IdentityClient

```
public class IdentityClient

                    
```
Enterprise Single Sign-On Client API (tz-identity-sdk).
Used by all 100+ peripheral Android apps to:
- Query verified accounts from the master Identity Vault.
- Request short-lived, audience-scoped, DPoP-bound access tokens.
- Perform 1-click active account switching across the identity mesh.

Field Summary

Fields
Modifier and Type	Field	Description
`public final static IdentityClient`	`INSTANCE`

Method Summary

Modifier and Type	Method	Description
`final String`	`generateNonce()`	Generates a cryptographically random, ephemeral 32-byte nonce (hex encoded).
`final List<MeshAccount>`	`getAccounts(Context context)`	Queries all accounts currently stored in the Master Identity Vault.
`final DelegatedTokenResult`	`getDelegatedToken(Context context, String audience)`	Requests a short-lived, audience-scoped, DPoP-constrained delegated token for this client app.
`final Boolean`	`switchActiveAccount(Context context, String targetAccountId)`	Requests the master vault to switch the active account.
`final String`	`createDPoPHeader(DelegatedTokenResult result, String httpMethod, String httpUrl)`	Signs an outgoing HTTP request with a DPoP proof header (RFC 9449).

Methods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

- Method Detail
  - generateNonce
```
 final String generateNonce()
```
    Generates a cryptographically random, ephemeral 32-byte nonce (hex encoded).
  - getAccounts
```
 final List<MeshAccount> getAccounts(Context context)
```
    Queries all accounts currently stored in the Master Identity Vault. Ultra-fast (<5ms) ContentResolver query.
  - getDelegatedToken
```
 final DelegatedTokenResult getDelegatedToken(Context context, String audience)
```
    Requests a short-lived, audience-scoped, DPoP-constrained delegated token for this client app.
    
    Parameters:
    
    context - Application context.
    
    audience - Target audience package (defaults to calling app package).
  - switchActiveAccount
```
 final Boolean switchActiveAccount(Context context, String targetAccountId)
```
    Requests the master vault to switch the active account. All listening apps in the mesh will be notified in 0ms via MeshSyncObserver.
  - createDPoPHeader
```
 final String createDPoPHeader(DelegatedTokenResult result, String httpMethod, String httpUrl)
```
    Signs an outgoing HTTP request with a DPoP proof header (RFC 9449).