@payware/mcp-server 1.1.1 → 1.3.0

package/src/utils/code-examples/common/helpers.js

@@ -176,10 +176,13 @@ export const CommonTemplates = {
       delete_transaction_link: '/deeplinks/transactions/{id}',
       delete_product_link: '/deeplinks/products/{id}',
 
-      // OAuth2 endpoints (ISV only)
-      obtain_token: '/oauth2/token',
-      get_token_info: '/oauth2/token/info',
-      create_token_simple: '/oauth2/token/simple',
+      // OAuth2 endpoints (ISV only). Plural /tokens, and served from the host root rather than
+      // under /api. The singular paths that used to be listed here - /oauth2/token,
+      // /oauth2/token/info, /oauth2/token/simple - do not exist on any payware environment.
+      obtain_token: '/oauth2/tokens',
+      get_token_info: '/oauth2/tokens/{token}',
+      rotate_token: '/oauth2/tokens/{token}/rotate',
+      list_active_tokens: '/oauth2/tokens',
 
       // Payment Institution specific
       create_pi_transaction: '/transactions',

package/src/utils/code-examples/frameworks/examples.js

@@ -722,12 +722,12 @@ class PaywareService
             'typ' => 'JWT'
         ];
 
-        // Add content MD5 for requests with body
+        // Add content SHA-256 for requests with body
         $bodyString = null;
         if ($requestBody) {
             $bodyString = $this->createMinimizedJSON($requestBody);
-            $contentMd5 = base64_encode(md5($bodyString, true));
-            $header['contentMd5'] = $contentMd5;
+            $contentSha256 = base64_encode(hash('sha256', $bodyString, true));
+            $header['contentSha256'] = $contentSha256;
         }
 
         // Create JWT payload
@@ -747,7 +747,7 @@ class PaywareService
     }
 
     /**
-     * Create minimized JSON for deterministic MD5
+     * Create minimized JSON for deterministic SHA-256
      */
     protected function createMinimizedJSON($data)
     {