donghyeon.kang/document-haness
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

refactor: 문서 개선 중

Browse Source
This commit is contained in:
donghyeon-ka
2026-09-21 14:30:55 +09:00
parent c93cdea150
commit 805a18f486
1497 changed files with 525837 additions and 59152 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/keycloak/final/assets/ap2-mediator-handoff-flow/ap2-mediator-handoff-flow.alt.md
+10 -10
View File
@@ -10,16 +10,16 @@
## Elements and evidence
- **브라우저** (participant): AP2_SESSION으로 access endpoint를 호출하고 반환된 access token으로 Resource Server를 직접 호출한다. Evidence: L505–L511, L558–L586.
- **Spring mediator** (participant): 현재 principal로 authorized client를 조회하고 access token, type, expiry만 JSON으로 반환한다. Evidence: L503–L540.
- **Authorized-client store** (participant): Registration과 principal name으로 access token과 refresh token을 보관하는 process-local service. Evidence: L445–L457, L513–L521.
- **Resource Server** (participant): 브라우저가 만든 Bearer JWT를 검증하고 /api/me 사용자 JSON을 반환한다. Evidence: L571–L599.
- **브라우저** (participant): AP2_SESSION으로 access endpoint를 호출하고 반환된 access token으로 Resource Server를 직접 호출한다. Evidence: L539–L545, L592–L620.
- **Spring mediator** (participant): 현재 principal로 authorized client를 조회하고 access token, type, expiry만 JSON으로 반환한다. Evidence: L537–L574.
- **Authorized-client store** (participant): Registration과 principal name으로 access token과 refresh token을 보관하는 process-local service. Evidence: L479–L491, L547–L555.
- **Resource Server** (participant): 브라우저가 만든 Bearer JWT를 검증하고 /api/me 사용자 JSON을 반환한다. Evidence: L605–L633.
## Relationships
- **브라우저 → Spring mediator:** GET /token/access + AP2_SESSION. Evidence: L503–L511.
- **Spring mediator → Authorized-client store:** authorize current principal. Evidence: L513–L521.
- **Authorized-client store → Spring mediator:** current access token. Evidence: L513–L521.
- **Spring mediator → 브라우저:** access token + type + expiry. Evidence: L523–L540.
- **브라우저 → Resource Server:** GET /api/me · browser-created Bearer. Evidence: L558–L588.
- **Resource Server → 브라우저:** subject · username · issuer · audience. Evidence: L590–L615.
- **브라우저 → Spring mediator:** GET /token/access + AP2_SESSION. Evidence: L537–L545.
- **Spring mediator → Authorized-client store:** authorize current principal. Evidence: L547–L555.
- **Authorized-client store → Spring mediator:** current access token. Evidence: L547–L555.
- **Spring mediator → 브라우저:** access token + type + expiry. Evidence: L557–L574.
- **브라우저 → Resource Server:** GET /api/me · browser-created Bearer. Evidence: L592–L622.
- **Resource Server → 브라우저:** subject · username · issuer · audience. Evidence: L624–L649.