@enfuce/nextgen-sdk 0.0.7 → 0.0.9

package/src/oauth/tokenManager.ts

@@ -21,14 +21,14 @@ export type TokenFetcher = () => Promise<AccessToken>;
  * client's `Configuration`:
  *
  * ```ts
- * const tokens = new TokenManager(fetcher);
+ * const tokens = new OAuthClientCredentialsManager(fetcher);
  * const config = new card.Configuration({ accessToken: () => tokens.getToken() });
  * ```
  *
  * A token is considered expired once the clock passes `expiry - skew`. Concurrent
  * refreshes share a single in-flight promise, so the token endpoint is hit once.
  */
-export class TokenManager {
+export class OAuthClientCredentialsManager {
     private token?: string;
     private expiresAtMs?: number;
     private inflight?: Promise<string>;

package/src/pin/api.ts

@@ -85,6 +85,22 @@ export interface SetPinRequestBody {
      */
     'zpkIndex'?: number;
 }
+export interface SetPinTzpkRequestBody {
+    /**
+     * Control ID that was returned in the [Request PIN Control Access Token Endpoint](https://nextgen-docs.enfuce.com/api/cards/post-card/create-pin-control-access-token).
+     */
+    'pinControlId': string;
+    /**
+     * RSA 2048 public key in PEM format (X.509 SubjectPublicKeyInfo). The key may contain:   - new lines,   - the PEM headers (\"-----BEGIN PUBLIC KEY-----\" and \"-----END PUBLIC KEY-----\") The key must not contain any spaces. 
+     */
+    'pubKey': string;
+}
+export interface SetTzpkResponseBody {
+    /**
+     * Base64 encoded encrypted Terminal Zone PIN Key (TZPK), encrypted with the pubKey passed as input.
+     */
+    'tzpk': string;
+}
 export interface ViewPinRequestBody {
     /**
      * Control ID that was returned in the [Request PIN Control Access Token Endpoint](https://nextgen-docs.enfuce.com/api/cards/post-card/create-pin-control-access-token).
@@ -111,6 +127,49 @@ export interface ViewPinResponseBody {
  */
 export const PINOperationsUsingPKIApiAxiosParamCreator = function (configuration?: Configuration) {
     return {
+        /**
+         * Send a request to this endpoint to generate a temporary Terminal Zone PIN Key (TZPK) for Set PIN or Change PIN flows. The TZPK is encrypted with the provided ephemeral RSA 2048 bit public key and returned as a base64 encoded value. 
+         * @summary Generate Set/Change PIN TZPK
+         * @param {SetPinTzpkRequestBody} setPinTzpkRequestBody Request payload for generating a temporary PIN encryption key.
+         * @param {string} [xAuditUser] Optional audit user header
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        setPinTzpk: async (setPinTzpkRequestBody: SetPinTzpkRequestBody, xAuditUser?: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'setPinTzpkRequestBody' is not null or undefined
+            assertParamExists('setPinTzpk', 'setPinTzpkRequestBody', setPinTzpkRequestBody)
+            const localVarPath = `/v1/pin/pki/set/tzpk`;
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'POST', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication bearerAuth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+            localVarHeaderParameter['Accept'] = 'application/json,application/problem+json';
+
+            if (xAuditUser != null) {
+                localVarHeaderParameter['x-audit-user'] = String(xAuditUser);
+            }
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+            localVarRequestOptions.data = serializeDataIfNeeded(setPinTzpkRequestBody, localVarRequestOptions, configuration)
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
         /**
          * Send a request to this endpoint to retrieve the card PIN (ISO PIN Block Format 1) encrypted with temporary PIN encryption key (tzpk). The tzpk is encrypted with the provided ephemeral RSA 2048 bit public key. Steps for retrieving the ISO PIN Block Format 1: - Decrypt the tzpk with the RSA private key. Now you have the decrypted 3DES double length key. - Decrypt the PIN block with the decrypted tzpk using 3DES decryption. 
          * @summary Retrieve Encrypted PIN
@@ -139,7 +198,7 @@ export const PINOperationsUsingPKIApiAxiosParamCreator = function (configuration
             await setBearerAuthToObject(localVarHeaderParameter, configuration)
 
             localVarHeaderParameter['Content-Type'] = 'application/json';
-            localVarHeaderParameter['Accept'] = 'application/json';
+            localVarHeaderParameter['Accept'] = 'application/json,application/problem+json';
 
             if (xAuditUser != null) {
                 localVarHeaderParameter['x-audit-user'] = String(xAuditUser);
@@ -163,6 +222,20 @@ export const PINOperationsUsingPKIApiAxiosParamCreator = function (configuration
 export const PINOperationsUsingPKIApiFp = function(configuration?: Configuration) {
     const localVarAxiosParamCreator = PINOperationsUsingPKIApiAxiosParamCreator(configuration)
     return {
+        /**
+         * Send a request to this endpoint to generate a temporary Terminal Zone PIN Key (TZPK) for Set PIN or Change PIN flows. The TZPK is encrypted with the provided ephemeral RSA 2048 bit public key and returned as a base64 encoded value. 
+         * @summary Generate Set/Change PIN TZPK
+         * @param {SetPinTzpkRequestBody} setPinTzpkRequestBody Request payload for generating a temporary PIN encryption key.
+         * @param {string} [xAuditUser] Optional audit user header
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async setPinTzpk(setPinTzpkRequestBody: SetPinTzpkRequestBody, xAuditUser?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<SetTzpkResponseBody>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.setPinTzpk(setPinTzpkRequestBody, xAuditUser, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['PINOperationsUsingPKIApi.setPinTzpk']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
         /**
          * Send a request to this endpoint to retrieve the card PIN (ISO PIN Block Format 1) encrypted with temporary PIN encryption key (tzpk). The tzpk is encrypted with the provided ephemeral RSA 2048 bit public key. Steps for retrieving the ISO PIN Block Format 1: - Decrypt the tzpk with the RSA private key. Now you have the decrypted 3DES double length key. - Decrypt the PIN block with the decrypted tzpk using 3DES decryption. 
          * @summary Retrieve Encrypted PIN
@@ -186,6 +259,17 @@ export const PINOperationsUsingPKIApiFp = function(configuration?: Configuration
 export const PINOperationsUsingPKIApiFactory = function (configuration?: Configuration, basePath?: string, axios?: AxiosInstance) {
     const localVarFp = PINOperationsUsingPKIApiFp(configuration)
     return {
+        /**
+         * Send a request to this endpoint to generate a temporary Terminal Zone PIN Key (TZPK) for Set PIN or Change PIN flows. The TZPK is encrypted with the provided ephemeral RSA 2048 bit public key and returned as a base64 encoded value. 
+         * @summary Generate Set/Change PIN TZPK
+         * @param {SetPinTzpkRequestBody} setPinTzpkRequestBody Request payload for generating a temporary PIN encryption key.
+         * @param {string} [xAuditUser] Optional audit user header
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        setPinTzpk(setPinTzpkRequestBody: SetPinTzpkRequestBody, xAuditUser?: string, options?: RawAxiosRequestConfig): AxiosPromise<SetTzpkResponseBody> {
+            return localVarFp.setPinTzpk(setPinTzpkRequestBody, xAuditUser, options).then((request) => request(axios, basePath));
+        },
         /**
          * Send a request to this endpoint to retrieve the card PIN (ISO PIN Block Format 1) encrypted with temporary PIN encryption key (tzpk). The tzpk is encrypted with the provided ephemeral RSA 2048 bit public key. Steps for retrieving the ISO PIN Block Format 1: - Decrypt the tzpk with the RSA private key. Now you have the decrypted 3DES double length key. - Decrypt the PIN block with the decrypted tzpk using 3DES decryption. 
          * @summary Retrieve Encrypted PIN
@@ -204,6 +288,18 @@ export const PINOperationsUsingPKIApiFactory = function (configuration?: Configu
  * PINOperationsUsingPKIApi - object-oriented interface
  */
 export class PINOperationsUsingPKIApi extends BaseAPI {
+    /**
+     * Send a request to this endpoint to generate a temporary Terminal Zone PIN Key (TZPK) for Set PIN or Change PIN flows. The TZPK is encrypted with the provided ephemeral RSA 2048 bit public key and returned as a base64 encoded value. 
+     * @summary Generate Set/Change PIN TZPK
+     * @param {SetPinTzpkRequestBody} setPinTzpkRequestBody Request payload for generating a temporary PIN encryption key.
+     * @param {string} [xAuditUser] Optional audit user header
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    public setPinTzpk(setPinTzpkRequestBody: SetPinTzpkRequestBody, xAuditUser?: string, options?: RawAxiosRequestConfig) {
+        return PINOperationsUsingPKIApiFp(this.configuration).setPinTzpk(setPinTzpkRequestBody, xAuditUser, options).then((request) => request(this.axios, this.basePath));
+    }
+
     /**
      * Send a request to this endpoint to retrieve the card PIN (ISO PIN Block Format 1) encrypted with temporary PIN encryption key (tzpk). The tzpk is encrypted with the provided ephemeral RSA 2048 bit public key. Steps for retrieving the ISO PIN Block Format 1: - Decrypt the tzpk with the RSA private key. Now you have the decrypted 3DES double length key. - Decrypt the PIN block with the decrypted tzpk using 3DES decryption. 
      * @summary Retrieve Encrypted PIN
@@ -253,7 +349,7 @@ export const PINOperationsWithPreSharedKeyApiAxiosParamCreator = function (confi
             await setBearerAuthToObject(localVarHeaderParameter, configuration)
 
             localVarHeaderParameter['Content-Type'] = 'application/json';
-            localVarHeaderParameter['Accept'] = 'application/json';
+            localVarHeaderParameter['Accept'] = 'application/json,application/problem+json';
 
             if (xIdempotencyKey != null) {
                 localVarHeaderParameter['x-idempotency-key'] = String(xIdempotencyKey);
@@ -300,7 +396,7 @@ export const PINOperationsWithPreSharedKeyApiAxiosParamCreator = function (confi
             await setBearerAuthToObject(localVarHeaderParameter, configuration)
 
             localVarHeaderParameter['Content-Type'] = 'application/json';
-            localVarHeaderParameter['Accept'] = 'application/json';
+            localVarHeaderParameter['Accept'] = 'application/json,application/problem+json';
 
             if (xIdempotencyKey != null) {
                 localVarHeaderParameter['x-idempotency-key'] = String(xIdempotencyKey);

package/src/pin/client.ts

@@ -6,7 +6,7 @@
  * retry) to the module's Configuration and exposes each API. Nothing is shared across modules.
  */
 import globalAxios, { type AxiosInstance } from 'axios';
-import { createOAuthAxios, type TokenManager } from '../oauth';
+import { createOAuthAxios, type OAuthClientCredentialsManager } from '../oauth';
 import { Configuration } from './configuration';
 import {
   PINOperationsUsingPKIApi,
@@ -56,7 +56,7 @@ export class PinClient {
 export class PinClientBuilder {
 
   private _baseUrl?: string;
-  private _tokens?: TokenManager;
+  private _tokens?: OAuthClientCredentialsManager;
   private _customizers: Array<(http: AxiosInstance) => void> = [];
 
   /** The module's host, e.g. `https://api.<tenant>.../issuer`. */
@@ -66,7 +66,7 @@ export class PinClientBuilder {
   }
 
   /** Install OAuth: a fresh bearer token on every request + reactive 401 retry. */
-  oauth(tokens: TokenManager): this {
+  oauth(tokens: OAuthClientCredentialsManager): this {
     this._tokens = tokens;
     return this;
   }

package/src/threeds/client.ts

@@ -6,7 +6,7 @@
  * retry) to the module's Configuration and exposes each API. Nothing is shared across modules.
  */
 import globalAxios, { type AxiosInstance } from 'axios';
-import { createOAuthAxios, type TokenManager } from '../oauth';
+import { createOAuthAxios, type OAuthClientCredentialsManager } from '../oauth';
 import { Configuration } from './configuration';
 import {
   ThreeDSApi,
@@ -50,7 +50,7 @@ export class ThreedsClient {
 export class ThreedsClientBuilder {
 
   private _baseUrl?: string;
-  private _tokens?: TokenManager;
+  private _tokens?: OAuthClientCredentialsManager;
   private _customizers: Array<(http: AxiosInstance) => void> = [];
 
   /** The module's host, e.g. `https://api.<tenant>.../issuer`. */
@@ -60,7 +60,7 @@ export class ThreedsClientBuilder {
   }
 
   /** Install OAuth: a fresh bearer token on every request + reactive 401 retry. */
-  oauth(tokens: TokenManager): this {
+  oauth(tokens: OAuthClientCredentialsManager): this {
     this._tokens = tokens;
     return this;
   }

package/src/threeds-oob/api.ts

@@ -112,108 +112,3 @@ export const ThreeDsTransactionDeviceChannelEnum = {
 export type ThreeDsTransactionDeviceChannelEnum = typeof ThreeDsTransactionDeviceChannelEnum[keyof typeof ThreeDsTransactionDeviceChannelEnum];
 
 
-/**
- * OOBAuthenticationChallengeWebhookNotificationApi - axios parameter creator
- */
-export const OOBAuthenticationChallengeWebhookNotificationApiAxiosParamCreator = function (configuration?: Configuration) {
-    return {
-        /**
-         * In Out-of-Band (OOB) authentication flow, Enfuce sends an authentication challenge webhook notification to the issuer\'s registered endpoint for cardholder\'s approval. 
-         * @summary Initiate OOB Authentication Challenge
-         * @param {InitiateAuthenticationChallengeBody} initiateAuthenticationChallengeBody 
-         * @param {*} [options] Override http request option.
-         * @throws {RequiredError}
-         */
-        initiateAuthenticationChallenge: async (initiateAuthenticationChallengeBody: InitiateAuthenticationChallengeBody, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
-            // verify required parameter 'initiateAuthenticationChallengeBody' is not null or undefined
-            assertParamExists('initiateAuthenticationChallenge', 'initiateAuthenticationChallengeBody', initiateAuthenticationChallengeBody)
-            const localVarPath = `/v1/3ds/oob/challenge/initiate`;
-            // use dummy base URL string because the URL constructor only accepts absolute URLs.
-            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
-            let baseOptions;
-            if (configuration) {
-                baseOptions = configuration.baseOptions;
-            }
-
-            const localVarRequestOptions = { method: 'POST', ...baseOptions, ...options};
-            const localVarHeaderParameter = {} as any;
-            const localVarQueryParameter = {} as any;
-
-            // authentication basicAuth required
-            // http basic authentication required
-            setBasicAuthToObject(localVarRequestOptions, configuration)
-
-            localVarHeaderParameter['Content-Type'] = 'application/json';
-
-            setSearchParams(localVarUrlObj, localVarQueryParameter);
-            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
-            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
-            localVarRequestOptions.data = serializeDataIfNeeded(initiateAuthenticationChallengeBody, localVarRequestOptions, configuration)
-
-            return {
-                url: toPathString(localVarUrlObj),
-                options: localVarRequestOptions,
-            };
-        },
-    }
-};
-
-/**
- * OOBAuthenticationChallengeWebhookNotificationApi - functional programming interface
- */
-export const OOBAuthenticationChallengeWebhookNotificationApiFp = function(configuration?: Configuration) {
-    const localVarAxiosParamCreator = OOBAuthenticationChallengeWebhookNotificationApiAxiosParamCreator(configuration)
-    return {
-        /**
-         * In Out-of-Band (OOB) authentication flow, Enfuce sends an authentication challenge webhook notification to the issuer\'s registered endpoint for cardholder\'s approval. 
-         * @summary Initiate OOB Authentication Challenge
-         * @param {InitiateAuthenticationChallengeBody} initiateAuthenticationChallengeBody 
-         * @param {*} [options] Override http request option.
-         * @throws {RequiredError}
-         */
-        async initiateAuthenticationChallenge(initiateAuthenticationChallengeBody: InitiateAuthenticationChallengeBody, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>> {
-            const localVarAxiosArgs = await localVarAxiosParamCreator.initiateAuthenticationChallenge(initiateAuthenticationChallengeBody, options);
-            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
-            const localVarOperationServerBasePath = operationServerMap['OOBAuthenticationChallengeWebhookNotificationApi.initiateAuthenticationChallenge']?.[localVarOperationServerIndex]?.url;
-            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
-        },
-    }
-};
-
-/**
- * OOBAuthenticationChallengeWebhookNotificationApi - factory interface
- */
-export const OOBAuthenticationChallengeWebhookNotificationApiFactory = function (configuration?: Configuration, basePath?: string, axios?: AxiosInstance) {
-    const localVarFp = OOBAuthenticationChallengeWebhookNotificationApiFp(configuration)
-    return {
-        /**
-         * In Out-of-Band (OOB) authentication flow, Enfuce sends an authentication challenge webhook notification to the issuer\'s registered endpoint for cardholder\'s approval. 
-         * @summary Initiate OOB Authentication Challenge
-         * @param {InitiateAuthenticationChallengeBody} initiateAuthenticationChallengeBody 
-         * @param {*} [options] Override http request option.
-         * @throws {RequiredError}
-         */
-        initiateAuthenticationChallenge(initiateAuthenticationChallengeBody: InitiateAuthenticationChallengeBody, options?: RawAxiosRequestConfig): AxiosPromise<void> {
-            return localVarFp.initiateAuthenticationChallenge(initiateAuthenticationChallengeBody, options).then((request) => request(axios, basePath));
-        },
-    };
-};
-
-/**
- * OOBAuthenticationChallengeWebhookNotificationApi - object-oriented interface
- */
-export class OOBAuthenticationChallengeWebhookNotificationApi extends BaseAPI {
-    /**
-     * In Out-of-Band (OOB) authentication flow, Enfuce sends an authentication challenge webhook notification to the issuer\'s registered endpoint for cardholder\'s approval. 
-     * @summary Initiate OOB Authentication Challenge
-     * @param {InitiateAuthenticationChallengeBody} initiateAuthenticationChallengeBody 
-     * @param {*} [options] Override http request option.
-     * @throws {RequiredError}
-     */
-    public initiateAuthenticationChallenge(initiateAuthenticationChallengeBody: InitiateAuthenticationChallengeBody, options?: RawAxiosRequestConfig) {
-        return OOBAuthenticationChallengeWebhookNotificationApiFp(this.configuration).initiateAuthenticationChallenge(initiateAuthenticationChallengeBody, options).then((request) => request(this.axios, this.basePath));
-    }
-}
-
-
-

package/src/threeds-oob/index.ts

@@ -16,5 +16,3 @@
 export * from "./api";
 export * from "./configuration";
 
-
-export * from './client';

package/src/wallet/api.ts

@@ -475,7 +475,7 @@ export const ActivateTokenApiAxiosParamCreator = function (configuration?: Confi
             // http bearer authentication required
             await setBearerAuthToObject(localVarHeaderParameter, configuration)
 
-            localVarHeaderParameter['Accept'] = 'application/json';
+            localVarHeaderParameter['Accept'] = 'application/json,application/problem+json';
 
             if (xAuditUser != null) {
                 localVarHeaderParameter['x-audit-user'] = String(xAuditUser);
@@ -518,7 +518,7 @@ export const ActivateTokenApiAxiosParamCreator = function (configuration?: Confi
             // http bearer authentication required
             await setBearerAuthToObject(localVarHeaderParameter, configuration)
 
-            localVarHeaderParameter['Accept'] = 'application/json';
+            localVarHeaderParameter['Accept'] = 'application/json,application/problem+json';
 
             if (xIdempotencyKey != null) {
                 localVarHeaderParameter['x-idempotency-key'] = String(xIdempotencyKey);
@@ -674,7 +674,7 @@ export const DeactivateTokenApiAxiosParamCreator = function (configuration?: Con
             // http bearer authentication required
             await setBearerAuthToObject(localVarHeaderParameter, configuration)
 
-            localVarHeaderParameter['Accept'] = 'application/json';
+            localVarHeaderParameter['Accept'] = 'application/json,application/problem+json';
 
             if (xIdempotencyKey != null) {
                 localVarHeaderParameter['x-idempotency-key'] = String(xIdempotencyKey);
@@ -790,7 +790,7 @@ export const EligibleTokenRequestorsApiAxiosParamCreator = function (configurati
             await setBearerAuthToObject(localVarHeaderParameter, configuration)
 
             localVarHeaderParameter['Content-Type'] = 'application/json';
-            localVarHeaderParameter['Accept'] = 'application/json';
+            localVarHeaderParameter['Accept'] = 'application/json,application/problem+json';
 
             if (xAuditUser != null) {
                 localVarHeaderParameter['x-audit-user'] = String(xAuditUser);
@@ -913,7 +913,7 @@ export const GetTokensApiAxiosParamCreator = function (configuration?: Configura
                 localVarQueryParameter['includeCardSchemePayload'] = includeCardSchemePayload;
             }
 
-            localVarHeaderParameter['Accept'] = 'application/json';
+            localVarHeaderParameter['Accept'] = 'application/json,application/problem+json';
 
             if (xAuditUser != null) {
                 localVarHeaderParameter['x-audit-user'] = String(xAuditUser);
@@ -965,7 +965,7 @@ export const GetTokensApiAxiosParamCreator = function (configuration?: Configura
                 localVarQueryParameter['includeCardSchemePayload'] = includeCardSchemePayload;
             }
 
-            localVarHeaderParameter['Accept'] = 'application/json';
+            localVarHeaderParameter['Accept'] = 'application/json,application/problem+json';
 
             if (xAuditUser != null) {
                 localVarHeaderParameter['x-audit-user'] = String(xAuditUser);
@@ -1126,7 +1126,7 @@ export const PushCardsApiAxiosParamCreator = function (configuration?: Configura
             await setBearerAuthToObject(localVarHeaderParameter, configuration)
 
             localVarHeaderParameter['Content-Type'] = 'application/json';
-            localVarHeaderParameter['Accept'] = 'application/json';
+            localVarHeaderParameter['Accept'] = 'application/json,application/problem+json';
 
             if (xAuditUser != null) {
                 localVarHeaderParameter['x-audit-user'] = String(xAuditUser);
@@ -1243,7 +1243,7 @@ export const PushProvisionApiAxiosParamCreator = function (configuration?: Confi
             await setBearerAuthToObject(localVarHeaderParameter, configuration)
 
             localVarHeaderParameter['Content-Type'] = 'application/json';
-            localVarHeaderParameter['Accept'] = 'application/json';
+            localVarHeaderParameter['Accept'] = 'application/json,application/problem+json';
 
             if (xAuditUser != null) {
                 localVarHeaderParameter['x-audit-user'] = String(xAuditUser);
@@ -1288,7 +1288,7 @@ export const PushProvisionApiAxiosParamCreator = function (configuration?: Confi
             await setBearerAuthToObject(localVarHeaderParameter, configuration)
 
             localVarHeaderParameter['Content-Type'] = 'application/json';
-            localVarHeaderParameter['Accept'] = 'application/json';
+            localVarHeaderParameter['Accept'] = 'application/json,application/problem+json';
 
             if (xAuditUser != null) {
                 localVarHeaderParameter['x-audit-user'] = String(xAuditUser);
@@ -1333,7 +1333,7 @@ export const PushProvisionApiAxiosParamCreator = function (configuration?: Confi
             await setBearerAuthToObject(localVarHeaderParameter, configuration)
 
             localVarHeaderParameter['Content-Type'] = 'application/json';
-            localVarHeaderParameter['Accept'] = 'application/json';
+            localVarHeaderParameter['Accept'] = 'application/json,application/problem+json';
 
             if (xAuditUser != null) {
                 localVarHeaderParameter['x-audit-user'] = String(xAuditUser);
@@ -1530,7 +1530,7 @@ export const SuspendTokenApiAxiosParamCreator = function (configuration?: Config
             // http bearer authentication required
             await setBearerAuthToObject(localVarHeaderParameter, configuration)
 
-            localVarHeaderParameter['Accept'] = 'application/json';
+            localVarHeaderParameter['Accept'] = 'application/json,application/problem+json';
 
             if (xIdempotencyKey != null) {
                 localVarHeaderParameter['x-idempotency-key'] = String(xIdempotencyKey);
@@ -1649,7 +1649,7 @@ export const UnsuspendTokenApiAxiosParamCreator = function (configuration?: Conf
             // http bearer authentication required
             await setBearerAuthToObject(localVarHeaderParameter, configuration)
 
-            localVarHeaderParameter['Accept'] = 'application/json';
+            localVarHeaderParameter['Accept'] = 'application/json,application/problem+json';
 
             if (xIdempotencyKey != null) {
                 localVarHeaderParameter['x-idempotency-key'] = String(xIdempotencyKey);

package/src/wallet/client.ts

@@ -6,7 +6,7 @@
  * retry) to the module's Configuration and exposes each API. Nothing is shared across modules.
  */
 import globalAxios, { type AxiosInstance } from 'axios';
-import { createOAuthAxios, type TokenManager } from '../oauth';
+import { createOAuthAxios, type OAuthClientCredentialsManager } from '../oauth';
 import { Configuration } from './configuration';
 import {
   ActivateTokenApi,
@@ -92,7 +92,7 @@ export class WalletClient {
 export class WalletClientBuilder {
 
   private _baseUrl?: string;
-  private _tokens?: TokenManager;
+  private _tokens?: OAuthClientCredentialsManager;
   private _customizers: Array<(http: AxiosInstance) => void> = [];
 
   /** The module's host, e.g. `https://api.<tenant>.../issuer`. */
@@ -102,7 +102,7 @@ export class WalletClientBuilder {
   }
 
   /** Install OAuth: a fresh bearer token on every request + reactive 401 retry. */
-  oauth(tokens: TokenManager): this {
+  oauth(tokens: OAuthClientCredentialsManager): this {
     this._tokens = tokens;
     return this;
   }

package/test/clientCredentials.test.ts

@@ -0,0 +1,20 @@
+/** Tests for the ClientCredentials identity object and the clientCredentials overloads. */
+import { describe, expect, it } from 'vitest';
+import { oauth } from '../src';
+
+describe('ClientCredentials pairing', () => {
+  it('clientCredentials(tokenUrl, credentials) builds an OAuthClientCredentialsManager', () => {
+    const creds: oauth.ClientCredentials = { clientId: 'id', clientSecret: 'secret', scopes: ['s.read'] };
+    const mgr = oauth.clientCredentials('https://auth.example.com/oauth2/token', creds);
+    expect(mgr).toBeInstanceOf(oauth.OAuthClientCredentialsManager);
+  });
+
+  it('still accepts a full OAuthConfig', () => {
+    const mgr = oauth.clientCredentials({
+      tokenUrl: 'https://auth.example.com/oauth2/token',
+      clientId: 'id',
+      clientSecret: 'secret',
+    });
+    expect(mgr).toBeInstanceOf(oauth.OAuthClientCredentialsManager);
+  });
+});

package/test/oauth.test.ts

@@ -1,7 +1,7 @@
 /**
  * Tests for the hand-written OAuth token-management helper (src/oauth).
  *
- * Covers the TokenManager cache/refresh/single-flight logic, the client-credentials
+ * Covers the OAuthClientCredentialsManager cache/refresh/single-flight logic, the client-credentials
  * fetcher and the reactive 401-retry axios instance, using capturing axios adapters
  * so nothing hits the network.
  */
@@ -9,7 +9,7 @@ import axios, { type AxiosAdapter, type InternalAxiosRequestConfig } from 'axios
 import { describe, expect, it } from 'vitest';
 import { oauth } from '../src';
 
-const { TokenManager, clientCredentialsFetcher, clientCredentials, createOAuthAxios } = oauth;
+const { OAuthClientCredentialsManager, clientCredentialsFetcher, clientCredentials, createOAuthAxios } = oauth;
 
 function makeClock(start = 1000) {
   const state = { t: start };
@@ -25,11 +25,11 @@ function countingFetcher(expiresInSeconds = 300) {
   return { fetch, calls };
 }
 
-describe('TokenManager', () => {
+describe('OAuthClientCredentialsManager', () => {
   it('caches the token within its validity window', async () => {
     const { fetch, calls } = countingFetcher();
     const clock = makeClock();
-    const mgr = new TokenManager(fetch, 60, clock.now);
+    const mgr = new OAuthClientCredentialsManager(fetch, 60, clock.now);
 
     expect(await mgr.getToken()).toBe('token-1');
     expect(await mgr.getToken()).toBe('token-1');
@@ -39,7 +39,7 @@ describe('TokenManager', () => {
   it('refreshes once past expiry minus skew', async () => {
     const { fetch, calls } = countingFetcher(300);
     const clock = makeClock();
-    const mgr = new TokenManager(fetch, 60, clock.now);
+    const mgr = new OAuthClientCredentialsManager(fetch, 60, clock.now);
 
     expect(await mgr.getToken()).toBe('token-1');
     clock.advance(239_000);
@@ -53,7 +53,7 @@ describe('TokenManager', () => {
 
   it('refetches every call when lifetime is unknown', async () => {
     const { fetch, calls } = countingFetcher(0);
-    const mgr = new TokenManager(fetch, 60, makeClock().now);
+    const mgr = new OAuthClientCredentialsManager(fetch, 60, makeClock().now);
     await mgr.getToken();
     await mgr.getToken();
     expect(calls.n).toBe(2);
@@ -61,7 +61,7 @@ describe('TokenManager', () => {
 
   it('shares a single in-flight fetch across concurrent callers', async () => {
     const { fetch, calls } = countingFetcher();
-    const mgr = new TokenManager(fetch, 60, makeClock().now);
+    const mgr = new OAuthClientCredentialsManager(fetch, 60, makeClock().now);
 
     const results = await Promise.all([mgr.getToken(), mgr.getToken(), mgr.getToken()]);
 
@@ -71,7 +71,7 @@ describe('TokenManager', () => {
 
   it('forceRefresh is a no-op when the cached token already moved on', async () => {
     const { fetch, calls } = countingFetcher();
-    const mgr = new TokenManager(fetch, 60, makeClock().now);
+    const mgr = new OAuthClientCredentialsManager(fetch, 60, makeClock().now);
 
     expect(await mgr.getToken()).toBe('token-1');
     expect(await mgr.forceRefresh('an-older-token')).toBe('token-1');
@@ -129,7 +129,7 @@ describe('clientCredentialsFetcher', () => {
     expect(captured.config?.auth).toBeUndefined();
   });
 
-  it('clientCredentials returns a caching TokenManager', async () => {
+  it('clientCredentials returns a caching OAuthClientCredentialsManager', async () => {
     const { instance } = capturingAxios({ access_token: 'abc', expires_in: 120 });
     const mgr = clientCredentials(
       { tokenUrl: 'https://auth.example.com/oauth/token', clientId: 'id', clientSecret: 's', axiosInstance: instance },
@@ -141,7 +141,7 @@ describe('clientCredentialsFetcher', () => {
 describe('createOAuthAxios', () => {
   it('proactively attaches a bearer token to a request that has no Authorization header', async () => {
     const { fetch, calls } = countingFetcher();
-    const mgr = new TokenManager(fetch, 60, makeClock().now);
+    const mgr = new OAuthClientCredentialsManager(fetch, 60, makeClock().now);
 
     const seenAuth: (string | undefined)[] = [];
     const adapter: AxiosAdapter = async (config) => {
@@ -160,7 +160,7 @@ describe('createOAuthAxios', () => {
 
   it('retries the request with a refreshed token when the first call rejects with 401', async () => {
     const { fetch } = countingFetcher();
-    const mgr = new TokenManager(fetch, 60, makeClock().now);
+    const mgr = new OAuthClientCredentialsManager(fetch, 60, makeClock().now);
     await mgr.getToken(); // seed token-1
 
     const seenAuth: (string | undefined)[] = [];
@@ -196,7 +196,7 @@ describe('createOAuthAxios', () => {
 
   it('surfaces the error after a single retry (no infinite loop)', async () => {
     const { fetch } = countingFetcher();
-    const mgr = new TokenManager(fetch, 60, makeClock().now);
+    const mgr = new OAuthClientCredentialsManager(fetch, 60, makeClock().now);
     await mgr.getToken();
 
     let calls = 0;

package/dist/authorisation-control/client.d.ts

@@ -1,47 +0,0 @@
-import { type AxiosInstance } from 'axios';
-import { type TokenManager } from '../oauth';
-import { Configuration } from './configuration';
-import { AuthorisationRequestAPIApi } from './api';
-/**
- * Fluent entry point for this module. Build one with {@link AuthorisationControlClient.builder}:
- *
- * ```ts
- * const client = AuthorisationControlClient.builder()
- *   .baseUrl('https://api.example.com/...')
- *   .oauth(tokens)
- *   .build();
- * ```
- */
-export declare class AuthorisationControlClient {
-    /** The axios instance — OAuth interceptors and any customizations already applied. */
-    readonly http: AxiosInstance;
-    /** The module configuration — base path applied. */
-    readonly configuration: Configuration;
-    constructor(
-    /** The axios instance — OAuth interceptors and any customizations already applied. */
-    http: AxiosInstance, 
-    /** The module configuration — base path applied. */
-    configuration: Configuration);
-    /** Build any API in this module bound to this client (for APIs without a named getter). */
-    api<T>(factory: (configuration: Configuration, http: AxiosInstance) => T): T;
-    /** {@link AuthorisationRequestAPIApi} bound to this client. */
-    authorisationRequestAPIApi(): AuthorisationRequestAPIApi;
-    static builder(): AuthorisationControlClientBuilder;
-}
-/** Builds a {@link AuthorisationControlClient}: base URL + optional OAuth + transport customization. */
-export declare class AuthorisationControlClientBuilder {
-    private _baseUrl?;
-    private _tokens?;
-    private _customizers;
-    /** The module's host, e.g. `https://api.<tenant>.../issuer`. */
-    baseUrl(baseUrl: string): this;
-    /** Install OAuth: a fresh bearer token on every request + reactive 401 retry. */
-    oauth(tokens: TokenManager): this;
-    /**
-     * Customize the underlying axios instance — set a timeout (`http.defaults.timeout = ...`), a proxy,
-     * default headers, extra interceptors, etc. Runs after OAuth is installed. Composable: multiple
-     * calls run in order.
-     */
-    configure(customizer: (http: AxiosInstance) => void): this;
-    build(): AuthorisationControlClient;
-}