Exchange One Time Token for Consent response breaks deserialisation

[matteo-mohara]

The format of the response is a flat object given as:
{ "id", ... etc}
Whereas the deserialiser expects this information to be nested within a data object as:
{ "data": {"id, ...etc" } }