donghyeon.kang/document-haness
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

refactor: 문서 개선 중

Browse Source
This commit is contained in:
donghyeon-ka
2026-09-21 14:30:55 +09:00
parent c93cdea150
commit 805a18f486
1497 changed files with 525837 additions and 59152 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/keycloak/final/assets/ap1-browser-bearer-flow/ap1-browser-bearer-flow.alt.md
+9 -9
View File
@@ -10,15 +10,15 @@
## Elements and evidence
- **브라우저 SPA** (participant): PKCE transaction과 token set을 처리하고 access token으로 API 요청을 만드는 public client. Evidence: L201–L236, L240–L280, L303–L322.
- **Keycloak** (participant): Authorization code를 발급하고 code와 verifier를 token set으로 교환하는 authorization server. Evidence: L223–L263.
- **Resource Server** (participant): Bearer JWT의 signature, issuer, timestamp와 audience를 검증하고 사용자 JSON을 만드는 Spring API. Evidence: L311–L353.
- **브라우저 SPA** (participant): PKCE transaction과 token set을 처리하고 access token으로 API 요청을 만드는 public client. Evidence: L233–L268, L272–L312, L335–L354.
- **Keycloak** (participant): Authorization code를 발급하고 code와 verifier를 token set으로 교환하는 authorization server. Evidence: L255–L295.
- **Resource Server** (participant): Bearer JWT의 signature, issuer, timestamp와 audience를 검증하고 사용자 JSON을 만드는 Spring API. Evidence: L343–L385.
## Relationships
- **브라우저 SPA → Keycloak:** authorization request · S256 challenge. Evidence: L223–L236.
- **Keycloak → 브라우저 SPA:** callback · code + state. Evidence: L240–L250.
- **브라우저 SPA → Keycloak:** token request · code + verifier. Evidence: L250–L261.
- **Keycloak → 브라우저 SPA:** access + refresh + ID token. Evidence: L263–L280.
- **브라우저 SPA → Resource Server:** GET /api/me · Bearer access token. Evidence: L303–L322.
- **Resource Server → 브라우저 SPA:** subject · username · issuer · audience. Evidence: L342–L376.
- **브라우저 SPA → Keycloak:** authorization request · S256 challenge. Evidence: L255–L268.
- **Keycloak → 브라우저 SPA:** callback · code + state. Evidence: L272–L282.
- **브라우저 SPA → Keycloak:** token request · code + verifier. Evidence: L282–L293.
- **Keycloak → 브라우저 SPA:** access + refresh + ID token. Evidence: L295–L312.
- **브라우저 SPA → Resource Server:** GET /api/me · Bearer access token. Evidence: L335–L354.
- **Resource Server → 브라우저 SPA:** subject · username · issuer · audience. Evidence: L374–L408.