refactor: 문서 개선 중

docs/keycloak/final/assets/ap3-csrf-boundary/ap3-csrf-boundary.manifest.json

@@ -2,10 +2,10 @@
   "harness_version": "0.2.0",
   "spec_id": "ap3-csrf-boundary",
   "spec_version": "1.1",
-  "spec_sha256": "d10a5d627e8436b300e3bb55073f23b1dc389c50c81f572355af73183a5a52d1",
+  "spec_sha256": "d3ff845054ca1eef39ffd28d81a4ba03825f74f3f1000f643c92829252c7c775",
   "source_context": {
     "document": "document.md",
-    "document_sha256": "e2cc061f683294c937f089ad874cbf7a617f7313c07a92c2148fb11287a0da37",
+    "document_sha256": "15e7c79412ac05ed39d6f3d0c14de8dda92abe7b402139ac2a90492dfe5e162c",
     "anchor": {
       "kind": "heading",
       "value": "AP3 완주: session cookie가 BFF의 downstream Bearer가 되기까지",
@@ -14,10 +14,10 @@
   },
   "outputs": [
     "ap3-csrf-boundary.svg",
-    "ap3-csrf-boundary.drawio",
     "ap3-csrf-boundary.mmd",
     "ap3-csrf-boundary.d2",
     "ap3-csrf-boundary.dot",
+    "ap3-csrf-boundary.drawio",
     "ap3-csrf-boundary.excalidraw",
     "ap3-csrf-boundary.alt.md"
   ],

docs/keycloak/final/assets/ap3-csrf-boundary/ap3-csrf-boundary.svg

@@ -2,7 +2,7 @@
 <svg xmlns="http://www.w3.org/2000/svg" width="1411" height="392" viewBox="0 0 1411 392" role="img" aria-labelledby="diagram-title diagram-description">
 <title id="diagram-title">AP3의 masked CSRF 응답과 raw POST credential</title>
 <desc id="diagram-description">왼쪽의 BFF CSRF endpoint에서 두 결과가 갈라진다. XSRF-TOKEN cookie에는 raw token이 저장되고 JSON body에는 XOR와 Base64로 masked된 token 및 headerName이 담긴다. 두 결과는 SPA의 POST 조립 단계로 모이지만, JSON에서는 headerName만 사용하고 실제 X-XSRF-TOKEN 값은 document.cookie에서 읽은 raw token이다. POST에는 같은 raw 값을 가진 cookie와 header가 함께 도달하고 Spring CSRF filter가 일치 여부를 확인한다.</desc>
-<metadata>{&quot;techviz&quot;:{&quot;spec_version&quot;:&quot;1.1&quot;,&quot;id&quot;:&quot;ap3-csrf-boundary&quot;,&quot;profile&quot;:&quot;component-flow&quot;},&quot;source_context&quot;:{&quot;document&quot;:&quot;document.md&quot;,&quot;document_sha256&quot;:&quot;e2cc061f683294c937f089ad874cbf7a617f7313c07a92c2148fb11287a0da37&quot;,&quot;anchor&quot;:{&quot;kind&quot;:&quot;heading&quot;,&quot;value&quot;:&quot;AP3 완주: session cookie가 BFF의 downstream Bearer가 되기까지&quot;,&quot;line&quot;:681}},&quot;evidence_policy&quot;:&quot;Each factual element cites source lines or is marked assumption.&quot;,&quot;diagram_only&quot;:true}</metadata>
+<metadata>{&quot;techviz&quot;:{&quot;spec_version&quot;:&quot;1.1&quot;,&quot;id&quot;:&quot;ap3-csrf-boundary&quot;,&quot;profile&quot;:&quot;component-flow&quot;},&quot;source_context&quot;:{&quot;document&quot;:&quot;document.md&quot;,&quot;document_sha256&quot;:&quot;15e7c79412ac05ed39d6f3d0c14de8dda92abe7b402139ac2a90492dfe5e162c&quot;,&quot;anchor&quot;:{&quot;kind&quot;:&quot;heading&quot;,&quot;value&quot;:&quot;AP3 완주: session cookie가 BFF의 downstream Bearer가 되기까지&quot;,&quot;line&quot;:681}},&quot;evidence_policy&quot;:&quot;Each factual element cites source lines or is marked assumption.&quot;,&quot;diagram_only&quot;:true}</metadata>
 <defs>
   <marker id="arrow" viewBox="0 0 10 10" refX="9" refY="5" markerWidth="7" markerHeight="7" orient="auto-start-reverse">
     <path d="M 0 0 L 10 5 L 0 10 z" />