@payware/mcp-server 1.1.0 → 1.2.0

package/src/tools/advanced-code-generator.js

@@ -8,7 +8,7 @@
  *
  * Features:
  * - Framework-specific code generation with proper patterns
- * - JWT authentication with contentMd5 for all languages
+ * - JWT authentication with contentSha256 (SHA-256) for all languages
  * - Production-ready error handling and validation
  * - Comprehensive documentation generation
  * - Multi-partner type support with operation-specific logic
@@ -362,8 +362,8 @@ def ${operation.replace('-', '_')}_example(${needsId ? "resource_id='example_123
     ${opDef.sampleBody ? `${includeComments ? '# Request payload' : ''}
     payload = ${JSON.stringify(opDef.sampleBody, null, 4)}
 
-    ${includeComments ? '# CRITICAL: Use deterministic JSON serialization for both MD5 and HTTP body' : ''}
-    ${includeComments ? '# This prevents ERR_INVALID_MD5 authentication errors' : ''}
+    ${includeComments ? '# CRITICAL: Use deterministic JSON serialization for both SHA-256 hash and HTTP body' : ''}
+    ${includeComments ? '# This prevents ERR_INVALID_CONTENT_HASH authentication errors' : ''}
     ${includeComments ? '# Import: from core.utils.json_serializer import create_deterministic_json' : ''}
     json_body = json.dumps(payload, sort_keys=True, separators=(',', ':'))` : `${includeComments ? '# No request body required' : ''}`}
 
@@ -379,7 +379,7 @@ def ${operation.replace('-', '_')}_example(${needsId ? "resource_id='example_123
 
     ${includeErrorHandling ? 'try:' : ''}
         ${includeComments ? '# Execute API request' : ''}
-        ${includeComments && opDef.sampleBody ? '# CRITICAL: Send the EXACT same json_body used for JWT contentMd5' : ''}
+        ${includeComments && opDef.sampleBody ? '# CRITICAL: Send the EXACT same json_body used for JWT contentSha256' : ''}
         response = requests.${opDef.method.toLowerCase()}(
             url,
             headers=headers${opDef.sampleBody ? ',\n            data=json_body' : ''}
@@ -410,7 +410,7 @@ def create_jwt_token(json_body_string=None):
     ${includeComments ? '    ' : ''}
     ${includeComments ? '    CRITICAL: json_body_string must be the exact same string' : ''}
     ${includeComments ? '    that will be sent in the HTTP request body to ensure' : ''}
-    ${includeComments ? '    MD5 hash consistency and prevent ERR_INVALID_MD5 errors.' : ''}
+    ${includeComments ? '    SHA-256 hash consistency and prevent ERR_INVALID_CONTENT_HASH errors.' : ''}
     ${includeComments ? '    """' : ''}
     ${includeComments ? '    import json' : ''}
     ${includeComments ? '    import jwt  # PyJWT library' : ''}
@@ -425,11 +425,11 @@ def create_jwt_token(json_body_string=None):
     ${includeComments ? '    # JWT header' : ''}
     ${includeComments ? '    headers = {"alg": "RS256", "typ": "JWT"}' : ''}
     ${includeComments ? '    ' : ''}
-    ${includeComments ? '    # Add contentMd5 to header if request body exists' : ''}
+    ${includeComments ? '    # Add contentSha256 to header if request body exists' : ''}
     ${includeComments ? '    if json_body_string:' : ''}
-    ${includeComments ? '        # CRITICAL: Calculate MD5 from exact same string sent in HTTP request' : ''}
-    ${includeComments ? '        md5_hash = hashlib.md5(json_body_string.encode("utf-8")).digest()' : ''}
-    ${includeComments ? '        headers["contentMd5"] = base64.b64encode(md5_hash).decode("ascii")' : ''}
+    ${includeComments ? '        # CRITICAL: Calculate SHA-256 from exact same string sent in HTTP request' : ''}
+    ${includeComments ? '        sha256_hash = hashlib.sha256(json_body_string.encode("utf-8")).digest()' : ''}
+    ${includeComments ? '        headers["contentSha256"] = base64.b64encode(sha256_hash).decode("ascii")' : ''}
     ${includeComments ? '    ' : ''}
     ${includeComments ? '    # JWT payload' : ''}
     ${includeComments ? '    payload = {' : ''}
@@ -481,8 +481,8 @@ async function ${operation.replace('-', '_')}Example(${needsId ? "resourceId = '
     ${opDef.sampleBody ? `${includeComments ? '// Request payload' : ''}
     const payload = ${JSON.stringify(opDef.sampleBody, null, 4)};
 
-    ${includeComments ? '// CRITICAL: Use deterministic JSON serialization for both MD5 and HTTP body' : ''}
-    ${includeComments ? '// This prevents ERR_INVALID_MD5 authentication errors' : ''}
+    ${includeComments ? '// CRITICAL: Use deterministic JSON serialization for both SHA-256 and HTTP body' : ''}
+    ${includeComments ? '// This prevents ERR_INVALID_CONTENT_HASH authentication errors' : ''}
     ${includeComments ? '// Import: const { createDeterministicJSON } = require(\'./core/utils/json-serializer\');' : ''}
     const jsonBody = JSON.stringify(payload, Object.keys(payload).sort());` : `${includeComments ? '// No request body required' : ''}`}
 
@@ -498,7 +498,7 @@ async function ${operation.replace('-', '_')}Example(${needsId ? "resourceId = '
 
     ${includeErrorHandling ? 'try {' : ''}
         ${includeComments ? '// Execute API request' : ''}
-        ${includeComments && opDef.sampleBody ? '// CRITICAL: Send same jsonBody used for JWT contentMd5' : ''}
+        ${includeComments && opDef.sampleBody ? '// CRITICAL: Send same jsonBody used for JWT contentSha256' : ''}
         const response = await axios.${opDef.method.toLowerCase()}(
             url,
             ${opDef.sampleBody ? 'jsonBody,' : 'undefined,'}
@@ -528,7 +528,7 @@ function createJWTToken(jsonBodyString = null) {
     ${includeComments ? ' * ' : ''}
     ${includeComments ? ' * CRITICAL: jsonBodyString must be the exact same string' : ''}
     ${includeComments ? ' * that will be sent in the HTTP request body to ensure' : ''}
-    ${includeComments ? ' * MD5 hash consistency and prevent ERR_INVALID_MD5 errors.' : ''}
+    ${includeComments ? ' * SHA-256 hash consistency and prevent ERR_INVALID_CONTENT_HASH errors.' : ''}
     ${includeComments ? ' */' : ''}
     ${includeComments ? '    const jwt = require("jsonwebtoken");' : ''}
     ${includeComments ? '    const crypto = require("crypto");' : ''}
@@ -540,11 +540,11 @@ function createJWTToken(jsonBodyString = null) {
     ${includeComments ? '    // JWT header' : ''}
     ${includeComments ? '    const header = { alg: "RS256", typ: "JWT" };' : ''}
     ${includeComments ? '    ' : ''}
-    ${includeComments ? '    // Add contentMd5 to header if request body exists' : ''}
+    ${includeComments ? '    // Add contentSha256 to header if request body exists' : ''}
     ${includeComments ? '    if (jsonBodyString) {' : ''}
-    ${includeComments ? '        // CRITICAL: Calculate MD5 from exact same string sent in HTTP request' : ''}
-    ${includeComments ? '        const md5Hash = crypto.createHash("md5").update(jsonBodyString, "utf8").digest("base64");' : ''}
-    ${includeComments ? '        header.contentMd5 = md5Hash;' : ''}
+    ${includeComments ? '        // CRITICAL: Calculate SHA-256 from exact same string sent in HTTP request' : ''}
+    ${includeComments ? '        const sha256Hash = crypto.createHash("sha256").update(jsonBodyString, "utf8").digest("base64");' : ''}
+    ${includeComments ? '        header.contentSha256 = sha256Hash;' : ''}
     ${includeComments ? '    }' : ''}
     ${includeComments ? '    ' : ''}
     ${includeComments ? '    // JWT payload' : ''}
@@ -792,8 +792,8 @@ class PaywareClient
         ${opDef.sampleBody ? `${includeComments ? '// Request payload' : ''}
         $payload = ${this.generatePHPArray(opDef.sampleBody, '        ')};
 
-        ${includeComments ? '// CRITICAL: Use deterministic JSON serialization for both MD5 and HTTP body' : ''}
-        ${includeComments ? '// This prevents ERR_INVALID_MD5 authentication errors' : ''}
+        ${includeComments ? '// CRITICAL: Use deterministic JSON serialization for both SHA-256 and HTTP body' : ''}
+        ${includeComments ? '// This prevents ERR_INVALID_CONTENT_HASH authentication errors' : ''}
         ${includeComments ? '// Note: Implement createDeterministicJSON() function with ksort()' : ''}
         ksort($payload);
         $requestBody = json_encode($payload, JSON_UNESCAPED_SLASHES);` : `${includeComments ? '// No request body required' : ''}`}
@@ -823,7 +823,7 @@ class PaywareClient
                 CURLOPT_SSL_VERIFYHOST => 2
             ]);
 
-            ${opDef.sampleBody ? `${includeComments ? '// CRITICAL: Send same requestBody used for JWT contentMd5' : ''}
+            ${opDef.sampleBody ? `${includeComments ? '// CRITICAL: Send same requestBody used for JWT contentSha256' : ''}
             curl_setopt($ch, CURLOPT_POSTFIELDS, $requestBody);` : ''}
 
             ${includeComments ? '// Execute request' : ''}
@@ -864,7 +864,7 @@ class PaywareClient
 
     /**
      * Create JWT token for payware API authentication
-     * @param string|null $requestBody Request body for content MD5
+     * @param string|null $requestBody Request body for content SHA-256
      * @return string JWT token
      */
     private function createJWTToken($requestBody = null)
@@ -872,16 +872,16 @@ class PaywareClient
         ${includeComments ? '/**' : '/*'}
          ${includeComments ? ' * CRITICAL: requestBody must be the exact same string' : ''}
          ${includeComments ? ' * that will be sent in the HTTP request body to ensure' : ''}
-         ${includeComments ? ' * MD5 hash consistency and prevent ERR_INVALID_MD5 errors.' : ''}
+         ${includeComments ? ' * SHA-256 hash consistency and prevent ERR_INVALID_CONTENT_HASH errors.' : ''}
          ${includeComments ? ' */' : '*/'}
 
         ${includeComments ? '// JWT header' : ''}
         $header = ['alg' => 'RS256', 'typ' => 'JWT'];
 
-        ${includeComments ? '// Add contentMd5 to header if request body exists' : ''}
+        ${includeComments ? '// Add contentSha256 to header if request body exists' : ''}
         if ($requestBody !== null) {
-            ${includeComments ? '// CRITICAL: Calculate MD5 from exact same string sent in HTTP request' : ''}
-            $header['contentMd5'] = base64_encode(md5($requestBody, true));
+            ${includeComments ? '// CRITICAL: Calculate SHA-256 from exact same string sent in HTTP request' : ''}
+            $header['contentSha256'] = base64_encode(hash('sha256', $requestBody, true));
         }
 
         ${includeComments ? '// JWT payload' : ''}
@@ -1411,8 +1411,8 @@ EOF` : '# No request body required'}
 # Authentication (placeholder - implement JWT token creation)
 JWT_TOKEN="your-jwt-token"
 
-# Content-MD5 for payware API (if request body exists)
-${opDef.sampleBody ? `CONTENT_MD5=$(echo -n "$REQUEST_BODY" | openssl dgst -md5 -binary | base64)` : ''}
+# Content-SHA256 for payware API (if request body exists)
+${opDef.sampleBody ? `CONTENT_SHA256=$(echo -n "$REQUEST_BODY" | openssl dgst -sha256 -binary | base64)` : ''}
 
 echo "🚀 Executing ${opDef.description}..."
 echo "URL: $URL"
@@ -1423,7 +1423,7 @@ curl -X ${opDef.method} "$URL" \\
   -H "Authorization: Bearer $JWT_TOKEN" \\
   -H "Content-Type: application/json" \\
   -H "Api-Version: 1" \\
-  ${opDef.sampleBody ? '-H "Content-MD5: $CONTENT_MD5" \\' : ''}
+  ${opDef.sampleBody ? '-H "Content-SHA256: $CONTENT_SHA256" \\' : ''}
   ${includeErrorHandling ? '-f -s -S \\' : '-v \\'}
   ${opDef.sampleBody ? '-d "$REQUEST_BODY"' : ''}` : `
 curl -X ${opDef.method} "$URL" \\
@@ -1465,10 +1465,10 @@ def create_jwt_token(request_body=None):
 YOUR_PRIVATE_KEY_HERE
 -----END RSA PRIVATE KEY-----"""
 
-    # Create content MD5 for request body
-    content_md5 = ""
+    # Create content SHA-256 for request body
+    content_sha256 = ""
     if request_body:
-        content_md5 = base64.b64encode(hashlib.md5(request_body.encode()).digest()).decode()
+        content_sha256 = base64.b64encode(hashlib.sha256(request_body.encode()).digest()).decode()
 
     # JWT payload
     payload = {
@@ -1476,7 +1476,7 @@ YOUR_PRIVATE_KEY_HERE
         "aud": "payware.eu",
         "iat": int(datetime.now(timezone.utc).timestamp()),
         "exp": int(datetime.now(timezone.utc).timestamp()) + 300,
-        "contentMd5": content_md5
+        "contentSha256": content_sha256
     }
 
     # Create JWT token
@@ -1500,10 +1500,10 @@ function createJWTToken(requestBody = null) {
 YOUR_PRIVATE_KEY_HERE
 -----END RSA PRIVATE KEY-----\`;
 
-    ${includeComments ? '// Create content MD5' : ''} for request body
-    let contentMd5 = "";
+    ${includeComments ? '// Create content SHA-256' : ''} for request body
+    let contentSha256 = "";
     if (requestBody) {
-        contentMd5 = crypto.createHash('md5').update(requestBody).digest('base64');
+        contentSha256 = crypto.createHash('sha256').update(requestBody).digest('base64');
     }
 
     // JWT payload
@@ -1512,7 +1512,7 @@ YOUR_PRIVATE_KEY_HERE
         aud: "payware.eu",
         iat: Math.floor(Date.now() / 1000),
         exp: Math.floor(Date.now() / 1000) + 300,
-        contentMd5: contentMd5
+        contentSha256: contentSha256
     };
 
     // Create JWT token
@@ -1543,12 +1543,12 @@ public class PaywareAuth {
             String partnerId = "YOUR_PARTNER_ID";
             String privateKeyPEM = "-----BEGIN RSA PRIVATE KEY-----\\nYOUR_PRIVATE_KEY_HERE\\n-----END RSA PRIVATE KEY-----";
 
-            ${includeComments ? '// Create content MD5' : ''}
-            String contentMd5 = "";
+            ${includeComments ? '// Create content SHA-256' : ''}
+            String contentSha256 = "";
             if (requestBody != null) {
-                MessageDigest md = MessageDigest.getInstance("MD5");
+                MessageDigest md = MessageDigest.getInstance("SHA-256");
                 byte[] digest = md.digest(requestBody.getBytes());
-                contentMd5 = Base64.getEncoder().encodeToString(digest);
+                contentSha256 = Base64.getEncoder().encodeToString(digest);
             }
 
             // JWT payload
@@ -1557,7 +1557,7 @@ public class PaywareAuth {
             claims.put("aud", "payware.eu");
             claims.put("iat", new Date().getTime() / 1000);
             claims.put("exp", (new Date().getTime() / 1000) + 300);
-            claims.put("contentMd5", contentMd5);
+            claims.put("contentSha256", contentSha256);
 
             // Note: You'll need to implement private key loading
             // PrivateKey privateKey = loadPrivateKey(privateKeyPEM);
@@ -1592,14 +1592,14 @@ public class PaywareAuth
 YOUR_PRIVATE_KEY_HERE
 -----END RSA PRIVATE KEY-----";
 
-        ${includeComments ? '// Create content MD5' : ''}
-        var contentMd5 = "";
+        ${includeComments ? '// Create content SHA-256' : ''}
+        var contentSha256 = "";
         if (!string.IsNullOrEmpty(requestBody))
         {
-            using (var md5 = MD5.Create())
+            using (var sha256 = SHA256.Create())
             {
-                var hash = md5.ComputeHash(Encoding.UTF8.GetBytes(requestBody));
-                contentMd5 = Convert.ToBase64String(hash);
+                var hash = sha256.ComputeHash(Encoding.UTF8.GetBytes(requestBody));
+                contentSha256 = Convert.ToBase64String(hash);
             }
         }
 
@@ -1610,7 +1610,7 @@ YOUR_PRIVATE_KEY_HERE
             new Claim("aud", "payware.eu"),
             new Claim("iat", DateTimeOffset.UtcNow.ToUnixTimeSeconds().ToString(), ClaimValueTypes.Integer),
             new Claim("exp", DateTimeOffset.UtcNow.AddMinutes(5).ToUnixTimeSeconds().ToString(), ClaimValueTypes.Integer),
-            new Claim("contentMd5", contentMd5)
+            new Claim("contentSha256", contentSha256)
         };
 
         // Note: You'll need to implement RSA key loading
@@ -1639,10 +1639,10 @@ function createJWTToken($requestBody = null) {
 YOUR_PRIVATE_KEY_HERE
 -----END RSA PRIVATE KEY-----";
 
-    ${includeComments ? '// Create content MD5' : ''}
-    $contentMd5 = "";
+    ${includeComments ? '// Create content SHA-256' : ''}
+    $contentSha256 = "";
     if ($requestBody !== null) {
-        $contentMd5 = base64_encode(md5($requestBody, true));
+        $contentSha256 = base64_encode(hash('sha256', $requestBody, true));
     }
 
     // JWT payload
@@ -1651,7 +1651,7 @@ YOUR_PRIVATE_KEY_HERE
         'aud' => 'payware.eu',
         'iat' => time(),
         'exp' => time() + 300,
-        'contentMd5' => $contentMd5
+        'contentSha256' => $contentSha256
     ];
 
     // Create JWT token
@@ -1673,10 +1673,10 @@ PRIVATE_KEY_FILE="path/to/private-key.pem"
 # Function to create JWT token (simplified)
 create_jwt_token() {
     local request_body="\$1"
-    local content_md5=""
+    local content_sha256=""
 
     if [ -n "\$request_body" ]; then
-        content_md5=\$(echo -n "\$request_body" | openssl dgst -md5 -binary | base64)
+        content_sha256=\$(echo -n "\$request_body" | openssl dgst -sha256 -binary | base64)
     fi
 
     echo "your-jwt-token" # Placeholder - implement JWT creation with openssl

package/src/utils/code-examples/common/auth-examples.js

@@ -57,13 +57,13 @@ from cryptography.hazmat.primitives import serialization`;
         'typ': 'JWT'
     }
 
-    ${options.includeComments ? '# Add content MD5 for requests with body\n    ' : ''}body_string = None
+    ${options.includeComments ? '# Add content SHA-256 for requests with body\n    ' : ''}body_string = None
     if request_body:
         body_string = create_minimized_json(request_body)
-        content_md5 = base64.b64encode(
-            hashlib.md5(body_string.encode('utf-8')).digest()
+        content_sha256 = base64.b64encode(
+            hashlib.sha256(body_string.encode('utf-8')).digest()
         ).decode('utf-8')
-        header['contentMd5'] = content_md5
+        header['contentSha256'] = content_sha256
 
     ${options.includeComments ? '# Create JWT payload\n    ' : ''}payload = {
         'iss': partner_id,
@@ -75,7 +75,7 @@ from cryptography.hazmat.primitives import serialization`;
     return token, body_string
 
 def create_minimized_json(data):
-    ${options.includeComments ? '"""Create deterministic minimized JSON for MD5 calculation"""\n    ' : ''}def sort_dict(obj):
+    ${options.includeComments ? '"""Create deterministic minimized JSON for SHA-256 calculation"""\n    ' : ''}def sort_dict(obj):
         if isinstance(obj, dict):
             return {k: sort_dict(v) for k, v in sorted(obj.items())}
         elif isinstance(obj, list):
@@ -172,14 +172,14 @@ require('dotenv').config();`;
     typ: 'JWT'
   };
 
-  ${options.includeComments ? '// Add content MD5 for requests with body\n  ' : ''}let bodyString = null;
+  ${options.includeComments ? '// Add content SHA-256 for requests with body\n  ' : ''}let bodyString = null;
   if (requestBody) {
     bodyString = createMinimizedJSON(requestBody);
-    const contentMd5 = crypto
-      .createHash('md5')
+    const contentSha256 = crypto
+      .createHash('sha256')
       .update(bodyString, 'utf8')
       .digest('base64');
-    header.contentMd5 = contentMd5;
+    header.contentSha256 = contentSha256;
   }
 
   ${options.includeComments ? '// Create JWT payload\n  ' : ''}const payload = {
@@ -314,11 +314,11 @@ class PaywareAuth {
             'typ' => 'JWT'
         ];
 
-        ${options.includeComments ? '// Add content MD5 for requests with body\n        ' : ''}$bodyString = null;
+        ${options.includeComments ? '// Add content SHA-256 for requests with body\n        ' : ''}$bodyString = null;
         if ($requestBody) {
             $bodyString = self::createMinimizedJSON($requestBody);
-            $contentMd5 = base64_encode(md5($bodyString, true));
-            $header['contentMd5'] = $contentMd5;
+            $contentSha256 = base64_encode(hash('sha256', $bodyString, true));
+            $header['contentSha256'] = $contentSha256;
         }
 
         ${options.includeComments ? '// Create JWT payload\n        ' : ''}$payload = [
@@ -438,11 +438,11 @@ import java.security.MessageDigest;`;
         header.put("alg", "RS256");
         header.put("typ", "JWT");
 
-        ${options.includeComments ? '// Handle request body and MD5\n        ' : ''}String bodyString = null;
+        ${options.includeComments ? '// Handle request body and SHA-256\n        ' : ''}String bodyString = null;
         if (requestBody != null) {
             bodyString = createMinimizedJSON(requestBody);
-            String contentMd5 = calculateMD5(bodyString);
-            header.put("contentMd5", contentMd5);
+            String contentSha256 = calculateSHA256(bodyString);
+            header.put("contentSha256", contentSha256);
         }
 
         ${options.includeComments ? '// Create JWT payload\n        ' : ''}Map<String, Object> payload = new HashMap<>();
@@ -498,8 +498,8 @@ import java.security.MessageDigest;`;
         return node;
     }
 
-    private String calculateMD5(String input) throws Exception {
-        MessageDigest md = MessageDigest.getInstance("MD5");
+    private String calculateSHA256(String input) throws Exception {
+        MessageDigest md = MessageDigest.getInstance("SHA-256");
         byte[] digest = md.digest(input.getBytes("UTF-8"));
         return Base64.getEncoder().encodeToString(digest);
     }
@@ -655,13 +655,13 @@ using Microsoft.Extensions.Configuration;`;
             ["typ"] = "JWT"
         };
 
-        // Handle request body and MD5
+        // Handle request body and SHA-256
         string bodyString = null;
         if (requestBody != null)
         {
             bodyString = CreateMinimizedJSON(requestBody);
-            var contentMd5 = CalculateMD5(bodyString);
-            header["contentMd5"] = contentMd5;
+            var contentSha256 = CalculateSHA256(bodyString);
+            header["contentSha256"] = contentSha256;
         }
 
         // Create JWT payload
@@ -737,11 +737,11 @@ using Microsoft.Extensions.Configuration;`;
         return token;
     }
 
-    private string CalculateMD5(string input)
+    private string CalculateSHA256(string input)
     {
-        using var md5 = MD5.Create();
+        using var sha256 = SHA256.Create();
         var inputBytes = Encoding.UTF8.GetBytes(input);
-        var hashBytes = md5.ComputeHash(inputBytes);
+        var hashBytes = sha256.ComputeHash(inputBytes);
         return Convert.ToBase64String(hashBytes);
     }
 
@@ -857,7 +857,7 @@ func init() {
 package main
 
 import (
-    "crypto/md5"
+    "crypto/sha256"
     "crypto/rsa"
     "crypto/x509"
     "encoding/base64"
@@ -927,7 +927,7 @@ func (p *PaywareAuthenticator) CreateJWTToken(requestBody interface{}, useSandbo
         "typ": "JWT",
     }
 
-    // Handle request body and MD5
+    // Handle request body and SHA-256
     var bodyString string
     if requestBody != nil {
         bodyString, err = p.createMinimizedJSON(requestBody)
@@ -935,11 +935,11 @@ func (p *PaywareAuthenticator) CreateJWTToken(requestBody interface{}, useSandbo
             return nil, fmt.Errorf("failed to create minimized JSON: %w", err)
         }
 
-        contentMd5, err := p.calculateMD5(bodyString)
+        contentSha256, err := p.calculateSHA256(bodyString)
         if err != nil {
-            return nil, fmt.Errorf("failed to calculate MD5: %w", err)
+            return nil, fmt.Errorf("failed to calculate SHA-256: %w", err)
         }
-        header["contentMd5"] = contentMd5
+        header["contentSha256"] = contentSha256
     }
 
     // Create JWT claims
@@ -1027,8 +1027,8 @@ func (p *PaywareAuthenticator) sortObjectKeys(data interface{}) interface{} {
     }
 }
 
-func (p *PaywareAuthenticator) calculateMD5(input string) (string, error) {
-    hash := md5.Sum([]byte(input))
+func (p *PaywareAuthenticator) calculateSHA256(input string) (string, error) {
+    hash := sha256.Sum256([]byte(input))
     return base64.StdEncoding.EncodeToString(hash[:]), nil
 }
 
@@ -1165,12 +1165,12 @@ require 'dotenv/load'`;
       typ: 'JWT'
     }
 
-    # Handle request body and MD5
+    # Handle request body and SHA-256
     body_string = nil
     if request_body
       body_string = create_minimized_json(request_body)
-      content_md5 = calculate_md5(body_string)
-      header[:contentMd5] = content_md5
+      content_sha256 = calculate_sha256(body_string)
+      header[:contentSha256] = content_sha256
     end
 
     # Create JWT payload
@@ -1219,8 +1219,8 @@ require 'dotenv/load'`;
     end
   end
 
-  def calculate_md5(input)
-    digest = Digest::MD5.digest(input)
+  def calculate_sha256(input)
+    digest = Digest::SHA256.digest(input)
     Base64.encode64(digest).strip
   end
 
@@ -1330,12 +1330,12 @@ create_jwt_token() {
     # Create JWT header
     local header='{"alg":"RS256","typ":"JWT"}'
 
-    # Handle request body and MD5
+    # Handle request body and SHA-256
     local body_string=""
     if [ -n "$request_body" ]; then
         body_string=$(echo "$request_body" | jq -S -c .)
-        local content_md5=$(echo -n "$body_string" | openssl dgst -md5 -binary | base64)
-        header=$(echo "$header" | jq --arg md5 "$content_md5" '. + {contentMd5: $md5}')
+        local content_sha256=$(echo -n "$body_string" | openssl dgst -sha256 -binary | base64)
+        header=$(echo "$header" | jq --arg sha256 "$content_sha256" '. + {contentSha256: $sha256}')
     fi
 
     # Create JWT payload

package/src/utils/code-examples/frameworks/examples.js

@@ -722,12 +722,12 @@ class PaywareService
             'typ' => 'JWT'
         ];
 
-        // Add content MD5 for requests with body
+        // Add content SHA-256 for requests with body
         $bodyString = null;
         if ($requestBody) {
             $bodyString = $this->createMinimizedJSON($requestBody);
-            $contentMd5 = base64_encode(md5($bodyString, true));
-            $header['contentMd5'] = $contentMd5;
+            $contentSha256 = base64_encode(hash('sha256', $bodyString, true));
+            $header['contentSha256'] = $contentSha256;
         }
 
         // Create JWT payload
@@ -747,7 +747,7 @@ class PaywareService
     }
 
     /**
-     * Create minimized JSON for deterministic MD5
+     * Create minimized JSON for deterministic SHA-256
      */
     protected function createMinimizedJSON($data)
     {

package/src/utils/code-examples/isv/products.js

@@ -281,14 +281,14 @@ def create_isv_jwt_token(merchant_partner_id, oauth2_token, request_body=None, u
         'typ': 'JWT'
     }
 
-    # Add content MD5 for requests with body
+    # Add content SHA-256 for requests with body
     body_string = None
     if request_body:
         body_string = create_minimized_json(request_body)
-        content_md5 = base64.b64encode(
-            hashlib.md5(body_string.encode('utf-8')).digest()
+        content_sha256 = base64.b64encode(
+            hashlib.sha256(body_string.encode('utf-8')).digest()
         ).decode('utf-8')
-        header['contentMd5'] = content_md5
+        header['contentSha256'] = content_sha256
 
     # Create JWT payload for ISV
     payload = {
@@ -507,15 +507,15 @@ function createISVJWTToken(merchantPartnerId, oauth2Token, requestBody = null, u
     typ: 'JWT'
   };
 
-  // Add content MD5 for requests with body
+  // Add content SHA-256 for requests with body
   let bodyString = null;
   if (requestBody) {
     bodyString = createMinimizedJSON(requestBody);
-    const contentMd5 = crypto
-      .createHash('md5')
+    const contentSha256 = crypto
+      .createHash('sha256')
       .update(bodyString, 'utf8')
       .digest('base64');
-    header.contentMd5 = contentMd5;
+    header.contentSha256 = contentSha256;
   }
 
   // Create JWT payload for ISV

package/src/utils/code-examples/isv/transactions.js

@@ -201,14 +201,14 @@ def create_isv_jwt_token(merchant_partner_id, oauth2_token, request_body=None, u
         'typ': 'JWT'
     }
 
-    # Add content MD5 for requests with body
+    # Add content SHA-256 for requests with body
     body_string = None
     if request_body:
         body_string = create_minimized_json(request_body)
-        content_md5 = base64.b64encode(
-            hashlib.md5(body_string.encode('utf-8')).digest()
+        content_sha256 = base64.b64encode(
+            hashlib.sha256(body_string.encode('utf-8')).digest()
         ).decode('utf-8')
-        header['contentMd5'] = content_md5
+        header['contentSha256'] = content_sha256
 
     # Create ISV JWT payload with OAuth2 token
     payload = {
@@ -223,7 +223,7 @@ def create_isv_jwt_token(merchant_partner_id, oauth2_token, request_body=None, u
     return token, body_string
 
 def create_minimized_json(data):
-    """Create deterministic minimized JSON for MD5 calculation"""
+    """Create deterministic minimized JSON for SHA-256 calculation"""
     def sort_dict(obj):
         if isinstance(obj, dict):
             return {k: sort_dict(v) for k, v in sorted(obj.items())}
@@ -553,15 +553,15 @@ function createISVJWTToken(merchantPartnerId, oauth2Token, requestBody = null, u
     typ: 'JWT'
   };
 
-  // Add content MD5 for requests with body
+  // Add content SHA-256 for requests with body
   let bodyString = null;
   if (requestBody) {
     bodyString = createMinimizedJSON(requestBody);
-    const contentMd5 = crypto
-      .createHash('md5')
+    const contentSha256 = crypto
+      .createHash('sha256')
       .update(bodyString, 'utf8')
       .digest('base64');
-    header.contentMd5 = contentMd5;
+    header.contentSha256 = contentSha256;
   }
 
   // Create ISV JWT payload with OAuth2 token