donghyeon.kang/document-haness
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

refactor: 문서 개선 중

Browse Source
This commit is contained in:
donghyeon-ka
2026-09-21 14:30:55 +09:00
parent c93cdea150
commit 805a18f486
1497 changed files with 525837 additions and 59152 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/keycloak/final/assets/ap1-direct-architecture/ap1-direct-architecture.alt.md
+8 -8
View File
@@ -10,14 +10,14 @@ SPA, Keycloak, 브라우저 JavaScript memory, Resource Server가 왼쪽에서
## Elements and evidence
- **Public SPA** (service): Authorization Code와 PKCE를 직접 다루고 access JWT로 Resource Server를 호출하는 public OAuth client. Evidence: L144–L148.
- **Browser JS memory** (database): Access, refresh, ID token을 실행 중 보관하며 reload 뒤에는 복구하지 않는 browser-side custody. Evidence: L148–L150.
- **Keycloak** (service): SPA의 code 교환 상대이며 API가 검증하는 JWT 서명의 출처. Evidence: L144–L146.
- **Resource Server** (service): Access JWT의 issuer, 시간 제약과 audience를 검증하는 API. Evidence: L144–L150.
- **Public SPA** (service): Authorization Code와 PKCE를 직접 다루고 access JWT로 Resource Server를 호출하는 public OAuth client. Evidence: L168–L172.
- **Browser JS memory** (database): Access, refresh, ID token을 실행 중 보관하며 reload 뒤에는 복구하지 않는 browser-side custody. Evidence: L172–L174.
- **Keycloak** (service): SPA의 code 교환 상대이며 API가 검증하는 JWT 서명의 출처. Evidence: L168–L170.
- **Resource Server** (service): Access JWT의 issuer, 시간 제약과 audience를 검증하는 API. Evidence: L168–L174.
## Relationships
- **Keycloak → Public SPA:** access · refresh · ID token. Evidence: L144–L148.
- **Public SPA → Keycloak:** Authorization Code + PKCE S256. Evidence: L144–L146.
- **Public SPA → Browser JS memory:** token set 보관. Evidence: L148–L150.
- **Public SPA → Resource Server:** memory-held access JWT · Bearer. Evidence: L144–L150.
- **Keycloak → Public SPA:** access · refresh · ID token. Evidence: L168–L172.
- **Public SPA → Keycloak:** Authorization Code + PKCE S256. Evidence: L168–L170.
- **Public SPA → Browser JS memory:** token set 보관. Evidence: L172–L174.
- **Public SPA → Resource Server:** memory-held access JWT · Bearer. Evidence: L168–L174.