Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog.

[1.0.0] - Unreleased

Added

• Initial release.
• OIDC authentication: Pushed Authorisation Requests (MoneyHub.Auth), private_key_jwt client assertions and request-object signing (MoneyHub.Auth.PrivateKeyJWT), id_token verification against Moneyhub's published JWKS (MoneyHub.Auth.IdToken, MoneyHub.Auth.JWKS), authorisation code exchange, client_credentials tokens for ongoing per-user access, and refresh tokens.
• Claims and scopes builders (MoneyHub.Claims, MoneyHub.Scopes) covering sub, mh:con_id, mh:cat_type, mh:payment, mh:recurring_payment, and mh:standing_order.
• Data Aggregation (AIS): MoneyHub.Accounts, MoneyHub.Transactions, MoneyHub.Connections, MoneyHub.Users, MoneyHub.Categories, MoneyHub.Counterparties, MoneyHub.RegularTransactions, MoneyHub.RentalRecords, MoneyHub.SavingsGoals, MoneyHub.SpendingGoals, MoneyHub.SpendingAnalysis, MoneyHub.Affordability (including an await/4 polling helper), MoneyHub.AuthRequests.
• Payments (PIS): MoneyHub.Payees, MoneyHub.Payments, MoneyHub.RecurringPayments (VRP sweeps), MoneyHub.StandingOrders, MoneyHub.PayLinks.
• Webhook verification for both plain-JSON and signed-JWT delivery shapes (MoneyHub.Webhooks, MoneyHub.Webhooks.Event).
• Structured MoneyHub.Error results across the public API, with :config_error, :network_error, :api_error, :rate_limited, :decode_error, :jwt_error, and :validation_error reasons.
• Automatic retry with backoff for 429 (honouring Retry-After) and 5xx responses, plus transient network errors, in MoneyHub.Client.

• telemetry events ([:money_hub, :request, :start | :stop | :exception]) around every data-API call.

• Full API surface pass: MoneyHub.Beneficiaries, MoneyHub.Holdings (ISIN-matched investment holdings), MoneyHub.NotificationThresholds, MoneyHub.Projects, MoneyHub.Statements, MoneyHub.Tax, MoneyHub.StandardFinancialStatements, MoneyHub.GlobalCounterparties, MoneyHub.ConsentHistory, MoneyHub.ScimUsers, MoneyHub.PayFile (bulk/batch payments), MoneyHub.ResellerCheck, MoneyHub.BankIcons, MoneyHub.Discovery (OIDC well-known configuration).
• Expanded existing modules with previously-missing endpoints: Accounts.add_balance/4, Accounts.standing_orders/3, Accounts.syncs/2; Connections.sync/3 and connection-type filtered catalogs (available_api/2, available_legacy/2, available_payments/2, available_test/2); Categories.get/3, Categories.create/3, Categories.list_groups/2; Transactions.create/3, Transactions.create_many/3, Transactions.update/4, Transactions.delete/3, full splits CRUD, Transactions.list_files/3; AuthRequests.list/2, AuthRequests.update/4; RecurringPayments.list/2, RecurringPayments.confirm_funds/4; Users.list_connections/3, Users.get_connection/4, Users.delete_connection/4, Users.list_syncs/3.

Fixed

• RecurringPayments.sweep/4 posted to the wrong path (/recurring-payments/{id}/payments instead of the correct /recurring-payments/{id}/pay).
• Removed an explicit :castore dependency override that forced its mix certdata build task to compile, which fails on Erlang/OTP installations missing the public_key application's include/ headers - notably common on Windows. The HTTP stack now relies on :public_key.cacerts_get/0 (built into OTP 25+) for CA certificates instead, which is more portable.