The Sparkassen have discovered, that waiting to transmit the chipTAN-data via flickercode takes bloody ages at times and came up with something new and revolutionary: a QR-code!

As far as I can tell, the same data that goes into the flickercode is just put inside a QR-code for scanning convenience. Seems like there is going a little bit of encoding going into the QR-code: https://gist.gi

Replace dynamic context evaluation like done in
provide-psu-password: ${protocol.embedded-ui-base-url}/ais/#{context.getAuthorizationSessionIdIfOpened()}/authenticate?wrong=#{context.getWrongAuthCredentials()}
to URI builder (UriComponentsBuilder.fromHttpUrl), so that value becomes like:
provide-psu-password: ${protocol.embedded-ui-base-url}/ais/{sessionId}/authenticate
and query params are