tokenData token
-            var configToken = this.configuration.accessToken;
-            var storedToken = accessToken ? "Bearer ".concat(accessToken) : '';
-            this.configuration.accessToken = configToken || storedToken;
+            if (configuration.cookieAuth) {
+                this.useCookieAuth();
+            }
+            else {
+                // Use config token if provided, otherwise use tokenData token
+                var configToken = this.configuration.accessToken;
+                var storedToken = accessToken ? "Bearer ".concat(accessToken) : '';
+                this.configuration.accessToken = configToken || storedToken;
+            }
         }
         else {
             var _a = this.tokenData, accessToken = _a.accessToken, username = _a.username;
@@ -143,6 +148,11 @@ var BaseAPI = /** @class */ (function () {
         }
         this.attachInterceptor(axios);
     }
+    // Cookie mode: the browser sends the HttpOnly access cookie, so no token is read from storage.
+    BaseAPI.prototype.useCookieAuth = function () {
+        this.configuration.username = this.configuration.username || this.tokenData.username;
+        this.configuration.baseOptions = __assign(__assign({}, this.configuration.baseOptions), { withCredentials: true });
+    };
     BaseAPI.prototype.selectEnvironment = function (env) {
         this.selectBasePath(env);
     };
@@ -177,10 +187,12 @@ var BaseAPI = /** @class */ (function () {
                         response = _b.sent();
                         _a = response.data, accessToken = _a.accessToken, permissions = _a.permissions;
                         this.configuration.username = username;
-                        this.configuration.accessToken = "Bearer ".concat(accessToken);
                         this.tokenData.username = username;
-                        this.tokenData.accessToken = accessToken;
                         this.tokenData.permissions = permissions;
+                        if (!this.configuration.cookieAuth) {
+                            this.configuration.accessToken = "Bearer ".concat(accessToken);
+                            this.tokenData.accessToken = accessToken;
+                        }
                         if (!targetWorkspace) return [3 /*break*/, 3];
                         return [4 /*yield*/, this.switchWorkspace(targetWorkspace)];
                     case 2:
@@ -206,10 +218,7 @@ var BaseAPI = /** @class */ (function () {
                         options = {
                             method: 'POST',
                             url: "".concat(this.configuration.basePath, "/authservice/v1/workspaces/switch"),
-                            headers: {
-                                'Content-Type': 'application/json',
-                                'Authorization': "Bearer ".concat(this.configuration.accessToken),
-                            },
+                            headers: __assign({ 'Content-Type': 'application/json' }, (this.configuration.cookieAuth ? {} : { 'Authorization': "Bearer ".concat(this.configuration.accessToken) })),
                             data: {
                                 username: this.configuration.username,
                                 targetWorkspace: targetWorkspace,
@@ -220,9 +229,11 @@ var BaseAPI = /** @class */ (function () {
                     case 1:
                         response = _b.sent();
                         _a = response.data, accessToken = _a.accessToken, permissions = _a.permissions;
-                        this.configuration.accessToken = "Bearer ".concat(accessToken);
-                        this.tokenData.accessToken = accessToken;
                         this.tokenData.permissions = permissions;
+                        if (!this.configuration.cookieAuth) {
+                            this.configuration.accessToken = "Bearer ".concat(accessToken);
+                            this.tokenData.accessToken = accessToken;
+                        }
                         this.storeTokenData(__assign({}, this.tokenData));
                         return [2 /*return*/];
                 }
@@ -265,7 +276,13 @@ var BaseAPI = /** @class */ (function () {
         });
     };
     BaseAPI.prototype.storeTokenData = function (tokenData) {
+        var _a;
         if (typeof window !== 'undefined') {
+            if (tokenData && ((_a = this.configuration) === null || _a === void 0 ? void 0 : _a.cookieAuth)) {
+                // Cookie mode saves who is logged in, never the token; a token saved by apps not yet migrated stays.
+                var username = tokenData.username, permissions = tokenData.permissions;
+                tokenData = __assign(__assign({}, ((0, common_1.defaultStorage)().get(TOKEN_DATA) || {})), { username: username, permissions: permissions });
+            }
             (0, common_1.defaultStorage)().set(TOKEN_DATA, tokenData);
         }
     };
@@ -300,12 +317,15 @@ var BaseAPI = /** @class */ (function () {
                         return [4 /*yield*/, this.refreshTokenInternal()];
                     case 2:
                         _a = _c.sent(), tokenString = _a.accessToken, permissions = _a.permissions;
-                        accessToken = "Bearer ".concat(tokenString);
                         this.tokenData.permissions = permissions;
                         delete originalConfig.headers['Authorization'];
-                        originalConfig.headers['Authorization'] = accessToken;
-                        this.configuration.accessToken = accessToken;
-                        this.tokenData.accessToken = tokenString;
+                        // In cookie mode the refresh reply renewed the access cookie, so retry without a header.
+                        if (!this.configuration.cookieAuth) {
+                            accessToken = "Bearer ".concat(tokenString);
+                            originalConfig.headers['Authorization'] = accessToken;
+                            this.configuration.accessToken = accessToken;
+                            this.tokenData.accessToken = tokenString;
+                        }
                         this.storeTokenData(this.tokenData);
                         return [2 /*return*/, axios(originalConfig)];
                     case 3:

package/dist/configuration.d.ts

@@ -17,6 +17,7 @@ export interface ConfigurationParameters {
     basePath?: string;
     baseOptions?: any;
     formDataCtor?: new () => any;
+    cookieAuth?: boolean;
 }
 export declare class Configuration {
     /**
@@ -68,6 +69,14 @@ export declare class Configuration {
      * @type {new () => FormData}
      */
     formDataCtor?: new () => any;
+    /**
+     * Authenticate with the HttpOnly access cookie instead of a stored token: every call sends credentials.
+     * The browser holds one cookie, so use it with one logged-in account; log out through the auth service.
+     *
+     * @type {boolean}
+     * @memberof Configuration
+     */
+    cookieAuth?: boolean;
     constructor(param?: ConfigurationParameters);
     /**
      * Check if the given MIME is a JSON MIME.

package/dist/configuration.js

@@ -24,6 +24,7 @@ var Configuration = /** @class */ (function () {
         this.basePath = param.basePath;
         this.baseOptions = param.baseOptions;
         this.formDataCtor = param.formDataCtor;
+        this.cookieAuth = param.cookieAuth;
     }
     /**
      * Check if the given MIME is a JSON MIME.

package/dist/models/index.d.ts

@@ -6,5 +6,7 @@ export * from './inline-response200';
 export * from './inline-response503';
 export * from './list-accounts-response-class';
 export * from './policy-class';
+export * from './register-account-policy-request-dto';
+export * from './register-policy-response-class';
 export * from './update-account-request-dto';
 export * from './update-account-response-class';

package/dist/models/index.js

@@ -22,5 +22,7 @@ __exportStar(require("./inline-response200"), exports);
 __exportStar(require("./inline-response503"), exports);
 __exportStar(require("./list-accounts-response-class"), exports);
 __exportStar(require("./policy-class"), exports);
+__exportStar(require("./register-account-policy-request-dto"), exports);
+__exportStar(require("./register-policy-response-class"), exports);
 __exportStar(require("./update-account-request-dto"), exports);
 __exportStar(require("./update-account-response-class"), exports);

package/dist/models/register-account-policy-request-dto.d.ts

@@ -0,0 +1,30 @@
+/**
+ * EMIL AccountService
+ * The EMIL AccountService API description
+ *
+ * The version of the OpenAPI document: 1.0
+ * Contact: kontakt@emil.de
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+/**
+ *
+ * @export
+ * @interface RegisterAccountPolicyRequestDto
+ */
+export interface RegisterAccountPolicyRequestDto {
+    /**
+     * The policy code that will be registered to the current account
+     * @type {string}
+     * @memberof RegisterAccountPolicyRequestDto
+     */
+    'policyCode': string;
+    /**
+     * The policy number that will be registered to the current account
+     * @type {string}
+     * @memberof RegisterAccountPolicyRequestDto
+     */
+    'policyNumber': string;
+}

package/dist/models/register-account-policy-request-dto.js

@@ -0,0 +1,15 @@
+"use strict";
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * EMIL AccountService
+ * The EMIL AccountService API description
+ *
+ * The version of the OpenAPI document: 1.0
+ * Contact: kontakt@emil.de
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/register-policy-response-class.d.ts

@@ -0,0 +1,25 @@
+/**
+ * EMIL AccountService
+ * The EMIL AccountService API description
+ *
+ * The version of the OpenAPI document: 1.0
+ * Contact: kontakt@emil.de
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+import { PolicyClass } from './policy-class';
+/**
+ *
+ * @export
+ * @interface RegisterPolicyResponseClass
+ */
+export interface RegisterPolicyResponseClass {
+    /**
+     * The policy response.
+     * @type {PolicyClass}
+     * @memberof RegisterPolicyResponseClass
+     */
+    'policy': PolicyClass;
+}

package/dist/models/register-policy-response-class.js

@@ -0,0 +1,15 @@
+"use strict";
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * EMIL AccountService
+ * The EMIL AccountService API description
+ *
+ * The version of the OpenAPI document: 1.0
+ * Contact: kontakt@emil.de
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/models/index.ts

@@ -6,5 +6,7 @@ export * from './inline-response200';
 export * from './inline-response503';
 export * from './list-accounts-response-class';
 export * from './policy-class';
+export * from './register-account-policy-request-dto';
+export * from './register-policy-response-class';
 export * from './update-account-request-dto';
 export * from './update-account-response-class';

package/models/register-account-policy-request-dto.ts

@@ -0,0 +1,36 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * EMIL AccountService
+ * The EMIL AccountService API description
+ *
+ * The version of the OpenAPI document: 1.0
+ * Contact: kontakt@emil.de
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+
+
+
+/**
+ * 
+ * @export
+ * @interface RegisterAccountPolicyRequestDto
+ */
+export interface RegisterAccountPolicyRequestDto {
+    /**
+     * The policy code that will be registered to the current account
+     * @type {string}
+     * @memberof RegisterAccountPolicyRequestDto
+     */
+    'policyCode': string;
+    /**
+     * The policy number that will be registered to the current account
+     * @type {string}
+     * @memberof RegisterAccountPolicyRequestDto
+     */
+    'policyNumber': string;
+}
+

package/models/register-policy-response-class.ts

@@ -0,0 +1,31 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * EMIL AccountService
+ * The EMIL AccountService API description
+ *
+ * The version of the OpenAPI document: 1.0
+ * Contact: kontakt@emil.de
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+
+
+import { PolicyClass } from './policy-class';
+
+/**
+ * 
+ * @export
+ * @interface RegisterPolicyResponseClass
+ */
+export interface RegisterPolicyResponseClass {
+    /**
+     * The policy response.
+     * @type {PolicyClass}
+     * @memberof RegisterPolicyResponseClass
+     */
+    'policy': PolicyClass;
+}
+

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@emilgroup/account-sdk",
-  "version": "1.49.1-beta.8",
+  "version": "1.49.1-beta.9",
   "description": "OpenAPI client for @emilgroup/account-sdk",
   "author": "OpenAPI-Generator Contributors",
   "keywords": [