Zdeněk Černý

Validate upload of credentials - after decoding from base64 - for APNS privateKeyBase64 has to be valid p8 file in PEM format - for FCM privateKeyBase64 has to be valid...

Currently if `userId` or combination of `userId` and `activationId` doesn't have any activation to send push notification to, we do not send the push, but push server doesn't provide any...

Callback OAUTH2.x authorization

2

Add capability to protect callbacks via OAUTH2.x. Support grant_type`client_credentials`. Encrypt the authentication column with the general encryption key. Derive the specific key (e.g. from application id). Update the API to...

Update the list of possible attributes and specify which attributes are relevant for operation and application callbacks.

Tracing contet is not propagated to async senders

1

The tracing context is not propagated to sendMessageToIos (and other methods for different platform) this brings issues when pairing the sending of the push with the result from the ANPS/FCM...

Change the get operation detail endpoint to ReadOnly mode to avoid changes in the DB. Possible impact to claim of the operation. Backport to 1.9.x Test: Getting details should not...

The expiration job should use locking

2

TBD: Use optimistic locking in the expiration job, i.e., update only records with PENDING status on the DB level. Test: Initiate operation approval (can be simulated with update of the...

### Description In class `ActivationServiceBehavior` method `InitActivation`, there is a uniqueness control based on like select from pa_activation. The control relies on select statement with like operation. This is not...

### Task specification Prepare a guideline to implement the FIDO2 frontend integrated with our PowrAuth Server. Describe scenarios: - Configuration of PAS - Device activation - Operation approvals

### Task specification Add RSA in mode RSA/ECB/OAEPwithSHA-256andMGF1Padding to the list of the used algorithms. These algorithms are used in the mobile SDK to protect biometric keys on Android.