donghyeon.kang/document-haness
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

feat: 가상화 문서들 추가

Browse Source
This commit is contained in:
DongHyeonka
2026-09-10 08:54:05 +09:00
parent e9f6a93327
commit 43e1aadef0
695 changed files with 153404 additions and 12754 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/keycloak/final/assets/ap3-bff-architecture/ap3-bff-architecture.alt.md
+9 -9
View File
@@ -10,15 +10,15 @@ Browser session zone과 server-side BFF zone 사이에서 AP3_SESSION이 downstr
## Elements and evidence
- **Boundary: Browser session boundary** (system): OAuth token 대신 HttpOnly AP3_SESSION을 보유하는 browser 경계. Evidence: L166–L168.
- **Boundary: Server-side application path** (system): BFF, server-side authorized client와 내부 Resource Server가 연결되는 backend 경계. Evidence: L166–L170.
- **Browser** (actor): OAuth token을 받지 않고 AP3_SESSION으로 BFF endpoint를 호출한다. Evidence: L166–L168.
- **Spring BFF** (service): 브라우저 session을 현재 authorized client와 downstream Bearer 요청으로 변환하는 confidential client. Evidence: L166–L170.
- **Authorized-client store** (database): BFF가 access와 refresh token을 보관하고 현재 authorized client를 조회하는 server-side state. Evidence: L166–L170.
- **Internal Resource Server** (service): BFF가 만든 Bearer 요청을 받는 내부 보호 자원. Evidence: L168–L168.
- **Boundary: Browser session boundary** (system): OAuth token 대신 HttpOnly AP3_SESSION을 보유하는 browser 경계. Evidence: L192–L194.
- **Boundary: Server-side application path** (system): BFF, server-side authorized client와 내부 Resource Server가 연결되는 backend 경계. Evidence: L192–L196.
- **Browser** (actor): OAuth token을 받지 않고 AP3_SESSION으로 BFF endpoint를 호출한다. Evidence: L192–L194.
- **Spring BFF** (service): 브라우저 session을 현재 authorized client와 downstream Bearer 요청으로 변환하는 confidential client. Evidence: L192–L196.
- **Authorized-client store** (database): BFF가 access와 refresh token을 보관하고 현재 authorized client를 조회하는 server-side state. Evidence: L192–L196.
- **Internal Resource Server** (service): BFF가 만든 Bearer 요청을 받는 내부 보호 자원. Evidence: L194–L194.
## Relationships
- **Spring BFF → Internal Resource Server:** downstream Bearer 요청. Evidence: L168–L168.
- **Spring BFF → Authorized-client store:** 현재 authorized client 조회. Evidence: L168–L168.
- **Browser → Spring BFF:** AP3_SESSION · /bff/api/me. Evidence: L168–L168.
- **Spring BFF → Internal Resource Server:** Bearer 요청. Evidence: L194–L194.
- **Spring BFF → Authorized-client store:** client 조회. Evidence: L194–L194.
- **Browser → Spring BFF:** AP3_SESSION. Evidence: L194–L194.
docs/keycloak/final/assets/ap3-bff-architecture/ap3-bff-architecture.d2
+3 -3
View File
@@ -17,6 +17,6 @@ g1: "Server-side application path" {
shape: rectangle
}
}
g0.n0 -> g1.n1: "AP3_SESSION · /bff/api/me"
g1.n1 -> g1.n2: "현재 authorized client 조회"
g1.n1 -> g1.n3: "downstream Bearer 요청"
g0.n0 -> g1.n1: "AP3_SESSION"
g1.n1 -> g1.n2: "client 조회"
g1.n1 -> g1.n3: "Bearer 요청"
docs/keycloak/final/assets/ap3-bff-architecture/ap3-bff-architecture.dot
+3 -3
View File
@@ -16,7 +16,7 @@ digraph techviz {
n2 [label="Authorized-client store", shape=cylinder, style="rounded,filled"];
n3 [label="Internal Resource Server", shape=box, style="rounded,filled"];
}
n0 -> n1 [label="AP3_SESSION · /bff/api/me", style=solid];
n1 -> n2 [label="현재 authorized client 조회", style=solid];
n1 -> n3 [label="downstream Bearer 요청", style=solid];
n0 -> n1 [label="AP3_SESSION", style=solid];
n1 -> n2 [label="client 조회", style=solid];
n1 -> n3 [label="Bearer 요청", style=solid];
}
docs/keycloak/final/assets/ap3-bff-architecture/ap3-bff-architecture.drawio
+17 -17
View File
@@ -1,41 +1,41 @@
<?xml version="1.0" encoding="UTF-8"?>
<mxfile host="app.diagrams.net" modified="2026-07-23T00:00:00.000Z" agent="techviz-harness" version="24.7.17" type="device">
<diagram id="ap3-bff-architecture" name="AP3는 browser session을 BFF-owned Bearer 요청으로 바꾼다">
<mxGraphModel dx="1080" dy="385" grid="1" gridSize="10" guides="1" tooltips="1" connect="1" arrows="1" fold="1" page="1" pageScale="1" pageWidth="1080" pageHeight="1169" math="0" shadow="0">
<mxGraphModel dx="938" dy="406" grid="1" gridSize="10" guides="1" tooltips="1" connect="1" arrows="1" fold="1" page="1" pageScale="1" pageWidth="938" pageHeight="1169" math="0" shadow="0">
<root>
<mxCell id="0"/>
<mxCell id="1" parent="0"/>
<mxCell id="g_browser-session-zone" value="Browser session boundary" style="swimlane;html=1;rounded=1;startSize=30;horizontal=1;dashed=1;strokeWidth=1.5;fillColor=#f7f9fb;strokeColor=#66788a;fontStyle=1;fontSize=13;" vertex="1" parent="1">
<mxGeometry x="45.0" y="49.0" width="250.0" height="160.0" as="geometry"/>
<mxGeometry x="40.0" y="118.0" width="230.0" height="160.0" as="geometry"/>
</mxCell>
<mxCell id="g_server-application-zone" value="Server-side application path" style="swimlane;html=1;rounded=1;startSize=30;horizontal=1;dashed=1;strokeWidth=1.5;fillColor=#f7f9fb;strokeColor=#66788a;fontStyle=1;fontSize=13;" vertex="1" parent="1">
<mxGeometry x="565.0" y="49.0" width="470.0" height="291.0" as="geometry"/>
<mxGeometry x="370.0" y="35.0" width="523.0" height="326.0" as="geometry"/>
</mxCell>
<mxCell id="n_browser" value="Browser&lt;br/&gt;HttpOnly AP3_SESSION&lt;br/&gt;OAuth token 없음" tooltip="OAuth token을 받지 않고 AP3_SESSION으로 BFF endpoint를 호출한다. | Evidence: L166-L168" style="whiteSpace=wrap;html=1;rounded=1;strokeWidth=2;fontSize=14;fontStyle=1;fillColor=#ffffff;strokeColor=#2d4357;verticalAlign=middle;dashed=1;fillColor=#f5f7fa;" vertex="1" parent="1">
<mxGeometry x="75.0" y="95.0" width="190.0" height="88.0" as="geometry"/>
<mxCell id="n_browser" value="Browser&lt;br/&gt;HttpOnly AP3_SESSION&lt;br/&gt;OAuth token 없음" tooltip="OAuth token을 받지 않고 AP3_SESSION으로 BFF endpoint를 호출한다. | Evidence: L192-L194" style="whiteSpace=wrap;html=1;rounded=1;strokeWidth=2;fontSize=14;fontStyle=1;fillColor=#ffffff;strokeColor=#2d4357;verticalAlign=middle;dashed=1;fillColor=#f5f7fa;" vertex="1" parent="1">
<mxGeometry x="70.0" y="164.0" width="170.0" height="88.0" as="geometry"/>
</mxCell>
<mxCell id="n_bff" value="Spring BFF&lt;br/&gt;bff-confidential&lt;br/&gt;oauth2Login" tooltip="브라우저 session을 현재 authorized client와 downstream Bearer 요청으로 변환하는 confidential client. | Evidence: L166-L170" style="whiteSpace=wrap;html=1;rounded=1;strokeWidth=2;fontSize=14;fontStyle=1;fillColor=#ffffff;strokeColor=#2d4357;verticalAlign=middle;strokeColor=#2563eb;strokeWidth=2;" vertex="1" parent="1">
<mxGeometry x="595.0" y="95.0" width="190.0" height="88.0" as="geometry"/>
<mxCell id="n_bff" value="Spring BFF&lt;br/&gt;bff-confidential&lt;br/&gt;oauth2Login&lt;br/&gt;/bff/api/me" tooltip="브라우저 session을 현재 authorized client와 downstream Bearer 요청으로 변환하는 confidential client. | Evidence: L192-L196" style="whiteSpace=wrap;html=1;rounded=1;strokeWidth=2;fontSize=14;fontStyle=1;fillColor=#ffffff;strokeColor=#2d4357;verticalAlign=middle;strokeColor=#2563eb;strokeWidth=2;" vertex="1" parent="1">
<mxGeometry x="400.0" y="155.5" width="150.0" height="105.0" as="geometry"/>
</mxCell>
<mxCell id="n_authorized-client-store" value="Authorized-client store&lt;br/&gt;access token&lt;br/&gt;refresh token" tooltip="BFF가 access와 refresh token을 보관하고 현재 authorized client를 조회하는 server-side state. | Evidence: L166-L170" style="whiteSpace=wrap;html=1;rounded=1;strokeWidth=2;fontSize=14;fontStyle=1;fillColor=#ffffff;strokeColor=#2d4357;verticalAlign=middle;shape=cylinder3;boundedLbl=1;backgroundOutline=1;fillColor=#eef6fb;" vertex="1" parent="1">
<mxGeometry x="815.0" y="95.0" width="190.0" height="108.0" as="geometry"/>
<mxCell id="n_authorized-client-store" value="Authorized-client store&lt;br/&gt;access token&lt;br/&gt;refresh token" tooltip="BFF가 access와 refresh token을 보관하고 현재 authorized client를 조회하는 server-side state. | Evidence: L192-L196" style="whiteSpace=wrap;html=1;rounded=1;strokeWidth=2;fontSize=14;fontStyle=1;fillColor=#ffffff;strokeColor=#2d4357;verticalAlign=middle;" vertex="1" parent="1">
<mxGeometry x="710.0" y="81.0" width="153.0" height="108.0" as="geometry"/>
</mxCell>
<mxCell id="n_resource-server" value="Internal Resource Server" tooltip="BFF가 만든 Bearer 요청을 받는 내부 보호 자원. | Evidence: L168-L168" style="whiteSpace=wrap;html=1;rounded=1;strokeWidth=2;fontSize=14;fontStyle=1;fillColor=#ffffff;strokeColor=#2d4357;verticalAlign=middle;" vertex="1" parent="1">
<mxGeometry x="595.0" y="240.0" width="190.0" height="74.0" as="geometry"/>
<mxCell id="n_resource-server" value="Internal Resource Server" tooltip="BFF가 만든 Bearer 요청을 받는 내부 보호 자원. | Evidence: L194-L194" style="whiteSpace=wrap;html=1;rounded=1;strokeWidth=2;fontSize=14;fontStyle=1;fillColor=#ffffff;strokeColor=#2d4357;verticalAlign=middle;" vertex="1" parent="1">
<mxGeometry x="710.0" y="261.0" width="153.0" height="74.0" as="geometry"/>
</mxCell>
<mxCell id="e_bff-to-resource-server" value="downstream Bearer 요청" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeWidth=2;endArrow=block;endFill=1;" edge="1" parent="1" source="n_bff" target="n_resource-server">
<mxCell id="e_bff-to-resource-server" value="Bearer 요청" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeWidth=2;endArrow=block;endFill=1;" edge="1" parent="1" source="n_bff" target="n_resource-server">
<mxGeometry relative="1" as="geometry">
<mxPoint x="714.0" y="212.5" as="offset"/>
<mxPoint x="654.0" y="257.5" as="offset"/>
</mxGeometry>
</mxCell>
<mxCell id="e_bff-to-store" value="현재 authorized client 조회" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeWidth=2;endArrow=block;endFill=1;" edge="1" parent="1" source="n_bff" target="n_authorized-client-store">
<mxCell id="e_bff-to-store" value="client 조회" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeWidth=2;endArrow=block;endFill=1;" edge="1" parent="1" source="n_bff" target="n_authorized-client-store">
<mxGeometry relative="1" as="geometry">
<mxPoint x="790.5" y="31.0" as="offset"/>
<mxPoint x="654.0" y="167.0" as="offset"/>
</mxGeometry>
</mxCell>
<mxCell id="e_browser-to-bff" value="AP3_SESSION · /bff/api/me" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeWidth=2;endArrow=block;endFill=1;" edge="1" parent="1" source="n_browser" target="n_bff">
<mxCell id="e_browser-to-bff" value="AP3_SESSION" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeWidth=2;endArrow=block;endFill=1;" edge="1" parent="1" source="n_browser" target="n_bff">
<mxGeometry relative="1" as="geometry">
<mxPoint x="430.0" y="111.0" as="offset"/>
<mxPoint x="320.0" y="180.0" as="offset"/>
</mxGeometry>
</mxCell>
</root>
docs/keycloak/final/assets/ap3-bff-architecture/ap3-bff-architecture.excalidraw
+86 -94
View File
@@ -6,9 +6,9 @@
{
"id": "group-browser-session-zone",
"type": "rectangle",
"x": 45.0,
"y": 49.0,
"width": 250.0,
"x": 40.0,
"y": 118.0,
"width": 230.0,
"height": 160.0,
"angle": 0,
"strokeColor": "#1e1e1e",
@@ -36,8 +36,8 @@
{
"id": "group-label-browser-session-zone",
"type": "text",
"x": 61.0,
"y": 55.0,
"x": 56.0,
"y": 124.0,
"width": 216,
"height": 24,
"angle": 0,
@@ -75,10 +75,10 @@
{
"id": "group-server-application-zone",
"type": "rectangle",
"x": 565.0,
"y": 49.0,
"width": 470.0,
"height": 291.0,
"x": 370.0,
"y": 35.0,
"width": 523.0,
"height": 326.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "#f8f9fa",
@@ -105,8 +105,8 @@
{
"id": "group-label-server-application-zone",
"type": "text",
"x": 581.0,
"y": 55.0,
"x": 386.0,
"y": 41.0,
"width": 252,
"height": 24,
"angle": 0,
@@ -144,10 +144,10 @@
{
"id": "edge-bff-to-resource-server",
"type": "arrow",
"x": 595.0,
"y": 148.0,
"width": 190.0,
"height": 129.0,
"x": 550.0,
"y": 217.0,
"width": 160.0,
"height": 81.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
@@ -169,21 +169,21 @@
"link": null,
"locked": false,
"points": [
[
190.0,
0.0
],
[
95.0,
0.0
],
[
95.0,
129.0
],
[
0.0,
129.0
0.0
],
[
80.0,
0.0
],
[
80.0,
81.0
],
[
160.0,
81.0
]
],
"lastCommittedPoint": null,
@@ -204,9 +204,9 @@
{
"id": "edge-label-bff-to-resource-server",
"type": "text",
"x": 634.0,
"y": 200.5,
"width": 160,
"x": 609.0,
"y": 245.5,
"width": 90,
"height": 24,
"angle": 0,
"strokeColor": "#1e1e1e",
@@ -232,21 +232,21 @@
"locked": false,
"fontSize": 13,
"fontFamily": 5,
"text": "downstream Bearer 요청",
"text": "Bearer 요청",
"textAlign": "center",
"verticalAlign": "middle",
"containerId": null,
"originalText": "downstream Bearer 요청",
"originalText": "Bearer 요청",
"autoResize": true,
"lineHeight": 1.25
},
{
"id": "edge-bff-to-store",
"type": "arrow",
"x": 785.0,
"y": 59.0,
"width": 30.0,
"height": 90.0,
"x": 550.0,
"y": 135.0,
"width": 160.0,
"height": 64.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
@@ -270,27 +270,19 @@
"points": [
[
0.0,
71.0
64.0
],
[
30.0,
71.0
80.0,
64.0
],
[
30.0,
80.0,
0.0
],
[
0.0,
160.0,
0.0
],
[
0.0,
90.0
],
[
30.0,
90.0
]
],
"lastCommittedPoint": null,
@@ -311,9 +303,9 @@
{
"id": "edge-label-bff-to-store",
"type": "text",
"x": 698.5,
"y": 19.0,
"width": 184,
"x": 609.0,
"y": 155.0,
"width": 90,
"height": 24,
"angle": 0,
"strokeColor": "#1e1e1e",
@@ -339,20 +331,20 @@
"locked": false,
"fontSize": 13,
"fontFamily": 5,
"text": "현재 authorized client 조회",
"text": "client 조회",
"textAlign": "center",
"verticalAlign": "middle",
"containerId": null,
"originalText": "현재 authorized client 조회",
"originalText": "client 조회",
"autoResize": true,
"lineHeight": 1.25
},
{
"id": "edge-browser-to-bff",
"type": "arrow",
"x": 265.0,
"y": 139.0,
"width": 330.0,
"x": 240.0,
"y": 208.0,
"width": 160.0,
"height": 0.0,
"angle": 0,
"strokeColor": "#1e1e1e",
@@ -380,15 +372,15 @@
0.0
],
[
165.0,
80.0,
0.0
],
[
165.0,
80.0,
0.0
],
[
330.0,
160.0,
0.0
]
],
@@ -410,9 +402,9 @@
{
"id": "edge-label-browser-to-bff",
"type": "text",
"x": 330.0,
"y": 99.0,
"width": 200,
"x": 275.0,
"y": 168.0,
"width": 90,
"height": 24,
"angle": 0,
"strokeColor": "#1e1e1e",
@@ -438,20 +430,20 @@
"locked": false,
"fontSize": 13,
"fontFamily": 5,
"text": "AP3_SESSION · /bff/api/me",
"text": "AP3_SESSION",
"textAlign": "center",
"verticalAlign": "middle",
"containerId": null,
"originalText": "AP3_SESSION · /bff/api/me",
"originalText": "AP3_SESSION",
"autoResize": true,
"lineHeight": 1.25
},
{
"id": "node-browser",
"type": "rectangle",
"x": 75.0,
"y": 95.0,
"width": 190.0,
"x": 70.0,
"y": 164.0,
"width": 170.0,
"height": 88.0,
"angle": 0,
"strokeColor": "#1e1e1e",
@@ -479,9 +471,9 @@
{
"id": "node-label-browser",
"type": "text",
"x": 85.0,
"y": 105.0,
"width": 170.0,
"x": 80.0,
"y": 174.0,
"width": 150.0,
"height": 68.0,
"angle": 0,
"strokeColor": "#1e1e1e",
@@ -518,10 +510,10 @@
{
"id": "node-bff",
"type": "rectangle",
"x": 595.0,
"y": 95.0,
"width": 190.0,
"height": 88.0,
"x": 400.0,
"y": 155.5,
"width": 150.0,
"height": 105.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "#ffffff",
@@ -548,10 +540,10 @@
{
"id": "node-label-bff",
"type": "text",
"x": 605.0,
"y": 105.0,
"width": 170.0,
"height": 68.0,
"x": 410.0,
"y": 165.5,
"width": 130.0,
"height": 85.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
@@ -576,20 +568,20 @@
"locked": false,
"fontSize": 15,
"fontFamily": 5,
"text": "Spring BFF\nbff-confidential\noauth2Login",
"text": "Spring BFF\nbff-confidential\noauth2Login\n/bff/api/me",
"textAlign": "center",
"verticalAlign": "middle",
"containerId": null,
"originalText": "Spring BFF\nbff-confidential\noauth2Login",
"originalText": "Spring BFF\nbff-confidential\noauth2Login\n/bff/api/me",
"autoResize": true,
"lineHeight": 1.25
},
{
"id": "node-authorized-client-store",
"type": "rectangle",
"x": 815.0,
"y": 95.0,
"width": 190.0,
"x": 710.0,
"y": 81.0,
"width": 153.0,
"height": 108.0,
"angle": 0,
"strokeColor": "#1e1e1e",
@@ -617,9 +609,9 @@
{
"id": "node-label-authorized-client-store",
"type": "text",
"x": 825.0,
"y": 105.0,
"width": 170.0,
"x": 720.0,
"y": 91.0,
"width": 133.0,
"height": 88.0,
"angle": 0,
"strokeColor": "#1e1e1e",
@@ -656,9 +648,9 @@
{
"id": "node-resource-server",
"type": "rectangle",
"x": 595.0,
"y": 240.0,
"width": 190.0,
"x": 710.0,
"y": 261.0,
"width": 153.0,
"height": 74.0,
"angle": 0,
"strokeColor": "#1e1e1e",
@@ -686,9 +678,9 @@
{
"id": "node-label-resource-server",
"type": "text",
"x": 605.0,
"y": 250.0,
"width": 170.0,
"x": 720.0,
"y": 271.0,
"width": 133.0,
"height": 54.0,
"angle": 0,
"strokeColor": "#1e1e1e",
docs/keycloak/final/assets/ap3-bff-architecture/ap3-bff-architecture.manifest.json
+7 -7
View File
@@ -2,14 +2,14 @@
"harness_version": "0.2.0",
"spec_id": "ap3-bff-architecture",
"spec_version": "1.1",
"spec_sha256": "20ed427be186390406589d69a75b848def944906ab94ff5b7448ead627b95bb2",
"spec_sha256": "ea691460c8489d465100ce6d75ca39b6d6283b51b5144fc9383f98d455b6b261",
"source_context": {
"document": "document.md",
"document_sha256": "df4d1a604c74e756672b5b40510abfedb8c67b39af280a5f51985ea9972f5371",
"document_sha256": "e2cc061f683294c937f089ad874cbf7a617f7313c07a92c2148fb11287a0da37",
"anchor": {
"kind": "marker",
"value": "ap3-bff-architecture",
"line": 172
"kind": "heading",
"value": "AP3: browser token 비노출과 application-owned session을 맞바꾼다",
"line": 190
}
},
"outputs": [
@@ -24,9 +24,9 @@
"lint_issue_count": 0,
"assumption_count": 0,
"assumptions_allowed": false,
"composition_profile": "two-zone-pipeline",
"composition_profile": "component-flow",
"reference_ids": [
"localization-pipeline"
"payment-event-flow"
],
"diagram_only": true
}
docs/keycloak/final/assets/ap3-bff-architecture/ap3-bff-architecture.mmd
+3 -3
View File
@@ -9,8 +9,8 @@ flowchart LR
n2[("Authorized-client store")]
n3["Internal Resource Server"]
end
n0 -->|"AP3_SESSION · /bff/api/me"| n1
n1 -->|"현재 authorized client 조회"| n2
n1 -->|"downstream Bearer 요청"| n3
n0 -->|"AP3_SESSION"| n1
n1 -->|"client 조회"| n2
n1 -->|"Bearer 요청"| n3
classDef external stroke-dasharray: 6 4
class n0 external
docs/keycloak/final/assets/ap3-bff-architecture/ap3-bff-architecture.svg
+35 -34
View File
@@ -1,8 +1,8 @@
<?xml version="1.0" encoding="UTF-8"?>
<svg xmlns="http://www.w3.org/2000/svg" width="1080" height="385" viewBox="0 0 1080 385" role="img" aria-labelledby="diagram-title diagram-description">
<svg xmlns="http://www.w3.org/2000/svg" width="938" height="406" viewBox="0 0 938 406" role="img" aria-labelledby="diagram-title diagram-description">
<title id="diagram-title">AP3는 browser session을 BFF-owned Bearer 요청으로 바꾼다</title>
<desc id="diagram-description">왼쪽 browser session zone에는 OAuth token 없이 HttpOnly AP3_SESSION을 가진 브라우저가 있다. 오른쪽 server-side application zone에는 BFF, authorized-client store, 내부 Resource Server가 있다. 브라우저의 /bff/api/me 요청은 BFF에서 종료되고, BFF는 current authorized client를 조회해 server-held access token으로 Resource Server용 Bearer 요청을 조립한다.</desc>
<metadata>{&quot;techviz&quot;:{&quot;spec_version&quot;:&quot;1.1&quot;,&quot;id&quot;:&quot;ap3-bff-architecture&quot;,&quot;profile&quot;:&quot;two-zone-pipeline&quot;},&quot;source_context&quot;:{&quot;document&quot;:&quot;document.md&quot;,&quot;document_sha256&quot;:&quot;df4d1a604c74e756672b5b40510abfedb8c67b39af280a5f51985ea9972f5371&quot;,&quot;anchor&quot;:{&quot;kind&quot;:&quot;marker&quot;,&quot;value&quot;:&quot;ap3-bff-architecture&quot;,&quot;line&quot;:172}},&quot;evidence_policy&quot;:&quot;Each factual element cites source lines or is marked assumption.&quot;,&quot;diagram_only&quot;:true}</metadata>
<metadata>{&quot;techviz&quot;:{&quot;spec_version&quot;:&quot;1.1&quot;,&quot;id&quot;:&quot;ap3-bff-architecture&quot;,&quot;profile&quot;:&quot;component-flow&quot;},&quot;source_context&quot;:{&quot;document&quot;:&quot;document.md&quot;,&quot;document_sha256&quot;:&quot;e2cc061f683294c937f089ad874cbf7a617f7313c07a92c2148fb11287a0da37&quot;,&quot;anchor&quot;:{&quot;kind&quot;:&quot;heading&quot;,&quot;value&quot;:&quot;AP3: browser token 비노출과 application-owned session을 맞바꾼다&quot;,&quot;line&quot;:190}},&quot;evidence_policy&quot;:&quot;Each factual element cites source lines or is marked assumption.&quot;,&quot;diagram_only&quot;:true}</metadata>
<defs>
<marker id="arrow" viewBox="0 0 10 10" refX="9" refY="5" markerWidth="7" markerHeight="7" orient="auto-start-reverse">
<path d="M 0 0 L 10 5 L 0 10 z" />
@@ -49,44 +49,45 @@
.timeline-detail { font-size: 11px; fill: #4b5563; text-anchor: middle; }
</style>
</defs>
<rect class="canvas" width="1080" height="385" />
<rect class="group-box" x="45.0" y="49.0" width="250.0" height="160.0" rx="8" />
<rect class="group-label-bg" x="59.0" y="39.0" width="190.0" height="22" />
<text class="group-label" x="69.0" y="54.0">Browser session boundary</text>
<rect class="group-box" x="565.0" y="49.0" width="470.0" height="291.0" rx="8" />
<rect class="group-label-bg" x="579.0" y="39.0" width="218.0" height="22" />
<text class="group-label" x="589.0" y="54.0">Server-side application path</text>
<polyline class="edge kind-request style-solid emphasis-primary" points="785.0,148.0 690.0,148.0 690.0,277.0 595.0,277.0" data-evidence="168-168" />
<rect class="edge-label-bg" x="638.0" y="198.5" width="152.0" height="22" rx="3" />
<text class="edge-label" x="714.0" y="213.5">downstream Bearer 요청</text>
<polyline class="edge kind-request style-solid emphasis-normal" points="785.0,130.0 815.0,130.0 815.0,59.0 785.0,59.0 785.0,149.0 815.0,149.0" data-evidence="168-168" />
<rect class="edge-label-bg" x="704.5" y="17.0" width="172.1" height="22" rx="3" />
<text class="edge-label" x="790.5" y="32.0">현재 authorized client 조회</text>
<polyline class="edge kind-request style-solid emphasis-normal" points="265.0,139.0 430.0,139.0 430.0,139.0 595.0,139.0" data-evidence="168-168" />
<rect class="edge-label-bg" x="337.2" y="97.0" width="185.5" height="22" rx="3" />
<text class="edge-label" x="430.0" y="112.0">AP3_SESSION · /bff/api/me</text>
<rect class="canvas" width="938" height="406" />
<rect class="group-box" x="40.0" y="118.0" width="230.0" height="160.0" rx="8" />
<rect class="group-label-bg" x="54.0" y="108.0" width="190.0" height="22" />
<text class="group-label" x="64.0" y="123.0">Browser session boundary</text>
<rect class="group-box" x="370.0" y="35.0" width="523.0" height="326.0" rx="8" />
<rect class="group-label-bg" x="384.0" y="25.0" width="218.0" height="22" />
<text class="group-label" x="394.0" y="40.0">Server-side application path</text>
<polyline class="edge kind-request style-solid emphasis-primary" points="550.0,217.0 630.0,217.0 630.0,298.0 710.0,298.0" data-evidence="194-194" />
<rect class="edge-label-bg" x="614.9" y="243.5" width="78.3" height="22" rx="3" />
<text class="edge-label" x="654.0" y="258.5">Bearer 요청</text>
<polyline class="edge kind-request style-solid emphasis-normal" points="550.0,199.0 630.0,199.0 630.0,135.0 710.0,135.0" data-evidence="194-194" />
<rect class="edge-label-bg" x="614.9" y="153.0" width="78.3" height="22" rx="3" />
<text class="edge-label" x="654.0" y="168.0">client 조회</text>
<polyline class="edge kind-request style-solid emphasis-normal" points="240.0,208.0 320.0,208.0 320.0,208.0 400.0,208.0" data-evidence="194-194" />
<rect class="edge-label-bg" x="274.1" y="166.0" width="91.7" height="22" rx="3" />
<text class="edge-label" x="320.0" y="181.0">AP3_SESSION</text>
<g id="node-browser">
<g class="actor-symbol emphasis-normal" data-evidence="166-168"><circle cx="170.0" cy="115.0" r="11.0" /><line x1="170.0" y1="131.0" x2="170.0" y2="154.0" /><line x1="152.0" y1="141.0" x2="188.0" y2="141.0" /><line x1="170.0" y1="154.0" x2="155.0" y2="171.0" /><line x1="170.0" y1="154.0" x2="185.0" y2="171.0" /></g>
<text class="node-label" x="170.0" y="176.0">Browser</text>
<g class="actor-symbol emphasis-normal" data-evidence="192-194"><circle cx="155.0" cy="184.0" r="11.0" /><line x1="155.0" y1="200.0" x2="155.0" y2="213.0" /><line x1="137.0" y1="210.0" x2="173.0" y2="210.0" /><line x1="155.0" y1="213.0" x2="140.0" y2="230.0" /><line x1="155.0" y1="213.0" x2="170.0" y2="230.0" /></g>
<text class="node-label" x="155.0" y="245.0">Browser</text>
</g>
<g id="node-bff">
<rect class="node-shape kind-service emphasis-primary role-service" data-evidence="166-170" x="595.0" y="95.0" width="190.0" height="88.0" rx="7" />
<text class="node-label" x="690.0" y="122.0">Spring BFF</text>
<line class="node-detail-divider" x1="609.0" y1="143.0" x2="771.0" y2="143.0" />
<text class="node-detail" x="611.0" y="160.0">bff-confidential</text>
<text class="node-detail" x="611.0" y="176.0">oauth2Login</text>
<rect class="node-shape kind-service emphasis-primary role-service" data-evidence="192-196" x="400.0" y="155.5" width="150.0" height="105.0" rx="7" />
<text class="node-label" x="475.0" y="182.5">Spring BFF</text>
<line class="node-detail-divider" x1="414.0" y1="203.5" x2="536.0" y2="203.5" />
<text class="node-detail" x="416.0" y="220.5">bff-confidential</text>
<text class="node-detail" x="416.0" y="236.5">oauth2Login</text>
<text class="node-detail" x="416.0" y="252.5">/bff/api/me</text>
</g>
<g id="node-authorized-client-store">
<rect class="node-shape kind-database emphasis-normal role-store" data-evidence="166-170" x="815.0" y="108.0" width="190.0" height="82.0" /><ellipse class="node-shape kind-database emphasis-normal role-store" cx="910.0" cy="108.0" rx="95.0" ry="13.0" /><path class="storage-bottom" d="M 815.0 190.0 A 95.0 13.0 0 0 0 1005.0 190.0" />
<text class="node-label" x="910.0" y="122.0">Authorized-client</text>
<text class="node-label" x="910.0" y="140.0">store</text>
<line class="node-detail-divider" x1="829.0" y1="161.0" x2="991.0" y2="161.0" />
<text class="node-detail" x="831.0" y="178.0">access token</text>
<text class="node-detail" x="831.0" y="194.0">refresh token</text>
<rect class="node-shape kind-database emphasis-normal role-store" data-evidence="192-196" x="710.0" y="81.0" width="153.0" height="108.0" rx="7" />
<text class="node-label" x="786.5" y="108.0">Authorized-client</text>
<text class="node-label" x="786.5" y="126.0">store</text>
<line class="node-detail-divider" x1="724.0" y1="147.0" x2="849.0" y2="147.0" />
<text class="node-detail" x="726.0" y="164.0">access token</text>
<text class="node-detail" x="726.0" y="180.0">refresh token</text>
</g>
<g id="node-resource-server">
<rect class="node-shape kind-service emphasis-normal role-sink" data-evidence="168-168" x="595.0" y="240.0" width="190.0" height="74.0" rx="7" />
<text class="node-label" x="690.0" y="267.0">Internal Resource</text>
<text class="node-label" x="690.0" y="285.0">Server</text>
<rect class="node-shape kind-service emphasis-normal role-sink" data-evidence="194-194" x="710.0" y="261.0" width="153.0" height="74.0" rx="7" />
<text class="node-label" x="786.5" y="288.0">Internal Resource</text>
<text class="node-label" x="786.5" y="306.0">Server</text>
</g>
</svg>
Side by Side Swipe Overlay

Before

Width:  |  Height:  |  Size: 7.7 KiB

After

Width:  |  Height:  |  Size: 7.5 KiB