{
  "type": "excalidraw",
  "version": 2,
  "source": "techviz-harness",
  "elements": [
    {
      "id": "edge-assembler-to-filter",
      "type": "arrow",
      "x": 990.0,
      "y": 203.5,
      "width": 160.0,
      "height": 0.0,
      "angle": 0,
      "strokeColor": "#1e1e1e",
      "backgroundColor": "transparent",
      "fillStyle": "solid",
      "strokeWidth": 2,
      "strokeStyle": "solid",
      "roughness": 1,
      "opacity": 100,
      "groupIds": [],
      "frameId": null,
      "index": null,
      "roundness": null,
      "seed": 722742849,
      "version": 1,
      "versionNonce": 364630411,
      "isDeleted": false,
      "boundElements": [],
      "updated": 0,
      "link": null,
      "locked": false,
      "points": [
        [
          0.0,
          0.0
        ],
        [
          80.0,
          0.0
        ],
        [
          80.0,
          0.0
        ],
        [
          160.0,
          0.0
        ]
      ],
      "lastCommittedPoint": null,
      "startBinding": {
        "elementId": "node-post-assembler",
        "focus": 0,
        "gap": 4
      },
      "endBinding": {
        "elementId": "node-csrf-filter",
        "focus": 0,
        "gap": 4
      },
      "startArrowhead": null,
      "endArrowhead": "arrow",
      "elbowed": true
    },
    {
      "id": "edge-label-assembler-to-filter",
      "type": "text",
      "x": 978.0,
      "y": 163.5,
      "width": 184,
      "height": 24,
      "angle": 0,
      "strokeColor": "#1e1e1e",
      "backgroundColor": "transparent",
      "fillStyle": "solid",
      "strokeWidth": 1,
      "strokeStyle": "solid",
      "roughness": 0,
      "opacity": 100,
      "groupIds": [],
      "frameId": null,
      "index": null,
      "roundness": {
        "type": 3
      },
      "seed": 337637491,
      "version": 1,
      "versionNonce": 1382239179,
      "isDeleted": false,
      "boundElements": [],
      "updated": 0,
      "link": null,
      "locked": false,
      "fontSize": 13,
      "fontFamily": 5,
      "text": "Cookie raw = Header raw",
      "textAlign": "center",
      "verticalAlign": "middle",
      "containerId": null,
      "originalText": "Cookie raw = Header raw",
      "autoResize": true,
      "lineHeight": 1.25
    },
    {
      "id": "edge-endpoint-to-masked-json",
      "type": "arrow",
      "x": 220.0,
      "y": 115.0,
      "width": 160.0,
      "height": 79.5,
      "angle": 0,
      "strokeColor": "#1e1e1e",
      "backgroundColor": "transparent",
      "fillStyle": "solid",
      "strokeWidth": 2,
      "strokeStyle": "solid",
      "roughness": 1,
      "opacity": 100,
      "groupIds": [],
      "frameId": null,
      "index": null,
      "roundness": null,
      "seed": 1241633364,
      "version": 1,
      "versionNonce": 795935518,
      "isDeleted": false,
      "boundElements": [],
      "updated": 0,
      "link": null,
      "locked": false,
      "points": [
        [
          0.0,
          79.5
        ],
        [
          80.0,
          79.5
        ],
        [
          80.0,
          0.0
        ],
        [
          160.0,
          0.0
        ]
      ],
      "lastCommittedPoint": null,
      "startBinding": {
        "elementId": "node-csrf-endpoint",
        "focus": 0,
        "gap": 4
      },
      "endBinding": {
        "elementId": "node-masked-json",
        "focus": 0,
        "gap": 4
      },
      "startArrowhead": null,
      "endArrowhead": "arrow",
      "elbowed": true
    },
    {
      "id": "edge-label-endpoint-to-masked-json",
      "type": "text",
      "x": 279.0,
      "y": 142.75,
      "width": 90,
      "height": 24,
      "angle": 0,
      "strokeColor": "#1e1e1e",
      "backgroundColor": "transparent",
      "fillStyle": "solid",
      "strokeWidth": 1,
      "strokeStyle": "solid",
      "roughness": 0,
      "opacity": 100,
      "groupIds": [],
      "frameId": null,
      "index": null,
      "roundness": {
        "type": 3
      },
      "seed": 367644097,
      "version": 1,
      "versionNonce": 1658155106,
      "isDeleted": false,
      "boundElements": [],
      "updated": 0,
      "link": null,
      "locked": false,
      "fontSize": 13,
      "fontFamily": 5,
      "text": "masked JSON",
      "textAlign": "center",
      "verticalAlign": "middle",
      "containerId": null,
      "originalText": "masked JSON",
      "autoResize": true,
      "lineHeight": 1.25
    },
    {
      "id": "edge-endpoint-to-raw-cookie",
      "type": "arrow",
      "x": 220.0,
      "y": 212.5,
      "width": 179.5,
      "height": 82.0,
      "angle": 0,
      "strokeColor": "#1e1e1e",
      "backgroundColor": "transparent",
      "fillStyle": "solid",
      "strokeWidth": 2,
      "strokeStyle": "solid",
      "roughness": 1,
      "opacity": 100,
      "groupIds": [],
      "frameId": null,
      "index": null,
      "roundness": null,
      "seed": 972011859,
      "version": 1,
      "versionNonce": 1702387953,
      "isDeleted": false,
      "boundElements": [],
      "updated": 0,
      "link": null,
      "locked": false,
      "points": [
        [
          0.0,
          0.0
        ],
        [
          89.75,
          0.0
        ],
        [
          89.75,
          82.0
        ],
        [
          179.5,
          82.0
        ]
      ],
      "lastCommittedPoint": null,
      "startBinding": {
        "elementId": "node-csrf-endpoint",
        "focus": 0,
        "gap": 4
      },
      "endBinding": {
        "elementId": "node-raw-cookie",
        "focus": 0,
        "gap": 4
      },
      "startArrowhead": null,
      "endArrowhead": "arrow",
      "elbowed": true
    },
    {
      "id": "edge-label-endpoint-to-raw-cookie",
      "type": "text",
      "x": 269.75,
      "y": 241.5,
      "width": 128,
      "height": 24,
      "angle": 0,
      "strokeColor": "#1e1e1e",
      "backgroundColor": "transparent",
      "fillStyle": "solid",
      "strokeWidth": 1,
      "strokeStyle": "solid",
      "roughness": 0,
      "opacity": 100,
      "groupIds": [],
      "frameId": null,
      "index": null,
      "roundness": {
        "type": 3
      },
      "seed": 909441863,
      "version": 1,
      "versionNonce": 329759881,
      "isDeleted": false,
      "boundElements": [],
      "updated": 0,
      "link": null,
      "locked": false,
      "fontSize": 13,
      "fontFamily": 5,
      "text": "Set-Cookie · raw",
      "textAlign": "center",
      "verticalAlign": "middle",
      "containerId": null,
      "originalText": "Set-Cookie · raw",
      "autoResize": true,
      "lineHeight": 1.25
    },
    {
      "id": "edge-masked-json-to-assembler",
      "type": "arrow",
      "x": 600.0,
      "y": 115.0,
      "width": 160.0,
      "height": 79.5,
      "angle": 0,
      "strokeColor": "#1e1e1e",
      "backgroundColor": "transparent",
      "fillStyle": "solid",
      "strokeWidth": 2,
      "strokeStyle": "solid",
      "roughness": 1,
      "opacity": 100,
      "groupIds": [],
      "frameId": null,
      "index": null,
      "roundness": null,
      "seed": 1214135570,
      "version": 1,
      "versionNonce": 472532934,
      "isDeleted": false,
      "boundElements": [],
      "updated": 0,
      "link": null,
      "locked": false,
      "points": [
        [
          0.0,
          0.0
        ],
        [
          80.0,
          0.0
        ],
        [
          80.0,
          79.5
        ],
        [
          160.0,
          79.5
        ]
      ],
      "lastCommittedPoint": null,
      "startBinding": {
        "elementId": "node-masked-json",
        "focus": 0,
        "gap": 4
      },
      "endBinding": {
        "elementId": "node-post-assembler",
        "focus": 0,
        "gap": 4
      },
      "startArrowhead": null,
      "endArrowhead": "arrow",
      "elbowed": true
    },
    {
      "id": "edge-label-masked-json-to-assembler",
      "type": "text",
      "x": 644.0,
      "y": 142.75,
      "width": 120,
      "height": 24,
      "angle": 0,
      "strokeColor": "#1e1e1e",
      "backgroundColor": "transparent",
      "fillStyle": "solid",
      "strokeWidth": 1,
      "strokeStyle": "solid",
      "roughness": 0,
      "opacity": 100,
      "groupIds": [],
      "frameId": null,
      "index": null,
      "roundness": {
        "type": 3
      },
      "seed": 200978920,
      "version": 1,
      "versionNonce": 1107821704,
      "isDeleted": false,
      "boundElements": [],
      "updated": 0,
      "link": null,
      "locked": false,
      "fontSize": 13,
      "fontFamily": 5,
      "text": "headerName only",
      "textAlign": "center",
      "verticalAlign": "middle",
      "containerId": null,
      "originalText": "headerName only",
      "autoResize": true,
      "lineHeight": 1.25
    },
    {
      "id": "edge-raw-cookie-to-assembler",
      "type": "arrow",
      "x": 580.5,
      "y": 212.5,
      "width": 179.5,
      "height": 82.0,
      "angle": 0,
      "strokeColor": "#1e1e1e",
      "backgroundColor": "transparent",
      "fillStyle": "solid",
      "strokeWidth": 2,
      "strokeStyle": "solid",
      "roughness": 1,
      "opacity": 100,
      "groupIds": [],
      "frameId": null,
      "index": null,
      "roundness": null,
      "seed": 1497085764,
      "version": 1,
      "versionNonce": 1398757375,
      "isDeleted": false,
      "boundElements": [],
      "updated": 0,
      "link": null,
      "locked": false,
      "points": [
        [
          0.0,
          82.0
        ],
        [
          89.75,
          82.0
        ],
        [
          89.75,
          0.0
        ],
        [
          179.5,
          0.0
        ]
      ],
      "lastCommittedPoint": null,
      "startBinding": {
        "elementId": "node-raw-cookie",
        "focus": 0,
        "gap": 4
      },
      "endBinding": {
        "elementId": "node-post-assembler",
        "focus": 0,
        "gap": 4
      },
      "startArrowhead": null,
      "endArrowhead": "arrow",
      "elbowed": true
    },
    {
      "id": "edge-label-raw-cookie-to-assembler",
      "type": "text",
      "x": 610.25,
      "y": 241.5,
      "width": 168,
      "height": 24,
      "angle": 0,
      "strokeColor": "#1e1e1e",
      "backgroundColor": "transparent",
      "fillStyle": "solid",
      "strokeWidth": 1,
      "strokeStyle": "solid",
      "roughness": 0,
      "opacity": 100,
      "groupIds": [],
      "frameId": null,
      "index": null,
      "roundness": {
        "type": 3
      },
      "seed": 1946436355,
      "version": 1,
      "versionNonce": 849590995,
      "isDeleted": false,
      "boundElements": [],
      "updated": 0,
      "link": null,
      "locked": false,
      "fontSize": 13,
      "fontFamily": 5,
      "text": "document.cookie · raw",
      "textAlign": "center",
      "verticalAlign": "middle",
      "containerId": null,
      "originalText": "document.cookie · raw",
      "autoResize": true,
      "lineHeight": 1.25
    },
    {
      "id": "node-csrf-endpoint",
      "type": "rectangle",
      "x": 70.0,
      "y": 171.5,
      "width": 150.0,
      "height": 64.0,
      "angle": 0,
      "strokeColor": "#1e1e1e",
      "backgroundColor": "#ffffff",
      "fillStyle": "solid",
      "strokeWidth": 2,
      "strokeStyle": "solid",
      "roughness": 1,
      "opacity": 100,
      "groupIds": [],
      "frameId": null,
      "index": null,
      "roundness": {
        "type": 3
      },
      "seed": 984730913,
      "version": 1,
      "versionNonce": 1093344604,
      "isDeleted": false,
      "boundElements": [],
      "updated": 0,
      "link": null,
      "locked": false
    },
    {
      "id": "node-label-csrf-endpoint",
      "type": "text",
      "x": 80.0,
      "y": 181.5,
      "width": 130.0,
      "height": 44.0,
      "angle": 0,
      "strokeColor": "#1e1e1e",
      "backgroundColor": "transparent",
      "fillStyle": "solid",
      "strokeWidth": 1,
      "strokeStyle": "solid",
      "roughness": 0,
      "opacity": 100,
      "groupIds": [],
      "frameId": null,
      "index": null,
      "roundness": {
        "type": 3
      },
      "seed": 1042231595,
      "version": 1,
      "versionNonce": 1571377378,
      "isDeleted": false,
      "boundElements": [],
      "updated": 0,
      "link": null,
      "locked": false,
      "fontSize": 15,
      "fontFamily": 5,
      "text": "BFF · /bff/csrf",
      "textAlign": "center",
      "verticalAlign": "middle",
      "containerId": null,
      "originalText": "BFF · /bff/csrf",
      "autoResize": true,
      "lineHeight": 1.25
    },
    {
      "id": "node-masked-json",
      "type": "rectangle",
      "x": 380.0,
      "y": 60.0,
      "width": 220.0,
      "height": 110.0,
      "angle": 0,
      "strokeColor": "#1e1e1e",
      "backgroundColor": "#ffffff",
      "fillStyle": "solid",
      "strokeWidth": 2,
      "strokeStyle": "solid",
      "roughness": 1,
      "opacity": 100,
      "groupIds": [],
      "frameId": null,
      "index": null,
      "roundness": {
        "type": 3
      },
      "seed": 650571311,
      "version": 1,
      "versionNonce": 1000688126,
      "isDeleted": false,
      "boundElements": [],
      "updated": 0,
      "link": null,
      "locked": false
    },
    {
      "id": "node-label-masked-json",
      "type": "text",
      "x": 390.0,
      "y": 70.0,
      "width": 200.0,
      "height": 90.0,
      "angle": 0,
      "strokeColor": "#1e1e1e",
      "backgroundColor": "transparent",
      "fillStyle": "solid",
      "strokeWidth": 1,
      "strokeStyle": "solid",
      "roughness": 0,
      "opacity": 100,
      "groupIds": [],
      "frameId": null,
      "index": null,
      "roundness": {
        "type": 3
      },
      "seed": 807523454,
      "version": 1,
      "versionNonce": 1583912655,
      "isDeleted": false,
      "boundElements": [],
      "updated": 0,
      "link": null,
      "locked": false,
      "fontSize": 15,
      "fontFamily": 5,
      "text": "JSON body · masked\ntoken = XOR/Base64\nheaderName metadata\nPOST token 값으로 미사용",
      "textAlign": "center",
      "verticalAlign": "middle",
      "containerId": null,
      "originalText": "JSON body · masked\ntoken = XOR/Base64\nheaderName metadata\nPOST token 값으로 미사용",
      "autoResize": true,
      "lineHeight": 1.25
    },
    {
      "id": "node-raw-cookie",
      "type": "rectangle",
      "x": 399.5,
      "y": 242.0,
      "width": 181.0,
      "height": 105.0,
      "angle": 0,
      "strokeColor": "#1e1e1e",
      "backgroundColor": "#ffffff",
      "fillStyle": "solid",
      "strokeWidth": 2,
      "strokeStyle": "solid",
      "roughness": 1,
      "opacity": 100,
      "groupIds": [],
      "frameId": null,
      "index": null,
      "roundness": {
        "type": 3
      },
      "seed": 754250876,
      "version": 1,
      "versionNonce": 800528172,
      "isDeleted": false,
      "boundElements": [],
      "updated": 0,
      "link": null,
      "locked": false
    },
    {
      "id": "node-label-raw-cookie",
      "type": "text",
      "x": 409.5,
      "y": 252.0,
      "width": 161.0,
      "height": 85.0,
      "angle": 0,
      "strokeColor": "#1e1e1e",
      "backgroundColor": "transparent",
      "fillStyle": "solid",
      "strokeWidth": 1,
      "strokeStyle": "solid",
      "roughness": 0,
      "opacity": 100,
      "groupIds": [],
      "frameId": null,
      "index": null,
      "roundness": {
        "type": 3
      },
      "seed": 363576130,
      "version": 1,
      "versionNonce": 808943536,
      "isDeleted": false,
      "boundElements": [],
      "updated": 0,
      "link": null,
      "locked": false,
      "fontSize": 15,
      "fontFamily": 5,
      "text": "Browser cookie · raw\nXSRF-TOKEN\nJavaScript-readable\n실제 header data source",
      "textAlign": "center",
      "verticalAlign": "middle",
      "containerId": null,
      "originalText": "Browser cookie · raw\nXSRF-TOKEN\nJavaScript-readable\n실제 header data source",
      "autoResize": true,
      "lineHeight": 1.25
    },
    {
      "id": "node-post-assembler",
      "type": "rectangle",
      "x": 760.0,
      "y": 151.0,
      "width": 230.0,
      "height": 105.0,
      "angle": 0,
      "strokeColor": "#1e1e1e",
      "backgroundColor": "#ffffff",
      "fillStyle": "solid",
      "strokeWidth": 2,
      "strokeStyle": "solid",
      "roughness": 1,
      "opacity": 100,
      "groupIds": [],
      "frameId": null,
      "index": null,
      "roundness": {
        "type": 3
      },
      "seed": 1624016171,
      "version": 1,
      "versionNonce": 1299949724,
      "isDeleted": false,
      "boundElements": [],
      "updated": 0,
      "link": null,
      "locked": false
    },
    {
      "id": "node-label-post-assembler",
      "type": "text",
      "x": 770.0,
      "y": 161.0,
      "width": 210.0,
      "height": 85.0,
      "angle": 0,
      "strokeColor": "#1e1e1e",
      "backgroundColor": "transparent",
      "fillStyle": "solid",
      "strokeWidth": 1,
      "strokeStyle": "solid",
      "roughness": 0,
      "opacity": 100,
      "groupIds": [],
      "frameId": null,
      "index": null,
      "roundness": {
        "type": 3
      },
      "seed": 1469453706,
      "version": 1,
      "versionNonce": 539214682,
      "isDeleted": false,
      "boundElements": [],
      "updated": 0,
      "link": null,
      "locked": false,
      "fontSize": 15,
      "fontFamily": 5,
      "text": "SPA POST 조립\nCookie 자동 첨부\ndocument.cookie raw → header\nJSON headerName만 사용",
      "textAlign": "center",
      "verticalAlign": "middle",
      "containerId": null,
      "originalText": "SPA POST 조립\nCookie 자동 첨부\ndocument.cookie raw → header\nJSON headerName만 사용",
      "autoResize": true,
      "lineHeight": 1.25
    },
    {
      "id": "node-csrf-filter",
      "type": "rectangle",
      "x": 1150.0,
      "y": 151.0,
      "width": 216.0,
      "height": 105.0,
      "angle": 0,
      "strokeColor": "#1e1e1e",
      "backgroundColor": "#ffffff",
      "fillStyle": "solid",
      "strokeWidth": 2,
      "strokeStyle": "solid",
      "roughness": 1,
      "opacity": 100,
      "groupIds": [],
      "frameId": null,
      "index": null,
      "roundness": {
        "type": 3
      },
      "seed": 1449308597,
      "version": 1,
      "versionNonce": 456209351,
      "isDeleted": false,
      "boundElements": [],
      "updated": 0,
      "link": null,
      "locked": false
    },
    {
      "id": "node-label-csrf-filter",
      "type": "text",
      "x": 1160.0,
      "y": 161.0,
      "width": 196.0,
      "height": 85.0,
      "angle": 0,
      "strokeColor": "#1e1e1e",
      "backgroundColor": "transparent",
      "fillStyle": "solid",
      "strokeWidth": 1,
      "strokeStyle": "solid",
      "roughness": 0,
      "opacity": 100,
      "groupIds": [],
      "frameId": null,
      "index": null,
      "roundness": {
        "type": 3
      },
      "seed": 399971796,
      "version": 1,
      "versionNonce": 1957873210,
      "isDeleted": false,
      "boundElements": [],
      "updated": 0,
      "link": null,
      "locked": false,
      "fontSize": 15,
      "fontFamily": 5,
      "text": "Spring CSRF filter\nraw cookie = raw header 비교\n일치 → controller\n부재·불일치 → 403",
      "textAlign": "center",
      "verticalAlign": "middle",
      "containerId": null,
      "originalText": "Spring CSRF filter\nraw cookie = raw header 비교\n일치 → controller\n부재·불일치 → 403",
      "autoResize": true,
      "lineHeight": 1.25
    }
  ],
  "appState": {
    "gridSize": 10,
    "viewBackgroundColor": "#ffffff",
    "currentItemFontFamily": 5
  },
  "files": {}
}