My company is moving to use the Unified Checkout. To start, we are getting the session token from the sessionapi (/uc/v1/sessions). Then I saw that there was a message about mandated usage of MLE in API calls. So I started to incorporate that into my project but kept getting UNAUTHORIZED_USER responses. I then saw that there is a list of the API's that require MLE and those that don't. I have a few questions about that list (found here: https://developer.cybersource.com/products/authentication.html and was last updated on 8/11):
1) The endpoint (and SessionAPI in general) is not listed in that list. Even if itis not required, shouldn't it be listed? Also, (when I was requesting a token without MLE) I was successful in decrypting the response with MLE. So even more, shouldn't it be listed?
2) Is sessionapi (/uc/v1/sessions) going to require MLE come the 2027 deadline?
3) The list states that come the deadline, all the API's will require it. Does that include the GET requests also?
4) Could the list be updated to include all the API's?
This suggestion may sound silly but would it be possible to put out another list with all the API's on it with the same kind of markings on it but what the API's are going to look like after the deadline? I think that would be helpful, especially if some of them (like I'm thinking the GET's) don't use it.
