The keycloak project ended with four open questions that design could not
settle. A two-VM lab was built to answer them by measurement, and this is
that material: 26 experiments, 125 raw command outputs, 22 browser captures.
Follows the import procedure in README.md.
source/ the originating repository verbatim — 78 documents, 28 SVGs,
8 manifests, plus .source-revision recording the commit
final/ the SSOT
document.md 729 lines written from the 29 experiment documents, not
concatenated: what was predicted, what was measured, and
where the measurement itself was wrong
evidence/raw 125 outputs, flattened to <experiment>__<file> because
the originals collided (01-baseline.txt appeared three
times) and the audit only globs the top level
evidence/meta one per raw file; command and exitCode are null and the
README says why rather than inventing them
evidence/browser 22 captures
assets/ three diagrams through techviz
.techviz/ their VizSpecs
A separate project rather than an addition to keycloak: the B-layer answers
that project's four questions, but the A, C and D layers are about cluster
failure, SSO and operations, and one document.md should hold one subject.
The four question records there can point here through 관계.
Recorded rather than papered over: only three of the 28 diagrams were
remade. The repository forbids hand-drawn SVG and forbids titles inside the
canvas; all 28 originals carry both, so converting them is redrawing, not
reformatting. They stay in source/ and the gap is written into the document.
verify-pipeline.py passes. audit-records.py reports no issues.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
22 lines
2.5 KiB
XML
22 lines
2.5 KiB
XML
<svg xmlns="http://www.w3.org/2000/svg" width="880" height="196" viewBox="0 0 880 196" role="img">
|
|
<title>승인 검증이 도는 순서</title>
|
|
<desc>다이제스트 대조에서 윈도우로 일치가 건너가고 윈도우에서 서명 파싱으로 기간 안이 건너가고 서명 파싱에서 HMAC 으로 형식 통과가 건너간다.</desc>
|
|
<rect x="0" y="0" width="880" height="196" fill="#ffffff"/>
|
|
<defs><marker id="ar" viewBox="0 0 10 10" refX="9" refY="5" markerWidth="7" markerHeight="7" orient="auto-start-reverse"><path d="M0,0 L10,5 L0,10 z" fill="#374151"/></marker><pattern id="hx" width="7" height="7" patternUnits="userSpaceOnUse" patternTransform="rotate(45)"><line x1="0" y1="0" x2="0" y2="7" stroke="#9ca3af" stroke-width="2"/></pattern></defs>
|
|
<text x="28" y="40" font-family="system-ui,sans-serif" font-size="19" font-weight="600" fill="#111827">승인 검증이 도는 순서</text>
|
|
<rect x="28.0" y="104" width="150.5" height="58" rx="10" fill="#eef2ff" stroke="#374151" stroke-width="1.6"/>
|
|
<text x="103.2" y="138.0" text-anchor="middle" font-family="system-ui,sans-serif" font-size="13" fill="#111827">다이제스트 대조</text>
|
|
<rect x="252.5" y="104" width="150.5" height="58" rx="10" fill="#eef2ff" stroke="#374151" stroke-width="1.6"/>
|
|
<text x="327.8" y="138.0" text-anchor="middle" font-family="system-ui,sans-serif" font-size="13" fill="#111827">윈도우</text>
|
|
<rect x="477.0" y="104" width="150.5" height="58" rx="10" fill="#eef2ff" stroke="#374151" stroke-width="1.6"/>
|
|
<text x="552.2" y="138.0" text-anchor="middle" font-family="system-ui,sans-serif" font-size="13" fill="#111827">서명 파싱</text>
|
|
<rect x="701.5" y="104" width="150.5" height="58" rx="10" fill="#eef2ff" stroke="#374151" stroke-width="1.6"/>
|
|
<text x="776.8" y="138.0" text-anchor="middle" font-family="system-ui,sans-serif" font-size="13" fill="#111827">HMAC</text>
|
|
<line x1="184.5" y1="133" x2="246.5" y2="133" stroke="#374151" stroke-width="1.6" marker-end="url(#ar)"/>
|
|
<text x="215.5" y="92" text-anchor="middle" font-family="system-ui,sans-serif" font-size="13" fill="#6b7280">일치</text>
|
|
<line x1="409.0" y1="133" x2="471.0" y2="133" stroke="#374151" stroke-width="1.6" marker-end="url(#ar)"/>
|
|
<text x="440.0" y="92" text-anchor="middle" font-family="system-ui,sans-serif" font-size="13" fill="#6b7280">기간 안</text>
|
|
<line x1="633.5" y1="133" x2="695.5" y2="133" stroke="#374151" stroke-width="1.6" marker-end="url(#ar)"/>
|
|
<text x="664.5" y="92" text-anchor="middle" font-family="system-ui,sans-serif" font-size="13" fill="#6b7280">형식 통과</text>
|
|
</svg>
|