Rivindum Mendis enhanced secure authorization workflows across multiple WSO2 repositories by implementing robust cryptographic features and configuration controls. In wso2-extensions/identity-inbound-auth-oauth, he added ES256 and RS384 JWS algorithm support for OAuth2 token signing, updating constants and mappings in Java and validating correctness with unit tests. He also upgraded identity framework dependencies and improved test reliability in wso2/product-is. Later, in wso2/reference-implementation-consumerdatastandards-au, he enabled client-controlled authorization response signing and enforced PS256-only policies through TOML configuration, strengthening Open Banking compliance. His work demonstrates depth in backend development, cryptography, and configuration management, with careful attention to security and maintainability.