digraph techviz {
  graph [rankdir=LR, splines=ortho, nodesep=0.55, ranksep=0.85];
  node [fontname=Helvetica, fontsize=11, margin="0.18,0.12", style="rounded,filled", fillcolor=white, color="#2d4357", penwidth=1.5];
  edge [fontname=Helvetica, fontsize=10, color="#364b5f", penwidth=1.4, arrowsize=0.75];
  n0 [label="Public SPA", shape=box, style="rounded,filled"];
  n1 [label="Browser JS memory", shape=cylinder, style="rounded,filled"];
  n2 [label="Keycloak", shape=box, style="rounded,filled"];
  n3 [label="Resource Server", shape=box, style="rounded,filled"];
  n0 -> n2 [label="Authorization Code + PKCE S256", style=solid];
  n2 -> n0 [label="access · refresh · ID token", style=solid];
  n0 -> n1 [label="token set 보관", style=solid];
  n0 -> n3 [label="memory-held access JWT · Bearer", style=solid];
}