Internal Architecture

While the application is packaged as a simple Docker image, there are multiple components bundled inside of it. The following diagram provides a basic overview of those components.

Published Components

• Enrollment Server - Application published to the public internet via the /enrollment-server context that is accessed by the mobile clients.
• PowerAuth mToken - Proxy application available from the internal network published via /powerauth-cloud context, should not be published to the public internet. Access is protected with basic HTTP authentication.

Internal Components

• PowerAuth Server - Docker-internal application responsible for device registration, registration lifecycle, signature verifications and operation approval.
• PowerAuth Push Server - Docker-internal application responsible for sending push messages via APNS, FCM, and HMS.