donghyeon.kang/document-haness
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

refactor: 문서 개선 중

Browse Source
This commit is contained in:
donghyeon-ka
2026-09-21 14:30:55 +09:00
parent c93cdea150
commit 805a18f486
1497 changed files with 525837 additions and 59152 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/keycloak/final/assets/ap4-edge-forward-auth-flow/ap4-edge-forward-auth-flow.alt.md
+10 -10
View File
@@ -10,16 +10,16 @@
## Elements and evidence
- **브라우저** (participant): AP4_SESSION cookie와 함께 edge endpoint를 호출하는 외부 client. Evidence: L992–L1007.
- **Nginx edge** (participant): Internal auth subrequest를 만들고 인증 결과를 allowlisted upstream header와 internal token으로 재조립한다. Evidence: L914–L939, L1009–L1028.
- **oauth2-proxy** (participant): AP4_SESSION을 검증하고 인증된 user, email과 필요 시 갱신 cookie를 auth response로 돌려준다. Evidence: L980–L990, L1009–L1015.
- **Spring upstream** (participant): Identity header와 internal token을 함께 검증해 allowlisted identity JSON을 반환한다. Evidence: L1017–L1026, L1030–L1063.
- **브라우저** (participant): AP4_SESSION cookie와 함께 edge endpoint를 호출하는 외부 client. Evidence: L1032–L1047.
- **Nginx edge** (participant): Internal auth subrequest를 만들고 인증 결과를 allowlisted upstream header와 internal token으로 재조립한다. Evidence: L954–L979, L1049–L1068.
- **oauth2-proxy** (participant): AP4_SESSION을 검증하고 인증된 user, email과 필요 시 갱신 cookie를 auth response로 돌려준다. Evidence: L1020–L1030, L1049–L1055.
- **Spring upstream** (participant): Identity header와 internal token을 함께 검증해 allowlisted identity JSON을 반환한다. Evidence: L1057–L1066, L1070–L1103.
## Relationships
- **브라우저 → Nginx edge:** GET /api/edge + AP4_SESSION. Evidence: L992–L999.
- **Nginx edge → oauth2-proxy:** internal /oauth2/auth subrequest. Evidence: L922–L939, L1009–L1009.
- **oauth2-proxy → Nginx edge:** authenticated user + email. Evidence: L1009–L1015.
- **Nginx edge → Spring upstream:** GET /edge/me · trusted headers + internal token. Evidence: L1017–L1026.
- **Spring upstream → Nginx edge:** trusted identity JSON. Evidence: L1030–L1048.
- **Nginx edge → 브라우저:** pattern + user + email + identityHeader. Evidence: L1039–L1048, L1065–L1076.
- **브라우저 → Nginx edge:** GET /api/edge + AP4_SESSION. Evidence: L1032–L1039.
- **Nginx edge → oauth2-proxy:** internal /oauth2/auth subrequest. Evidence: L962–L979, L1049–L1049.
- **oauth2-proxy → Nginx edge:** authenticated user + email. Evidence: L1049–L1055.
- **Nginx edge → Spring upstream:** GET /edge/me · trusted headers + internal token. Evidence: L1057–L1066.
- **Spring upstream → Nginx edge:** trusted identity JSON. Evidence: L1070–L1088.
- **Nginx edge → 브라우저:** pattern + user + email + identityHeader. Evidence: L1079–L1088, L1105–L1116.