DongHyeonkaandClaude Opus 5
b2963105a8
The keycloak project ended with four open questions that design could not
settle. A two-VM lab was built to answer them by measurement, and this is
that material: 26 experiments, 125 raw command outputs, 22 browser captures.
Follows the import procedure in README.md.
source/ the originating repository verbatim — 78 documents, 28 SVGs,
8 manifests, plus .source-revision recording the commit
final/ the SSOT
document.md 729 lines written from the 29 experiment documents, not
concatenated: what was predicted, what was measured, and
where the measurement itself was wrong
evidence/raw 125 outputs, flattened to <experiment>__<file> because
the originals collided (01-baseline.txt appeared three
times) and the audit only globs the top level
evidence/meta one per raw file; command and exitCode are null and the
README says why rather than inventing them
evidence/browser 22 captures
assets/ three diagrams through techviz
.techviz/ their VizSpecs
A separate project rather than an addition to keycloak: the B-layer answers
that project's four questions, but the A, C and D layers are about cluster
failure, SSO and operations, and one document.md should hold one subject.
The four question records there can point here through 관계.
Recorded rather than papered over: only three of the 28 diagrams were
remade. The repository forbids hand-drawn SVG and forbids titles inside the
canvas; all 28 originals carry both, so converting them is redrawing, not
reformatting. They stay in source/ and the gap is written into the document.
verify-pipeline.py passes. audit-records.py reports no issues.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
121 lines
21 KiB
XML
121 lines
21 KiB
XML
<svg xmlns="http://www.w3.org/2000/svg" width="1200" height="2086" viewBox="0 0 1200 2086" role="img">
|
|
<title>terminal evidence</title>
|
|
<desc>Terminal-style rendering generated from retained command output. Sensitive-looking values are redacted in the visual asset.</desc>
|
|
<rect x="1" y="1" width="1198" height="2084" rx="14" fill="#0d1117" stroke="#30363d"/>
|
|
<rect x="1" y="1" width="1198" height="44" rx="14" fill="#161b22"/>
|
|
<rect x="1" y="30" width="1198" height="14" fill="#161b22"/>
|
|
<circle cx="24" cy="22" r="6" fill="#ff5f57"/>
|
|
<circle cx="44" cy="22" r="6" fill="#febc2e"/>
|
|
<circle cx="64" cy="22" r="6" fill="#28c840"/>
|
|
<text x="92" y="27" fill="#8b949e" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace">terminal evidence</text>
|
|
<text x="24" y="68" fill="#c9d1d9" font-size="15" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">$ set -e
|
|
set -o pipefail
|
|
P=adapter/outbound/notification/src/main/java/dev/caskeleton/adapter/outbound/notification
|
|
AC=a</tspan><tspan x="24" dy="22">pplication-core/src/main/java/dev/caskeleton/application/notification/platform
|
|
echo "# 지운다고 약속하는 쪽 — 핸들"
|
|
gre</tspan><tspan x="24" dy="22">p -n 'operation-scoped mutable secret copy\|Arrays.fill(bytes, (byte) 0)\|Arrays.fill(characters' $P/provider/Notificati</tspan><tspan x="24" dy="22">onSecretMaterialHandle.java
|
|
echo " 그 핸들을 받는 인터페이스의 구현 — 이름 있는 것과 익명인 것"
|
|
{ grep -rn 'implements</tspan><tspan x="24" dy="22"> NotificationProviderAttemptClient\|new NotificationProviderAttemptClient()' \
|
|
--include=*.java . --exclude-dir=build </tspan><tspan x="24" dy="22">| grep -v 'ReconciliationReference' || echo " (일치 0)"; } \
|
|
| sed -E 's#^[^:]*/src/(main|test)/[^:]*/([^:/]+):# </tspan><tspan x="24" dy="22"> \1 · \2:#'
|
|
echo
|
|
echo "# 서명 자리에 실제로 오는 쪽 — 자격증명 관리자"
|
|
grep -n -A3 'public byte\[\] materialFor(' $P/p</tspan><tspan x="24" dy="22">latform/security/ProviderCredentialManager.java | head -10
|
|
grep -n 'material = material.clone();\|return material.clone(</tspan><tspan x="24" dy="22">);' $AC/security/SecretKeyMaterial.java
|
|
echo
|
|
echo "# 그 사본을 서명 자리로 넘기는 자리"
|
|
grep -rn 'credentials.materialFo</tspan><tspan x="24" dy="22">r(' --include=*.java $P --exclude-dir=build \
|
|
| sed -E 's#^[^:]*/notification/([^:]*/)?([^:/]+):#\2:#'
|
|
echo
|
|
echo "# 그</tspan><tspan x="24" dy="22"> 사본을 문자열로 올리는 자리"
|
|
grep -rn -A2 'new String(' --include=*.java $P --exclude-dir=build \
|
|
| grep -iE 'secretA</tspan><tspan x="24" dy="22">ccessKey|authToken|materialFor' \
|
|
| sed -E 's#^[^:]*/notification/([^:]*/)?([^:/]+)([:-])#\2\3#'
|
|
echo
|
|
echo "# 그 문자</tspan><tspan x="24" dy="22">열이 다시 키 명세로 들어가는 자리"
|
|
grep -n 'byte\[\] key =\|mac.init(new SecretKeySpec(key' $P/platform/provider/ses/Aws</tspan><tspan x="24" dy="22">SignatureV4Signer.java
|
|
echo
|
|
echo "# 복제를 받는 다른 길 — 비밀 자재 제공자 직접 조회 (수신자 이름이 아니라 메서드로 찾</tspan><tspan x="24" dy="22">는다)"
|
|
grep -rnE '\.(activeKey|keyById)\(' --include=*.java $P --exclude-dir=build \
|
|
| sed -E 's#^[^:]*/notification/(</tspan><tspan x="24" dy="22">[^:]*/)?([^:/]+):#\2:#'
|
|
echo -n " 그중 자격증명 관리자 자신의 줄 : "
|
|
grep -rnE '\.(activeKey|keyById)\(' --include=*.ja</tspan><tspan x="24" dy="22">va $P/platform/security/ProviderCredentialManager.java | wc -l
|
|
echo
|
|
echo "# 제공자 자격증명 목적을 푸는 자리"
|
|
grep -rn '</tspan><tspan x="24" dy="22">purpose() != SecretPurpose.PROVIDER_CREDENTIAL' --include=*.java $P --exclude-dir=build \
|
|
| sed -E 's#^[^:]*/notificat</tspan><tspan x="24" dy="22">ion/([^:]*/)?([^:/]+):#\2:#'
|
|
echo -n " 그 목적을 검사 없이 바로 조회하는 자리 : "
|
|
{ grep -rn 'activeKey(SecretPurpose.P</tspan><tspan x="24" dy="22">ROVIDER_CREDENTIAL)' --include=*.java $P --exclude-dir=build \
|
|
| grep -v '^\s*\*' || echo "(일치 0)"; } | head -3
|
|
echo</tspan><tspan x="24" dy="22">
|
|
echo "# 서명 검증기가 쓰는 것은 다른 목적의 비밀이다"
|
|
grep -n 'callbackSigningKeyRef\|SecretPurpose.CALLBACK_SIGNING' $</tspan><tspan x="24" dy="22">P/platform/provider/twilio/TwilioCallbackAdapter.java
|
|
grep -n 'PROVIDER_CREDENTIAL\|CALLBACK_SIGNING' $AC/security/Secre</tspan><tspan x="24" dy="22">tPurpose.java
|
|
</tspan></text>
|
|
<text x="24" y="574" fill="#8b949e" font-size="13" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">cwd: /shared/codebase/clean-architecture-backend-template/src</tspan></text>
|
|
<text x="24" y="596" fill="#8b949e" font-size="13" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">time: 2026-09-02T19:12:29+00:00 · exit 0</tspan></text>
|
|
<line x1="24" y1="610" x2="1176" y2="610" stroke="#30363d"/>
|
|
<text x="24" y="650" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"># 지운다고 약속하는 쪽 — 핸들</tspan></text>
|
|
<text x="24" y="672" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">7:/** Versioned operation-scoped mutable secret copy that wipes itself on close. */</tspan></text>
|
|
<text x="24" y="694" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">63: Arrays.fill(bytes, (byte) 0);</tspan></text>
|
|
<text x="24" y="716" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">66: Arrays.fill(characters, '\0');</tspan></text>
|
|
<text x="24" y="738" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"> 그 핸들을 받는 인터페이스의 구현 — 이름 있는 것과 익명인 것</tspan></text>
|
|
<text x="24" y="760" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"> test · NotificationReconciliationAdapterTest.java:49: new NotificationProviderAttemptClient() {</tspan></text>
|
|
<text x="24" y="782" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"> test · NotificationReconciliationAdapterTest.java:164: implements NotificationProviderAttemptClient {</tspan></text>
|
|
<text x="24" y="804" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"> test · NotificationProviderAttemptContractTest.java:56: new NotificationProviderAttemptClient() {</tspan></text>
|
|
<text x="24" y="826" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"> test · NotificationProviderAttemptContractTest.java:100: new NotificationProviderAttemptClient() {</tspan></text>
|
|
<text x="24" y="848" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"> test · NotificationProviderAttemptContractTest.java:121: new NotificationProviderAttemptClient() {</tspan></text>
|
|
<text x="24" y="870" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"> test · NotificationProviderAttemptContractTest.java:163: new NotificationProviderAttemptClient() {</tspan></text>
|
|
<text x="24" y="892" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"> test · InlineNotificationAttemptAdapterTest.java:19: new NotificationProviderAttemptClient() {</tspan></text>
|
|
<text x="24" y="914" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"></tspan></text>
|
|
<text x="24" y="936" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"># 서명 자리에 실제로 오는 쪽 — 자격증명 관리자</tspan></text>
|
|
<text x="24" y="958" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">145: public byte[] materialFor(ProviderProfileId profileId, long generation) {</tspan></text>
|
|
<text x="24" y="980" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">146- Objects.requireNonNull(profileId, "profileId");</tspan></text>
|
|
<text x="24" y="1002" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">147- CredentialGeneration active = current.get(profileId);</tspan></text>
|
|
<text x="24" y="1024" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">148- if (active == null) {</tspan></text>
|
|
<text x="24" y="1046" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">20: material = material.clone();</tspan></text>
|
|
<text x="24" y="1068" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">25: return material.clone();</tspan></text>
|
|
<text x="24" y="1090" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"></tspan></text>
|
|
<text x="24" y="1112" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"># 그 사본을 서명 자리로 넘기는 자리</tspan></text>
|
|
<text x="24" y="1134" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">SesNotificationProviderAdapter.java:136: credentials.materialFor(</tspan></text>
|
|
<text x="24" y="1156" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">TwilioSmsProviderAdapter.java:98: credentials.materialFor(</tspan></text>
|
|
<text x="24" y="1178" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">TwilioReconciliationCapability.java:125: credentials.materialFor(</tspan></text>
|
|
<text x="24" y="1200" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"></tspan></text>
|
|
<text x="24" y="1222" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"># 그 사본을 문자열로 올리는 자리</tspan></text>
|
|
<text x="24" y="1244" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">AwsSignatureV4Signer.java:118: ("AWS4" + new String(secretAccessKey, StandardCharsets.UTF_8))</tspan></text>
|
|
<text x="24" y="1266" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">TwilioRequestMapper.java:44: (properties.accountSid() + ":" + new String(authToken, StandardCharsets.UTF_8))</tspan></text>
|
|
<text x="24" y="1288" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">TwilioReconciliationCapability.java-125- credentials.materialFor(</tspan></text>
|
|
<text x="24" y="1310" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"></tspan></text>
|
|
<text x="24" y="1332" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"># 그 문자열이 다시 키 명세로 들어가는 자리</tspan></text>
|
|
<text x="24" y="1354" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">117: byte[] key =</tspan></text>
|
|
<text x="24" y="1376" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">129: mac.init(new SecretKeySpec(key, "HmacSHA256"));</tspan></text>
|
|
<text x="24" y="1398" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"></tspan></text>
|
|
<text x="24" y="1420" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"># 복제를 받는 다른 길 — 비밀 자재 제공자 직접 조회 (수신자 이름이 아니라 메서드로 찾는다)</tspan></text>
|
|
<text x="24" y="1442" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">AesGcmNotificationPayloadProtection.java:80: SecretKeyMaterial key = secrets.activeKey(SecretPurpose.PAYLOAD_ENCRYPTION);</tspan></text>
|
|
<text x="24" y="1464" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">AesGcmNotificationPayloadProtection.java:133: SecretKeyMaterial key = secrets.keyById(keyId);</tspan></text>
|
|
<text x="24" y="1486" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">AesGcmContactPointProtector.java:67: SecretKeyMaterial lookup = keys.activeKey(SecretPurpose.CONTACT_LOOKUP_HMAC);</tspan></text>
|
|
<text x="24" y="1508" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">AesGcmContactPointProtector.java:89: SecretKeyMaterial key = keys.keyById(protectedValue.keyId());</tspan></text>
|
|
<text x="24" y="1530" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">AesGcmContactPointProtector.java:103: keys.activeKey(SecretPurpose.CONTACT_LOOKUP_HMAC), value.type(), value.normalized()</tspan><tspan x="24" dy="22">);</tspan></text>
|
|
<text x="24" y="1574" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">AesGcmContactPointProtector.java:107: SecretKeyMaterial encryption = keys.activeKey(SecretPurpose.CONTACT_ENCRYPTION);</tspan></text>
|
|
<text x="24" y="1596" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">AesGcmCallbackPayloadProtection.java:138: secrets.activeKey(SecretPurpose.CALLBACK_FINGERPRINT_HMAC).material(), "H</tspan><tspan x="24" dy="22">macSHA256"));</tspan></text>
|
|
<text x="24" y="1640" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">HmacProviderRequestIdHasher.java:44: secrets.activeKey(SecretPurpose.PROVIDER_REQUEST_LOOKUP_HMAC).material(),</tspan></text>
|
|
<text x="24" y="1662" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">ProviderCredentialManager.java:198: SecretKeyMaterial key = secrets.keyById(generation.keyId());</tspan></text>
|
|
<text x="24" y="1684" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">ProviderCredentialManager.java:223: SecretKeyMaterial key = secrets.keyById(generation.keyId());</tspan></text>
|
|
<text x="24" y="1706" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">VapidKeyRegistry.java:67: SecretKeyMaterial key = secrets.keyById(subscription.vapidKeyId());</tspan></text>
|
|
<text x="24" y="1728" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">TwilioCallbackAdapter.java:78: var key = secrets.keyById(properties.callbackSigningKeyRef());</tspan></text>
|
|
<text x="24" y="1750" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">WebhookNotificationProviderAdapter.java:220: var key = secrets.keyById(subscription.signingKeyRef().orElseThrow());</tspan></text>
|
|
<text x="24" y="1772" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"> 그중 자격증명 관리자 자신의 줄 : 2</tspan></text>
|
|
<text x="24" y="1794" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"></tspan></text>
|
|
<text x="24" y="1816" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"># 제공자 자격증명 목적을 푸는 자리</tspan></text>
|
|
<text x="24" y="1838" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">ProviderCredentialManager.java:199: if (key.purpose() != SecretPurpose.PROVIDER_CREDENTIAL) {</tspan></text>
|
|
<text x="24" y="1860" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">ProviderCredentialManager.java:224: if (key.purpose() != SecretPurpose.PROVIDER_CREDENTIAL) {</tspan></text>
|
|
<text x="24" y="1882" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"> 그 목적을 검사 없이 바로 조회하는 자리 : (일치 0)</tspan></text>
|
|
<text x="24" y="1904" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"></tspan></text>
|
|
<text x="24" y="1926" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"># 서명 검증기가 쓰는 것은 다른 목적의 비밀이다</tspan></text>
|
|
<text x="24" y="1948" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">73: * other, and a profile could not be rotated on its own. {@code callbackSigningKeyRef} is the</tspan></text>
|
|
<text x="24" y="1970" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">78: var key = secrets.keyById(properties.callbackSigningKeyRef());</tspan></text>
|
|
<text x="24" y="1992" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">79: if (key.purpose() != SecretPurpose.CALLBACK_SIGNING) {</tspan></text>
|
|
<text x="24" y="2014" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">13: CALLBACK_SIGNING,</tspan></text>
|
|
<text x="24" y="2036" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">14: PROVIDER_CREDENTIAL,</tspan></text>
|
|
</svg>
|