Packages

tokenio_client

1.0.0
1.0.0

Production-grade Elixir client for the Token.io Open Banking platform (Payments v2, VRP, AIS, Banks, Refunds, Payouts, Settlement, Transfers, Tokens, Token Requests, Account on File, Sub-TPPs, Auth Keys, Reports, Webhooks, Verification).

HexDocs

Current section

Files

Jump to
Readme
1 Version
3 Dependencies
Dependants
Files
Activity
tokenio_client CHANGELOG.md
Raw

CHANGELOG.md 

# Changelog



All notable changes to this project are documented here.



The format follows [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)

and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).



## [1.0.0] - 2026-01-15



### Added



- **16 API modules** covering the complete Token.io Open Banking platform:

  - `TokenioClient.Payments` — Payments v2 (single/future-dated, redirect/embedded/decoupled auth)

  - `TokenioClient.VRP` — Variable Recurring Payments (consents, payments, fund confirmation)

  - `TokenioClient.AIS` — Account Information Services (accounts, balances, transactions, standing orders)

  - `TokenioClient.Banks` — Bank discovery v1 and v2

  - `TokenioClient.Refunds` — Payment refund initiation and tracking

  - `TokenioClient.Payouts` — Settlement account payouts

  - `TokenioClient.Settlement` — Virtual accounts, rules, transactions

  - `TokenioClient.Transfers` — Payments v1 token redemption

  - `TokenioClient.Tokens` — Token management

  - `TokenioClient.TokenRequests` — Token Request flow (legacy Payments v1 / AIS)

  - `TokenioClient.AccountOnFile` — Tokenized account storage

  - `TokenioClient.SubTPPs` — Sub-TPP management

  - `TokenioClient.AuthKeys` — RSA/EC signing key management

  - `TokenioClient.Reports` — Bank operational status

  - `TokenioClient.Webhooks` — Webhook config + HMAC-SHA256 event parsing

  - `TokenioClient.Verification` — Account ownership verification



- **HTTP layer** (`TokenioClient.HTTP.Client`):

  - Finch-backed with connection pooling and HTTP/2

  - OAuth2 client credentials with ETS token caching

  - Static bearer token support

  - Exponential backoff retry with crypto-random jitter

  - Structured telemetry events on every request

  - Structured `Logger` output



- **Typed errors** (`TokenioClient.Error`):

  - Machine-readable `:code` atoms

  - `retryable?/1`, `not_found?/1`, `unauthorized?/1`, `rate_limited?/1`

  - `retry_after` field populated from `Retry-After` header



- **Rich struct types** with status predicate helpers:

  - `TokenioClient.Payments.Payment` — `final?/1`, `requires_redirect?/1`, `requires_embedded_auth?/1`, `completed?/1`, `failed?/1`

  - `TokenioClient.VRP.Consent` — `final?/1`, `authorized?/1`, `requires_redirect?/1`

  - `TokenioClient.VRP.Payment` — `final?/1`, `completed?/1`



- **Webhook verification** with constant-time HMAC comparison and replay protection (5-min window)



- **Telemetry integration**: `[:tokenio_client, :request, :start/stop/exception]`



- **Zero config** OTP application with automatic Finch supervision



- Complete **ExUnit test suite** with Bypass HTTP mocks