@sphereon/ssi-sdk.kms-rest-client 0.34.1-feature.SSISDK.70.integrate.digidentity.308 → 0.34.1-feature.SSISDK.70.integrate.digidentity.311

package/dist/index.cjs

@@ -337,7 +337,7 @@ var plugin_schema_default = {
   IKmsRestClient: {
     components: {
       schemas: {
-        KmsCreateRawSignatureArgs: {
+        KmsClientCreateRawSignatureArgs: {
           type: "object",
           additionalProperties: false,
           properties: {
@@ -351,7 +351,10 @@ var plugin_schema_default = {
               type: "string"
             }
           },
-          required: ["input", "keyInfo"]
+          required: [
+            "input",
+            "keyInfo"
+          ]
         },
         KeyInfo: {
           type: "object",
@@ -492,28 +495,56 @@ var plugin_schema_default = {
               description: "X.509 certificate SHA-256 thumbprint (base64url-encoded)."
             }
           },
-          required: ["kty"],
+          required: [
+            "kty"
+          ],
           additionalProperties: false,
           description: "Represents a JSON Web Key (JWK) as defined by the JSON Web Key specification."
         },
         JwkKeyType: {
           type: "string",
-          enum: ["EC", "RSA", "OKP", "oct"],
+          enum: [
+            "EC",
+            "RSA",
+            "OKP",
+            "oct"
+          ],
           description: "JSON Web Key (JWK) key type parameter identifying the cryptographic algorithm family."
         },
         JwkUse: {
           type: "string",
-          enum: ["sig", "enc"],
+          enum: [
+            "sig",
+            "enc"
+          ],
           description: "Intended use of the key (signing or encryption)."
         },
         KeyOperations: {
           type: "string",
-          enum: ["sign", "verify", "encrypt", "decrypt", "wrapKey", "unwrapKey", "deriveKey", "deriveBits"],
+          enum: [
+            "sign",
+            "verify",
+            "encrypt",
+            "decrypt",
+            "wrapKey",
+            "unwrapKey",
+            "deriveKey",
+            "deriveBits"
+          ],
           description: "Specific operations the key is intended for."
         },
         Curve: {
           type: "string",
-          enum: ["P-256", "P-384", "P-521", "secp256k1", "Ed25519", "Ed448", "X25519", "X448"],
+          enum: [
+            "P-256",
+            "P-384",
+            "P-521",
+            "secp256k1",
+            "Ed25519",
+            "Ed448",
+            "X25519",
+            "X448"
+          ],
           description: "Elliptic curve identifier."
         },
         SignatureAlgorithm: {
@@ -536,17 +567,27 @@ var plugin_schema_default = {
         },
         KeyVisibility: {
           type: "string",
-          enum: ["PUBLIC", "PRIVATE"],
+          enum: [
+            "PUBLIC",
+            "PRIVATE"
+          ],
           description: "Indicates the visibility status of a cryptographic key."
         },
         KeyType: {
           type: "string",
-          enum: ["OKP", "EC", "RSA"],
+          enum: [
+            "OKP",
+            "EC",
+            "RSA"
+          ],
           description: "Cryptographic key type identifier."
         },
         KeyEncoding: {
           type: "string",
-          enum: ["COSE", "JOSE"],
+          enum: [
+            "COSE",
+            "JOSE"
+          ],
           description: "The encoding format of the cryptographic key."
         },
         CreateRawSignatureResponse: {
@@ -557,11 +598,13 @@ var plugin_schema_default = {
               description: "The created signature encoded as a base64 string."
             }
           },
-          required: ["signature"],
+          required: [
+            "signature"
+          ],
           additionalProperties: false,
           description: "Response body containing the created signature."
         },
-        KmsDeleteKeyArgs: {
+        KmsClientDeleteKeyArgs: {
           type: "object",
           properties: {
             baseUrl: {
@@ -571,9 +614,12 @@ var plugin_schema_default = {
               type: "string"
             }
           },
+          required: [
+            "aliasOrKid"
+          ],
           additionalProperties: false
         },
-        KmsGenerateKeyArgs: {
+        KmsClientGenerateKeyArgs: {
           type: "object",
           additionalProperties: false,
           properties: {
@@ -602,6 +648,19 @@ var plugin_schema_default = {
             }
           }
         },
+        GenerateKeyResponse: {
+          type: "object",
+          properties: {
+            keyPair: {
+              $ref: "#/components/schemas/ManagedKeyPair"
+            }
+          },
+          required: [
+            "keyPair"
+          ],
+          additionalProperties: false,
+          description: "Response body containing a generated key pair."
+        },
         ManagedKeyPair: {
           type: "object",
           properties: {
@@ -624,7 +683,12 @@ var plugin_schema_default = {
               $ref: "#/components/schemas/JoseKeyPair"
             }
           },
-          required: ["providerId", "alias", "cose", "jose"],
+          required: [
+            "providerId",
+            "alias",
+            "cose",
+            "jose"
+          ],
           additionalProperties: false,
           description: "Represents a key pair used by a crypto provider, encapsulating both JOSE and COSE key pairs."
         },
@@ -638,7 +702,9 @@ var plugin_schema_default = {
               $ref: "#/components/schemas/CoseKey"
             }
           },
-          required: ["publicCoseKey"],
+          required: [
+            "publicCoseKey"
+          ],
           additionalProperties: false,
           description: "Represents a cryptographic key pair for COSE (CBOR Object Signing and Encryption) operations."
         },
@@ -691,13 +757,20 @@ var plugin_schema_default = {
               description: "X.509 certificate chain as base64-encoded certificates."
             }
           },
-          required: ["kty"],
+          required: [
+            "kty"
+          ],
           additionalProperties: false,
           description: "Represents a COSE (CBOR Object Signing and Encryption) key in JSON format."
         },
         CoseKeyType: {
           type: "number",
-          enum: [1, 2, 3, 4],
+          enum: [
+            1,
+            2,
+            3,
+            4
+          ],
           description: "COSE key type parameter. 1=OKP (Octet Key Pair), 2=EC2 (Elliptic Curve), 3=RSA, 4=Symmetric."
         },
         JoseKeyPair: {
@@ -710,11 +783,13 @@ var plugin_schema_default = {
               $ref: "#/components/schemas/Jwk"
             }
           },
-          required: ["publicJwk"],
+          required: [
+            "publicJwk"
+          ],
           additionalProperties: false,
           description: "Data class representing a cryptographic key pair used with JOSE (JSON Object Signing and Encryption)."
         },
-        KmsGetKeyArgs: {
+        KmsClientGetKeyArgs: {
           type: "object",
           properties: {
             baseUrl: {
@@ -724,9 +799,24 @@ var plugin_schema_default = {
               type: "string"
             }
           },
-          required: ["aliasOrKid"],
+          required: [
+            "aliasOrKid"
+          ],
           additionalProperties: false
         },
+        GetKeyResponse: {
+          type: "object",
+          properties: {
+            keyInfo: {
+              $ref: "#/components/schemas/ManagedKeyInfo"
+            }
+          },
+          required: [
+            "keyInfo"
+          ],
+          additionalProperties: false,
+          description: "Response body containing a managed key."
+        },
         ManagedKeyInfo: {
           type: "object",
           properties: {
@@ -772,11 +862,15 @@ var plugin_schema_default = {
               description: "Additional configuration options as key-value pairs."
             }
           },
-          required: ["key", "alias", "providerId"],
+          required: [
+            "key",
+            "alias",
+            "providerId"
+          ],
           additionalProperties: false,
           description: "Represents a managed cryptographic key information that is guaranteed to be present and resolved, part of a KMS providing concrete access to the key."
         },
-        KmsGetKeyProviderArgs: {
+        KmsClientGetKeyProviderArgs: {
           type: "object",
           properties: {
             baseUrl: {
@@ -786,6 +880,9 @@ var plugin_schema_default = {
               type: "string"
             }
           },
+          required: [
+            "providerId"
+          ],
           additionalProperties: false
         },
         KeyProviderResponse: {
@@ -799,16 +896,23 @@ var plugin_schema_default = {
               $ref: "#/components/schemas/KeyProviderType"
             }
           },
-          required: ["providerId", "type"],
+          required: [
+            "providerId",
+            "type"
+          ],
           additionalProperties: false,
           description: "Response body containing the details of a Key Provider instance."
         },
         KeyProviderType: {
           type: "string",
-          enum: ["SOFTWARE", "AZURE_KEYVAULT", "AWS_KMS"],
+          enum: [
+            "SOFTWARE",
+            "AZURE_KEYVAULT",
+            "AWS_KMS"
+          ],
           description: "The type of Key Provider. Determines the required configuration settings. - AZURE_KEYVAULT: Microsoft Azure Key Vault or Managed HSM. - AWS_KMS: Amazon Web Services Key Management Service."
         },
-        kmsGetResolverArgs: {
+        kmsClientGetResolverArgs: {
           type: "object",
           properties: {
             baseUrl: {
@@ -818,7 +922,9 @@ var plugin_schema_default = {
               type: "string"
             }
           },
-          required: ["resolverId"],
+          required: [
+            "resolverId"
+          ],
           additionalProperties: false
         },
         Resolver: {
@@ -843,16 +949,24 @@ var plugin_schema_default = {
               description: "List of key types supported by this resolver."
             }
           },
-          required: ["resolverId"],
+          required: [
+            "resolverId"
+          ],
           additionalProperties: false,
           description: "Represents a key resolver configuration."
         },
         IdentifierMethod: {
           type: "string",
-          enum: ["JWK", "KID", "COSE_KEY", "X5C", "DID"],
+          enum: [
+            "JWK",
+            "KID",
+            "COSE_KEY",
+            "X5C",
+            "DID"
+          ],
           description: "Method used to identify cryptographic keys."
         },
-        KmsIsValidRawSignatureArgs: {
+        KmsClientIsValidRawSignatureArgs: {
           type: "object",
           additionalProperties: false,
           properties: {
@@ -869,7 +983,11 @@ var plugin_schema_default = {
               type: "string"
             }
           },
-          required: ["input", "keyInfo", "signature"]
+          required: [
+            "input",
+            "keyInfo",
+            "signature"
+          ]
         },
         VerifyRawSignatureResponse: {
           type: "object",
@@ -879,11 +997,13 @@ var plugin_schema_default = {
               description: "Indicates whether the signature is valid or not."
             }
           },
-          required: ["isValid"],
+          required: [
+            "isValid"
+          ],
           additionalProperties: false,
           description: "Response body containing the details of the signature verification."
         },
-        KmsListKeyProvidersArgs: {
+        KmsClientListKeyProvidersArgs: {
           type: "object",
           properties: {
             baseUrl: {
@@ -902,7 +1022,9 @@ var plugin_schema_default = {
               }
             }
           },
-          required: ["providers"],
+          required: [
+            "providers"
+          ],
           additionalProperties: false,
           description: "Response body containing the details of a Key Provider instance."
         },
@@ -917,11 +1039,14 @@ var plugin_schema_default = {
               $ref: "#/components/schemas/KeyProviderType"
             }
           },
-          required: ["providerId", "type"],
+          required: [
+            "providerId",
+            "type"
+          ],
           additionalProperties: false,
           description: "Response body containing the details of a Key Provider instance."
         },
-        KmsListKeysArgs: {
+        KmsClientListKeysArgs: {
           type: "object",
           properties: {
             baseUrl: {
@@ -943,11 +1068,13 @@ var plugin_schema_default = {
               }
             }
           },
-          required: ["keyInfos"],
+          required: [
+            "keyInfos"
+          ],
           additionalProperties: false,
           description: "Response body containing all the managed keys."
         },
-        KmsListResolversArgs: {
+        KmsClientListResolversArgs: {
           type: "object",
           properties: {
             baseUrl: {
@@ -966,11 +1093,13 @@ var plugin_schema_default = {
               }
             }
           },
-          required: ["resolvers"],
+          required: [
+            "resolvers"
+          ],
           additionalProperties: false,
           description: "Response body containing all the resolvers."
         },
-        KmsProviderDeleteKeyArgs: {
+        KmsClientProviderDeleteKeyArgs: {
           type: "object",
           properties: {
             baseUrl: {
@@ -983,10 +1112,13 @@ var plugin_schema_default = {
               type: "string"
             }
           },
-          required: ["providerId", "aliasOrKid"],
+          required: [
+            "providerId",
+            "aliasOrKid"
+          ],
           additionalProperties: false
         },
-        KmsProviderGenerateKey: {
+        KmsClientProviderGenerateKeyArgs: {
           type: "object",
           additionalProperties: false,
           properties: {
@@ -1013,9 +1145,11 @@ var plugin_schema_default = {
               type: "string"
             }
           },
-          required: ["providerId"]
+          required: [
+            "providerId"
+          ]
         },
-        KmsProviderGetKeyArgs: {
+        KmsClientProviderGetKeyArgs: {
           type: "object",
           properties: {
             baseUrl: {
@@ -1028,10 +1162,13 @@ var plugin_schema_default = {
               type: "string"
             }
           },
-          required: ["providerId", "aliasOrKid"],
+          required: [
+            "providerId",
+            "aliasOrKid"
+          ],
           additionalProperties: false
         },
-        KmsProviderListKeysArgs: {
+        KmsClientProviderListKeysArgs: {
           type: "object",
           properties: {
             baseUrl: {
@@ -1041,10 +1178,12 @@ var plugin_schema_default = {
               type: "string"
             }
           },
-          required: ["providerId"],
+          required: [
+            "providerId"
+          ],
           additionalProperties: false
         },
-        KmsProviderStoreKey: {
+        KmsClientProviderStoreKeyArgs: {
           type: "object",
           additionalProperties: false,
           properties: {
@@ -1065,7 +1204,10 @@ var plugin_schema_default = {
               type: "string"
             }
           },
-          required: ["keyInfo", "providerId"]
+          required: [
+            "keyInfo",
+            "providerId"
+          ]
         },
         ResolvedKeyInfo: {
           type: "object",
@@ -1112,11 +1254,26 @@ var plugin_schema_default = {
               description: "Additional configuration options as key-value pairs."
             }
           },
-          required: ["key"],
+          required: [
+            "key"
+          ],
           additionalProperties: false,
           description: "Represents a resolved cryptographic key information where the key is guaranteed to be present and resolved, providing concrete access to the key."
         },
-        KmsResolveKeyArgs: {
+        StoreKeyResponse: {
+          type: "object",
+          properties: {
+            keyInfo: {
+              $ref: "#/components/schemas/ManagedKeyInfo"
+            }
+          },
+          required: [
+            "keyInfo"
+          ],
+          additionalProperties: false,
+          description: "Response body containing a stored key."
+        },
+        KmsClientResolveKeyArgs: {
           type: "object",
           additionalProperties: false,
           properties: {
@@ -1144,7 +1301,10 @@ var plugin_schema_default = {
               $ref: "#/components/schemas/String"
             }
           },
-          required: ["keyInfo", "resolverId"]
+          required: [
+            "keyInfo",
+            "resolverId"
+          ]
         },
         String: {
           type: "object",
@@ -1153,12 +1313,14 @@ var plugin_schema_default = {
               type: "number"
             }
           },
-          required: ["length"],
+          required: [
+            "length"
+          ],
           additionalProperties: {
             type: "string"
           }
         },
-        KmsStoreKeyArgs: {
+        KmsClientStoreKeyArgs: {
           type: "object",
           additionalProperties: false,
           properties: {
@@ -1176,161 +1338,163 @@ var plugin_schema_default = {
               type: "string"
             }
           },
-          required: ["keyInfo"]
+          required: [
+            "keyInfo"
+          ]
         }
       },
       methods: {
-        kmsCreateRawSignature: {
+        kmsClientCreateRawSignature: {
           description: "",
           arguments: {
-            $ref: "#/components/schemas/KmsCreateRawSignatureArgs"
+            $ref: "#/components/schemas/KmsClientCreateRawSignatureArgs"
           },
           returnType: {
             $ref: "#/components/schemas/CreateRawSignatureResponse"
           }
         },
-        kmsDeleteKey: {
+        kmsClientDeleteKey: {
           description: "",
           arguments: {
-            $ref: "#/components/schemas/KmsDeleteKeyArgs"
+            $ref: "#/components/schemas/KmsClientDeleteKeyArgs"
           },
           returnType: {
             type: "boolean"
           }
         },
-        kmsGenerateKey: {
+        kmsClientGenerateKey: {
           description: "",
           arguments: {
-            $ref: "#/components/schemas/KmsGenerateKeyArgs"
+            $ref: "#/components/schemas/KmsClientGenerateKeyArgs"
           },
           returnType: {
-            $ref: "#/components/schemas/ManagedKeyPair"
+            $ref: "#/components/schemas/GenerateKeyResponse"
           }
         },
-        kmsGetKey: {
+        kmsClientGetKey: {
           description: "",
           arguments: {
-            $ref: "#/components/schemas/KmsGetKeyArgs"
+            $ref: "#/components/schemas/KmsClientGetKeyArgs"
           },
           returnType: {
-            $ref: "#/components/schemas/ManagedKeyInfo"
+            $ref: "#/components/schemas/GetKeyResponse"
           }
         },
-        kmsGetKeyProvider: {
+        kmsClientGetKeyProvider: {
           description: "",
           arguments: {
-            $ref: "#/components/schemas/KmsGetKeyProviderArgs"
+            $ref: "#/components/schemas/KmsClientGetKeyProviderArgs"
           },
           returnType: {
             $ref: "#/components/schemas/KeyProviderResponse"
           }
         },
-        kmsGetResolver: {
+        kmsClientGetResolver: {
           description: "",
           arguments: {
-            $ref: "#/components/schemas/kmsGetResolverArgs"
+            $ref: "#/components/schemas/kmsClientGetResolverArgs"
           },
           returnType: {
             $ref: "#/components/schemas/Resolver"
           }
         },
-        kmsIsValidRawSignature: {
+        kmsClientIsValidRawSignature: {
           description: "",
           arguments: {
-            $ref: "#/components/schemas/KmsIsValidRawSignatureArgs"
+            $ref: "#/components/schemas/KmsClientIsValidRawSignatureArgs"
           },
           returnType: {
             $ref: "#/components/schemas/VerifyRawSignatureResponse"
           }
         },
-        kmsListKeyProviders: {
+        kmsClientListKeyProviders: {
           description: "",
           arguments: {
-            $ref: "#/components/schemas/KmsListKeyProvidersArgs"
+            $ref: "#/components/schemas/KmsClientListKeyProvidersArgs"
           },
           returnType: {
             $ref: "#/components/schemas/ListKeyProvidersResponse"
           }
         },
-        kmsListKeys: {
+        kmsClientListKeys: {
           description: "",
           arguments: {
-            $ref: "#/components/schemas/KmsListKeysArgs"
+            $ref: "#/components/schemas/KmsClientListKeysArgs"
           },
           returnType: {
             $ref: "#/components/schemas/ListKeysResponse"
           }
         },
-        kmsListResolvers: {
+        kmsClientListResolvers: {
           description: "",
           arguments: {
-            $ref: "#/components/schemas/KmsListResolversArgs"
+            $ref: "#/components/schemas/KmsClientListResolversArgs"
           },
           returnType: {
             $ref: "#/components/schemas/ListResolversResponse"
           }
         },
-        kmsProviderDeleteKey: {
+        kmsClientProviderDeleteKey: {
           description: "",
           arguments: {
-            $ref: "#/components/schemas/KmsProviderDeleteKeyArgs"
+            $ref: "#/components/schemas/KmsClientProviderDeleteKeyArgs"
           },
           returnType: {
             type: "boolean"
           }
         },
-        kmsProviderGenerateKey: {
+        kmsClientProviderGenerateKey: {
           description: "",
           arguments: {
-            $ref: "#/components/schemas/KmsProviderGenerateKey"
+            $ref: "#/components/schemas/KmsClientProviderGenerateKeyArgs"
           },
           returnType: {
-            $ref: "#/components/schemas/ManagedKeyPair"
+            $ref: "#/components/schemas/GenerateKeyResponse"
           }
         },
-        kmsProviderGetKey: {
+        kmsClientProviderGetKey: {
           description: "",
           arguments: {
-            $ref: "#/components/schemas/KmsProviderGetKeyArgs"
+            $ref: "#/components/schemas/KmsClientProviderGetKeyArgs"
           },
           returnType: {
-            $ref: "#/components/schemas/ManagedKeyInfo"
+            $ref: "#/components/schemas/GetKeyResponse"
           }
         },
-        kmsProviderListKeys: {
+        kmsClientProviderListKeys: {
           description: "",
           arguments: {
-            $ref: "#/components/schemas/KmsProviderListKeysArgs"
+            $ref: "#/components/schemas/KmsClientProviderListKeysArgs"
           },
           returnType: {
             $ref: "#/components/schemas/ListKeysResponse"
           }
         },
-        kmsProviderStoreKey: {
+        kmsClientProviderStoreKey: {
           description: "",
           arguments: {
-            $ref: "#/components/schemas/KmsProviderStoreKey"
+            $ref: "#/components/schemas/KmsClientProviderStoreKeyArgs"
           },
           returnType: {
-            $ref: "#/components/schemas/ManagedKeyInfo"
+            $ref: "#/components/schemas/StoreKeyResponse"
           }
         },
-        kmsResolveKey: {
+        kmsClientResolveKey: {
           description: "",
           arguments: {
-            $ref: "#/components/schemas/KmsResolveKeyArgs"
+            $ref: "#/components/schemas/KmsClientResolveKeyArgs"
           },
           returnType: {
             $ref: "#/components/schemas/ResolvedKeyInfo"
           }
         },
-        kmsStoreKey: {
+        kmsClientStoreKey: {
           description: "",
           arguments: {
-            $ref: "#/components/schemas/KmsStoreKeyArgs"
+            $ref: "#/components/schemas/KmsClientStoreKeyArgs"
           },
           returnType: {
-            $ref: "#/components/schemas/ManagedKeyInfo"
+            $ref: "#/components/schemas/StoreKeyResponse"
           }
         }
       }
@@ -3603,7 +3767,11 @@ var KmsRestClient = class _KmsRestClient {
     const baseUrl = this.assertedAgentBaseUrl(args.baseUrl);
     const url = _KmsRestClient.urlWithBase(`/resolvers/${args.resolverId}`, baseUrl);
     const response = await (0, import_cross_fetch.fetch)(url, {
-      method: "GET"
+      method: "GET",
+      headers: await this.createHeaders({
+        tenantId: args.tenantId,
+        userId: args.userId
+      })
     });
     logger.debug(`get resolver response: ${response}`);
     if (!response.ok) {
@@ -3616,7 +3784,11 @@ var KmsRestClient = class _KmsRestClient {
     const baseUrl = this.assertedAgentBaseUrl(args?.baseUrl);
     const url = _KmsRestClient.urlWithBase("/resolvers", baseUrl);
     const response = await (0, import_cross_fetch.fetch)(url, {
-      method: "GET"
+      method: "GET",
+      headers: await this.createHeaders({
+        tenantId: args?.tenantId,
+        userId: args?.userId
+      })
     });
     logger.debug(`list resolvers response: ${response}`);
     if (!response.ok) {
@@ -3637,7 +3809,9 @@ var KmsRestClient = class _KmsRestClient {
     const response = await (0, import_cross_fetch.fetch)(url, {
       method: "POST",
       headers: await this.createHeaders({
-        "Content-Type": "application/json"
+        contentType: "application/json",
+        tenantId: args.tenantId,
+        userId: args.userId
       }),
       body: JSON.stringify(ResolvePublicKeyToJSONTyped(body))
     });
@@ -3658,7 +3832,9 @@ var KmsRestClient = class _KmsRestClient {
     const response = await (0, import_cross_fetch.fetch)(url, {
       method: "POST",
       headers: await this.createHeaders({
-        "Content-Type": "application/json"
+        contentType: "application/json",
+        tenantId: args.tenantId,
+        userId: args.userId
       }),
       body: JSON.stringify(CreateRawSignatureToJSONTyped(body))
     });
@@ -3680,7 +3856,9 @@ var KmsRestClient = class _KmsRestClient {
     const response = await (0, import_cross_fetch.fetch)(url, {
       method: "POST",
       headers: await this.createHeaders({
-        "Content-Type": "application/json"
+        contentType: "application/json",
+        tenantId: args.tenantId,
+        userId: args.userId
       }),
       body: JSON.stringify(VerifyRawSignatureToJSONTyped(body))
     });
@@ -3695,7 +3873,11 @@ var KmsRestClient = class _KmsRestClient {
     const baseUrl = this.assertedAgentBaseUrl(args.baseUrl);
     const url = _KmsRestClient.urlWithBase(`/keys/${args.aliasOrKid}`, baseUrl);
     const response = await (0, import_cross_fetch.fetch)(url, {
-      method: "GET"
+      method: "GET",
+      headers: await this.createHeaders({
+        tenantId: args.tenantId,
+        userId: args.userId
+      })
     });
     logger.debug(`get key response: ${response}`);
     if (!response.ok) {
@@ -3712,7 +3894,11 @@ var KmsRestClient = class _KmsRestClient {
       }
     });
     const response = await (0, import_cross_fetch.fetch)(url, {
-      method: "GET"
+      method: "GET",
+      headers: await this.createHeaders({
+        tenantId: args?.tenantId,
+        userId: args?.userId
+      })
     });
     logger.debug(`list keys response: ${response}`);
     if (!response.ok) {
@@ -3731,7 +3917,9 @@ var KmsRestClient = class _KmsRestClient {
     const response = await (0, import_cross_fetch.fetch)(url, {
       method: "POST",
       headers: await this.createHeaders({
-        "Content-Type": "application/json"
+        contentType: "application/json",
+        tenantId: args.tenantId,
+        userId: args.userId
       }),
       body: JSON.stringify(StoreKeyToJSONTyped(body))
     });
@@ -3754,7 +3942,9 @@ var KmsRestClient = class _KmsRestClient {
     const response = await (0, import_cross_fetch.fetch)(url, {
       method: "POST",
       headers: await this.createHeaders({
-        "Content-Type": "application/json"
+        contentType: "application/json",
+        tenantId: args.tenantId,
+        userId: args.userId
       }),
       body: JSON.stringify(GenerateKeyGlobalToJSONTyped(body))
     });
@@ -3769,7 +3959,11 @@ var KmsRestClient = class _KmsRestClient {
     const baseUrl = this.assertedAgentBaseUrl(args.baseUrl);
     const url = _KmsRestClient.urlWithBase(`/keys/${args.aliasOrKid}`, baseUrl);
     const response = await (0, import_cross_fetch.fetch)(url, {
-      method: "DELETE"
+      method: "DELETE",
+      headers: await this.createHeaders({
+        tenantId: args.tenantId,
+        userId: args.userId
+      })
     });
     logger.debug(`delete key response: ${response}`);
     if (!response.ok) {
@@ -3782,7 +3976,11 @@ var KmsRestClient = class _KmsRestClient {
     const baseUrl = this.assertedAgentBaseUrl(args.baseUrl);
     const url = _KmsRestClient.urlWithBase(`/providers/${args.providerId}`, baseUrl);
     const response = await (0, import_cross_fetch.fetch)(url, {
-      method: "GET"
+      method: "GET",
+      headers: await this.createHeaders({
+        tenantId: args.tenantId,
+        userId: args.userId
+      })
     });
     logger.debug(`get provider response: ${response}`);
     if (!response.ok) {
@@ -3795,7 +3993,11 @@ var KmsRestClient = class _KmsRestClient {
     const baseUrl = this.assertedAgentBaseUrl(args?.baseUrl);
     const url = _KmsRestClient.urlWithBase("/providers", baseUrl);
     const response = await (0, import_cross_fetch.fetch)(url, {
-      method: "GET"
+      method: "GET",
+      headers: await this.createHeaders({
+        tenantId: args?.tenantId,
+        userId: args?.userId
+      })
     });
     logger.debug(`list providers response: ${response}`);
     if (!response.ok) {
@@ -3808,7 +4010,11 @@ var KmsRestClient = class _KmsRestClient {
     const baseUrl = this.assertedAgentBaseUrl(args.baseUrl);
     const url = _KmsRestClient.urlWithBase(`/providers/${args.providerId}/keys`, baseUrl);
     const response = await (0, import_cross_fetch.fetch)(url, {
-      method: "GET"
+      method: "GET",
+      headers: await this.createHeaders({
+        tenantId: args.tenantId,
+        userId: args.userId
+      })
     });
     logger.debug(`list provider keys response: ${response}`);
     if (!response.ok) {
@@ -3827,7 +4033,9 @@ var KmsRestClient = class _KmsRestClient {
     const response = await (0, import_cross_fetch.fetch)(url, {
       method: "POST",
       headers: await this.createHeaders({
-        "Content-Type": "application/json"
+        contentType: "application/json",
+        tenantId: args.tenantId,
+        userId: args.userId
       }),
       body: JSON.stringify(StoreKeyToJSONTyped(body))
     });
@@ -3850,7 +4058,9 @@ var KmsRestClient = class _KmsRestClient {
     const response = await (0, import_cross_fetch.fetch)(url, {
       method: "POST",
       headers: await this.createHeaders({
-        "Content-Type": "application/json"
+        contentType: "application/json",
+        tenantId: args.tenantId,
+        userId: args.userId
       }),
       body: JSON.stringify(GenerateKeyToJSONTyped(body))
     });
@@ -3865,7 +4075,11 @@ var KmsRestClient = class _KmsRestClient {
     const baseUrl = this.assertedAgentBaseUrl(args.baseUrl);
     const url = _KmsRestClient.urlWithBase(`/providers/${args.providerId}/keys/${args.aliasOrKid}`, baseUrl);
     const response = await (0, import_cross_fetch.fetch)(url, {
-      method: "GET"
+      method: "GET",
+      headers: await this.createHeaders({
+        tenantId: args.tenantId,
+        userId: args.userId
+      })
     });
     logger.debug(`get provider key response: ${response}`);
     if (!response.ok) {
@@ -3878,7 +4092,11 @@ var KmsRestClient = class _KmsRestClient {
     const baseUrl = this.assertedAgentBaseUrl(args.baseUrl);
     const url = _KmsRestClient.urlWithBase(`providers/${args.providerId}/keys/${args.aliasOrKid}`, baseUrl);
     const response = await (0, import_cross_fetch.fetch)(url, {
-      method: "DELETE"
+      method: "DELETE",
+      headers: await this.createHeaders({
+        tenantId: args.tenantId,
+        userId: args.userId
+      })
     });
     logger.debug(`delete key response: ${response}`);
     if (!response.ok) {
@@ -3894,9 +4112,17 @@ var KmsRestClient = class _KmsRestClient {
     }
     throw new Error("No base url has been provided");
   }
-  async createHeaders(existing) {
+  async createHeaders(args) {
     const headers = {
-      ...existing,
+      ...args?.contentType ? {
+        "Content-Type": args.contentType
+      } : {},
+      ...args?.tenantId ? {
+        "X-Tenant-ID": args.tenantId
+      } : {},
+      ...args?.userId ? {
+        "X-User-ID": args.userId
+      } : {},
       Accept: "application/json"
     };
     if (this.authOpts?.enabled === true) {