digraph techviz {
  graph [rankdir=LR, splines=ortho, nodesep=0.55, ranksep=0.85];
  node [fontname=Helvetica, fontsize=11, margin="0.18,0.12", style="rounded,filled", fillcolor=white, color="#2d4357", penwidth=1.5];
  edge [fontname=Helvetica, fontsize=10, color="#364b5f", penwidth=1.4, arrowsize=0.75];
  n0 [label="브라우저", shape=box, style="rounded,filled"];
  n1 [label="Spring BFF", shape=box, style="rounded,filled"];
  n2 [label="Authorized-client store", shape=box, style="rounded,filled"];
  n3 [label="Resource Server", shape=box, style="rounded,filled"];
  n0 -> n1 [label="GET /bff/api/me + AP3_SESSION", style=solid];
  n1 -> n2 [label="authorize current principal", style=solid];
  n2 -> n1 [label="server-held access token", style=solid];
  n1 -> n3 [label="GET /api/me · Bearer access token", style=solid];
  n3 -> n1 [label="subject · username · issuer · audience", style=solid];
  n1 -> n0 [label="BFF ResponseEntity → browser JSON", style=solid];
}