feat: 가상화 문서들 추가
This commit is contained in:
DongHyeonka
@@ -1,8 +1,8 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<svg xmlns="http://www.w3.org/2000/svg" width="1080" height="385" viewBox="0 0 1080 385" role="img" aria-labelledby="diagram-title diagram-description">
|
||||
<svg xmlns="http://www.w3.org/2000/svg" width="938" height="406" viewBox="0 0 938 406" role="img" aria-labelledby="diagram-title diagram-description">
|
||||
<title id="diagram-title">AP3는 browser session을 BFF-owned Bearer 요청으로 바꾼다</title>
|
||||
<desc id="diagram-description">왼쪽 browser session zone에는 OAuth token 없이 HttpOnly AP3_SESSION을 가진 브라우저가 있다. 오른쪽 server-side application zone에는 BFF, authorized-client store, 내부 Resource Server가 있다. 브라우저의 /bff/api/me 요청은 BFF에서 종료되고, BFF는 current authorized client를 조회해 server-held access token으로 Resource Server용 Bearer 요청을 조립한다.</desc>
|
||||
<metadata>{"techviz":{"spec_version":"1.1","id":"ap3-bff-architecture","profile":"two-zone-pipeline"},"source_context":{"document":"document.md","document_sha256":"df4d1a604c74e756672b5b40510abfedb8c67b39af280a5f51985ea9972f5371","anchor":{"kind":"marker","value":"ap3-bff-architecture","line":172}},"evidence_policy":"Each factual element cites source lines or is marked assumption.","diagram_only":true}</metadata>
|
||||
<metadata>{"techviz":{"spec_version":"1.1","id":"ap3-bff-architecture","profile":"component-flow"},"source_context":{"document":"document.md","document_sha256":"e2cc061f683294c937f089ad874cbf7a617f7313c07a92c2148fb11287a0da37","anchor":{"kind":"heading","value":"AP3: browser token 비노출과 application-owned session을 맞바꾼다","line":190}},"evidence_policy":"Each factual element cites source lines or is marked assumption.","diagram_only":true}</metadata>
|
||||
<defs>
|
||||
<marker id="arrow" viewBox="0 0 10 10" refX="9" refY="5" markerWidth="7" markerHeight="7" orient="auto-start-reverse">
|
||||
<path d="M 0 0 L 10 5 L 0 10 z" />
|
||||
@@ -49,44 +49,45 @@
|
||||
.timeline-detail { font-size: 11px; fill: #4b5563; text-anchor: middle; }
|
||||
</style>
|
||||
</defs>
|
||||
<rect class="canvas" width="1080" height="385" />
|
||||
<rect class="group-box" x="45.0" y="49.0" width="250.0" height="160.0" rx="8" />
|
||||
<rect class="group-label-bg" x="59.0" y="39.0" width="190.0" height="22" />
|
||||
<text class="group-label" x="69.0" y="54.0">Browser session boundary</text>
|
||||
<rect class="group-box" x="565.0" y="49.0" width="470.0" height="291.0" rx="8" />
|
||||
<rect class="group-label-bg" x="579.0" y="39.0" width="218.0" height="22" />
|
||||
<text class="group-label" x="589.0" y="54.0">Server-side application path</text>
|
||||
<polyline class="edge kind-request style-solid emphasis-primary" points="785.0,148.0 690.0,148.0 690.0,277.0 595.0,277.0" data-evidence="168-168" />
|
||||
<rect class="edge-label-bg" x="638.0" y="198.5" width="152.0" height="22" rx="3" />
|
||||
<text class="edge-label" x="714.0" y="213.5">downstream Bearer 요청</text>
|
||||
<polyline class="edge kind-request style-solid emphasis-normal" points="785.0,130.0 815.0,130.0 815.0,59.0 785.0,59.0 785.0,149.0 815.0,149.0" data-evidence="168-168" />
|
||||
<rect class="edge-label-bg" x="704.5" y="17.0" width="172.1" height="22" rx="3" />
|
||||
<text class="edge-label" x="790.5" y="32.0">현재 authorized client 조회</text>
|
||||
<polyline class="edge kind-request style-solid emphasis-normal" points="265.0,139.0 430.0,139.0 430.0,139.0 595.0,139.0" data-evidence="168-168" />
|
||||
<rect class="edge-label-bg" x="337.2" y="97.0" width="185.5" height="22" rx="3" />
|
||||
<text class="edge-label" x="430.0" y="112.0">AP3_SESSION · /bff/api/me</text>
|
||||
<rect class="canvas" width="938" height="406" />
|
||||
<rect class="group-box" x="40.0" y="118.0" width="230.0" height="160.0" rx="8" />
|
||||
<rect class="group-label-bg" x="54.0" y="108.0" width="190.0" height="22" />
|
||||
<text class="group-label" x="64.0" y="123.0">Browser session boundary</text>
|
||||
<rect class="group-box" x="370.0" y="35.0" width="523.0" height="326.0" rx="8" />
|
||||
<rect class="group-label-bg" x="384.0" y="25.0" width="218.0" height="22" />
|
||||
<text class="group-label" x="394.0" y="40.0">Server-side application path</text>
|
||||
<polyline class="edge kind-request style-solid emphasis-primary" points="550.0,217.0 630.0,217.0 630.0,298.0 710.0,298.0" data-evidence="194-194" />
|
||||
<rect class="edge-label-bg" x="614.9" y="243.5" width="78.3" height="22" rx="3" />
|
||||
<text class="edge-label" x="654.0" y="258.5">Bearer 요청</text>
|
||||
<polyline class="edge kind-request style-solid emphasis-normal" points="550.0,199.0 630.0,199.0 630.0,135.0 710.0,135.0" data-evidence="194-194" />
|
||||
<rect class="edge-label-bg" x="614.9" y="153.0" width="78.3" height="22" rx="3" />
|
||||
<text class="edge-label" x="654.0" y="168.0">client 조회</text>
|
||||
<polyline class="edge kind-request style-solid emphasis-normal" points="240.0,208.0 320.0,208.0 320.0,208.0 400.0,208.0" data-evidence="194-194" />
|
||||
<rect class="edge-label-bg" x="274.1" y="166.0" width="91.7" height="22" rx="3" />
|
||||
<text class="edge-label" x="320.0" y="181.0">AP3_SESSION</text>
|
||||
<g id="node-browser">
|
||||
<g class="actor-symbol emphasis-normal" data-evidence="166-168"><circle cx="170.0" cy="115.0" r="11.0" /><line x1="170.0" y1="131.0" x2="170.0" y2="154.0" /><line x1="152.0" y1="141.0" x2="188.0" y2="141.0" /><line x1="170.0" y1="154.0" x2="155.0" y2="171.0" /><line x1="170.0" y1="154.0" x2="185.0" y2="171.0" /></g>
|
||||
<text class="node-label" x="170.0" y="176.0">Browser</text>
|
||||
<g class="actor-symbol emphasis-normal" data-evidence="192-194"><circle cx="155.0" cy="184.0" r="11.0" /><line x1="155.0" y1="200.0" x2="155.0" y2="213.0" /><line x1="137.0" y1="210.0" x2="173.0" y2="210.0" /><line x1="155.0" y1="213.0" x2="140.0" y2="230.0" /><line x1="155.0" y1="213.0" x2="170.0" y2="230.0" /></g>
|
||||
<text class="node-label" x="155.0" y="245.0">Browser</text>
|
||||
</g>
|
||||
<g id="node-bff">
|
||||
<rect class="node-shape kind-service emphasis-primary role-service" data-evidence="166-170" x="595.0" y="95.0" width="190.0" height="88.0" rx="7" />
|
||||
<text class="node-label" x="690.0" y="122.0">Spring BFF</text>
|
||||
<line class="node-detail-divider" x1="609.0" y1="143.0" x2="771.0" y2="143.0" />
|
||||
<text class="node-detail" x="611.0" y="160.0">bff-confidential</text>
|
||||
<text class="node-detail" x="611.0" y="176.0">oauth2Login</text>
|
||||
<rect class="node-shape kind-service emphasis-primary role-service" data-evidence="192-196" x="400.0" y="155.5" width="150.0" height="105.0" rx="7" />
|
||||
<text class="node-label" x="475.0" y="182.5">Spring BFF</text>
|
||||
<line class="node-detail-divider" x1="414.0" y1="203.5" x2="536.0" y2="203.5" />
|
||||
<text class="node-detail" x="416.0" y="220.5">bff-confidential</text>
|
||||
<text class="node-detail" x="416.0" y="236.5">oauth2Login</text>
|
||||
<text class="node-detail" x="416.0" y="252.5">/bff/api/me</text>
|
||||
</g>
|
||||
<g id="node-authorized-client-store">
|
||||
<rect class="node-shape kind-database emphasis-normal role-store" data-evidence="166-170" x="815.0" y="108.0" width="190.0" height="82.0" /><ellipse class="node-shape kind-database emphasis-normal role-store" cx="910.0" cy="108.0" rx="95.0" ry="13.0" /><path class="storage-bottom" d="M 815.0 190.0 A 95.0 13.0 0 0 0 1005.0 190.0" />
|
||||
<text class="node-label" x="910.0" y="122.0">Authorized-client</text>
|
||||
<text class="node-label" x="910.0" y="140.0">store</text>
|
||||
<line class="node-detail-divider" x1="829.0" y1="161.0" x2="991.0" y2="161.0" />
|
||||
<text class="node-detail" x="831.0" y="178.0">access token</text>
|
||||
<text class="node-detail" x="831.0" y="194.0">refresh token</text>
|
||||
<rect class="node-shape kind-database emphasis-normal role-store" data-evidence="192-196" x="710.0" y="81.0" width="153.0" height="108.0" rx="7" />
|
||||
<text class="node-label" x="786.5" y="108.0">Authorized-client</text>
|
||||
<text class="node-label" x="786.5" y="126.0">store</text>
|
||||
<line class="node-detail-divider" x1="724.0" y1="147.0" x2="849.0" y2="147.0" />
|
||||
<text class="node-detail" x="726.0" y="164.0">access token</text>
|
||||
<text class="node-detail" x="726.0" y="180.0">refresh token</text>
|
||||
</g>
|
||||
<g id="node-resource-server">
|
||||
<rect class="node-shape kind-service emphasis-normal role-sink" data-evidence="168-168" x="595.0" y="240.0" width="190.0" height="74.0" rx="7" />
|
||||
<text class="node-label" x="690.0" y="267.0">Internal Resource</text>
|
||||
<text class="node-label" x="690.0" y="285.0">Server</text>
|
||||
<rect class="node-shape kind-service emphasis-normal role-sink" data-evidence="194-194" x="710.0" y="261.0" width="153.0" height="74.0" rx="7" />
|
||||
<text class="node-label" x="786.5" y="288.0">Internal Resource</text>
|
||||
<text class="node-label" x="786.5" y="306.0">Server</text>
|
||||
</g>
|
||||
</svg>
|
||||
|
||||
|
Before Width: | Height: | Size: 7.7 KiB After Width: | Height: | Size: 7.5 KiB |
Reference in New Issue
Block a user