donghyeon.kang/document-haness
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

refactor: 문서 개선 중

Browse Source
This commit is contained in:
donghyeon-ka
2026-09-21 14:30:55 +09:00
parent c93cdea150
commit 805a18f486
1497 changed files with 525837 additions and 59152 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/keycloak/final/assets/ap3-bff-session-flow/ap3-bff-session-flow.alt.md
+10 -10
View File
@@ -10,16 +10,16 @@
## Elements and evidence
- **브라우저** (participant): Authorization header 없이 AP3_SESSION cookie로 BFF endpoint를 호출하고 중계 JSON을 받는다. Evidence: L714–L722, L750–L760, L796–L809.
- **Spring BFF** (participant): Session authentication을 authorized client 조회로 바꾸고 Resource Server용 Bearer 요청을 조립한다. Evidence: L750–L783, L796–L809.
- **Authorized-client store** (participant): Registration과 principal name으로 BFF의 access token과 refresh token을 보관한다. Evidence: L700–L712, L762–L768.
- **Resource Server** (participant): BFF가 붙인 Bearer JWT를 검증하고 사용자 JSON을 반환한다. Evidence: L776–L796.
- **브라우저** (participant): Authorization header 없이 AP3_SESSION cookie로 BFF endpoint를 호출하고 중계 JSON을 받는다. Evidence: L750–L758, L786–L796, L832–L845.
- **Spring BFF** (participant): Session authentication을 authorized client 조회로 바꾸고 Resource Server용 Bearer 요청을 조립한다. Evidence: L786–L819, L832–L845.
- **Authorized-client store** (participant): Registration과 principal name으로 BFF의 access token과 refresh token을 보관한다. Evidence: L736–L748, L798–L804.
- **Resource Server** (participant): BFF가 붙인 Bearer JWT를 검증하고 사용자 JSON을 반환한다. Evidence: L812–L832.
## Relationships
- **브라우저 → Spring BFF:** GET /bff/api/me + AP3_SESSION. Evidence: L750–L760.
- **Spring BFF → Authorized-client store:** authorize current principal. Evidence: L762–L768.
- **Authorized-client store → Spring BFF:** server-held access token. Evidence: L762–L768.
- **Spring BFF → Resource Server:** GET /api/me · Bearer access token. Evidence: L770–L783.
- **Resource Server → Spring BFF:** subject · username · issuer · audience. Evidence: L785–L796.
- **Spring BFF → 브라우저:** BFF ResponseEntity → browser JSON. Evidence: L796–L809.
- **브라우저 → Spring BFF:** GET /bff/api/me + AP3_SESSION. Evidence: L786–L796.
- **Spring BFF → Authorized-client store:** authorize current principal. Evidence: L798–L804.
- **Authorized-client store → Spring BFF:** server-held access token. Evidence: L798–L804.
- **Spring BFF → Resource Server:** GET /api/me · Bearer access token. Evidence: L806–L819.
- **Resource Server → Spring BFF:** subject · username · issuer · audience. Evidence: L821–L832.
- **Spring BFF → 브라우저:** BFF ResponseEntity → browser JSON. Evidence: L832–L845.