@mediaviz/sdk 1.0.80 → 1.0.81

package/dist/sdk.cjs

@@ -91,8 +91,15 @@ function requireErrors () {
 	   * @returns {OAuthError}
 	   */
 	  static fromResponse(status, body) {
-	    if (body && typeof body === 'object' && typeof body.error === 'string') {
-	      return new OAuthError(body.error, body.error_description ?? '', status, body);
+	    // FastAPI wraps HTTPException payloads in a `detail` envelope, so an OAuth
+	    // error arrives as { detail: { error, error_description } }. Unwrap it
+	    // before falling back, or every server-side OAuth error reads as server_error.
+	    const payload =
+	      body && typeof body === 'object' && typeof body.error !== 'string' && body.detail
+	        ? body.detail
+	        : body;
+	    if (payload && typeof payload === 'object' && typeof payload.error === 'string') {
+	      return new OAuthError(payload.error, payload.error_description ?? '', status, body);
 	    }
 	    return new OAuthError('server_error', 'Unexpected server response', status, body);
 	  }
@@ -191,12 +198,22 @@ function requireClient () {
 	   */
 	  static async registerClient(params) {
 	    const baseUrl = params.baseUrl.replace(/\/+$/, '');
-	    return postJson(`${baseUrl}/oauth/clients`, {
+	    const body = {
 	      client_name: params.clientName,
 	      client_type: params.clientType,
 	      redirect_uris: params.redirectUris,
 	      is_first_party: params.isFirstParty,
-	    });
+	    };
+	    // grant_types/company_id are required to provision a confidential
+	    // client_credentials (machine-to-machine) client; omitted bodies keep the
+	    // legacy public/authorization_code shape. The endpoint is admin-gated, so a
+	    // bearer token must be supplied for the request to authenticate.
+	    if (params.grantTypes !== undefined) body.grant_types = params.grantTypes;
+	    if (params.companyId !== undefined) body.company_id = params.companyId;
+	    const headers = params.accessToken
+	      ? { Authorization: `Bearer ${params.accessToken}` }
+	      : {};
+	    return postJson(`${baseUrl}/oauth/clients`, body, headers);
 	  }
 
 	  /**
@@ -416,6 +433,9 @@ function requireTypes () {
 	 * @property {string} clientType - "public" or "confidential"
 	 * @property {string[]} redirectUris - HTTPS redirect URIs
 	 * @property {boolean} isFirstParty - Whether this is a first-party client
+	 * @property {string[]} [grantTypes] - Allowed grants, e.g. ["client_credentials"]; required for machine-to-machine clients
+	 * @property {number} [companyId] - Company to bind the client to; required for the client_credentials grant
+	 * @property {string} [accessToken] - Admin bearer token; the registration endpoint is authorization-gated
 	 */
 
 	/**

package/dist/sdk.esm.js

@@ -89,8 +89,15 @@ function requireErrors () {
 	   * @returns {OAuthError}
 	   */
 	  static fromResponse(status, body) {
-	    if (body && typeof body === 'object' && typeof body.error === 'string') {
-	      return new OAuthError(body.error, body.error_description ?? '', status, body);
+	    // FastAPI wraps HTTPException payloads in a `detail` envelope, so an OAuth
+	    // error arrives as { detail: { error, error_description } }. Unwrap it
+	    // before falling back, or every server-side OAuth error reads as server_error.
+	    const payload =
+	      body && typeof body === 'object' && typeof body.error !== 'string' && body.detail
+	        ? body.detail
+	        : body;
+	    if (payload && typeof payload === 'object' && typeof payload.error === 'string') {
+	      return new OAuthError(payload.error, payload.error_description ?? '', status, body);
 	    }
 	    return new OAuthError('server_error', 'Unexpected server response', status, body);
 	  }
@@ -189,12 +196,22 @@ function requireClient () {
 	   */
 	  static async registerClient(params) {
 	    const baseUrl = params.baseUrl.replace(/\/+$/, '');
-	    return postJson(`${baseUrl}/oauth/clients`, {
+	    const body = {
 	      client_name: params.clientName,
 	      client_type: params.clientType,
 	      redirect_uris: params.redirectUris,
 	      is_first_party: params.isFirstParty,
-	    });
+	    };
+	    // grant_types/company_id are required to provision a confidential
+	    // client_credentials (machine-to-machine) client; omitted bodies keep the
+	    // legacy public/authorization_code shape. The endpoint is admin-gated, so a
+	    // bearer token must be supplied for the request to authenticate.
+	    if (params.grantTypes !== undefined) body.grant_types = params.grantTypes;
+	    if (params.companyId !== undefined) body.company_id = params.companyId;
+	    const headers = params.accessToken
+	      ? { Authorization: `Bearer ${params.accessToken}` }
+	      : {};
+	    return postJson(`${baseUrl}/oauth/clients`, body, headers);
 	  }
 
 	  /**
@@ -414,6 +431,9 @@ function requireTypes () {
 	 * @property {string} clientType - "public" or "confidential"
 	 * @property {string[]} redirectUris - HTTPS redirect URIs
 	 * @property {boolean} isFirstParty - Whether this is a first-party client
+	 * @property {string[]} [grantTypes] - Allowed grants, e.g. ["client_credentials"]; required for machine-to-machine clients
+	 * @property {number} [companyId] - Company to bind the client to; required for the client_credentials grant
+	 * @property {string} [accessToken] - Admin bearer token; the registration endpoint is authorization-gated
 	 */
 
 	/**

package/dist/sdk.umd.js

@@ -95,8 +95,15 @@
 		   * @returns {OAuthError}
 		   */
 		  static fromResponse(status, body) {
-		    if (body && typeof body === 'object' && typeof body.error === 'string') {
-		      return new OAuthError(body.error, body.error_description ?? '', status, body);
+		    // FastAPI wraps HTTPException payloads in a `detail` envelope, so an OAuth
+		    // error arrives as { detail: { error, error_description } }. Unwrap it
+		    // before falling back, or every server-side OAuth error reads as server_error.
+		    const payload =
+		      body && typeof body === 'object' && typeof body.error !== 'string' && body.detail
+		        ? body.detail
+		        : body;
+		    if (payload && typeof payload === 'object' && typeof payload.error === 'string') {
+		      return new OAuthError(payload.error, payload.error_description ?? '', status, body);
 		    }
 		    return new OAuthError('server_error', 'Unexpected server response', status, body);
 		  }
@@ -195,12 +202,22 @@
 		   */
 		  static async registerClient(params) {
 		    const baseUrl = params.baseUrl.replace(/\/+$/, '');
-		    return postJson(`${baseUrl}/oauth/clients`, {
+		    const body = {
 		      client_name: params.clientName,
 		      client_type: params.clientType,
 		      redirect_uris: params.redirectUris,
 		      is_first_party: params.isFirstParty,
-		    });
+		    };
+		    // grant_types/company_id are required to provision a confidential
+		    // client_credentials (machine-to-machine) client; omitted bodies keep the
+		    // legacy public/authorization_code shape. The endpoint is admin-gated, so a
+		    // bearer token must be supplied for the request to authenticate.
+		    if (params.grantTypes !== undefined) body.grant_types = params.grantTypes;
+		    if (params.companyId !== undefined) body.company_id = params.companyId;
+		    const headers = params.accessToken
+		      ? { Authorization: `Bearer ${params.accessToken}` }
+		      : {};
+		    return postJson(`${baseUrl}/oauth/clients`, body, headers);
 		  }
 
 		  /**
@@ -420,6 +437,9 @@
 		 * @property {string} clientType - "public" or "confidential"
 		 * @property {string[]} redirectUris - HTTPS redirect URIs
 		 * @property {boolean} isFirstParty - Whether this is a first-party client
+		 * @property {string[]} [grantTypes] - Allowed grants, e.g. ["client_credentials"]; required for machine-to-machine clients
+		 * @property {number} [companyId] - Company to bind the client to; required for the client_credentials grant
+		 * @property {string} [accessToken] - Admin bearer token; the registration endpoint is authorization-gated
 		 */
 
 		/**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mediaviz/sdk",
-  "version": "1.0.80",
+  "version": "1.0.81",
   "description": "MediaViz JavaScript SDK \u2014 auto-generated public endpoint client.",
   "license": "MIT",
   "repository": {