DongHyeonkaandClaude Opus 5
b2963105a8
The keycloak project ended with four open questions that design could not
settle. A two-VM lab was built to answer them by measurement, and this is
that material: 26 experiments, 125 raw command outputs, 22 browser captures.
Follows the import procedure in README.md.
source/ the originating repository verbatim — 78 documents, 28 SVGs,
8 manifests, plus .source-revision recording the commit
final/ the SSOT
document.md 729 lines written from the 29 experiment documents, not
concatenated: what was predicted, what was measured, and
where the measurement itself was wrong
evidence/raw 125 outputs, flattened to <experiment>__<file> because
the originals collided (01-baseline.txt appeared three
times) and the audit only globs the top level
evidence/meta one per raw file; command and exitCode are null and the
README says why rather than inventing them
evidence/browser 22 captures
assets/ three diagrams through techviz
.techviz/ their VizSpecs
A separate project rather than an addition to keycloak: the B-layer answers
that project's four questions, but the A, C and D layers are about cluster
failure, SSO and operations, and one document.md should hold one subject.
The four question records there can point here through 관계.
Recorded rather than papered over: only three of the 28 diagrams were
remade. The repository forbids hand-drawn SVG and forbids titles inside the
canvas; all 28 originals carry both, so converting them is redrawing, not
reformatting. They stay in source/ and the gap is written into the document.
verify-pipeline.py passes. audit-records.py reports no issues.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
53 lines
2.0 KiB
Plaintext
53 lines
2.0 KiB
Plaintext
===================================================================
|
|
실험 0 — 한 노드에서 만든 세션이 다른 노드에서 쓰이는가
|
|
===================================================================
|
|
|
|
### 사전 확인: 클러스터가 2 멤버로 형성되었는가
|
|
2026-09-04 00:52:09,294 INFO [org.infinispan.CLUSTER] (executor-thread-1) ISPN000094: Received new cluster view for channel ISPN: [keycloak-1-48749(v=16.0.12)|5] (2) [keycloak-1-48749(v=16.0.12), keycloak-0-30843(v=16.0.12)]
|
|
name | ip | coord
|
|
------------------+-----------------+-------
|
|
keycloak-1-48749 | 10.42.0.35:7800 | t
|
|
keycloak-0-30843 | 10.42.1.43:7800 | f
|
|
(2 rows)
|
|
|
|
|
|
수집 시각: 2026-09-04 09:54:29 KST
|
|
|
|
=== 대상 ===
|
|
keycloak-0 10.42.1.43 kc-lab-2
|
|
keycloak-1 10.42.0.35 kc-lab-1
|
|
|
|
=== [0] 실험 전 DB 세션 ===
|
|
|
|
=== [1] keycloak-0 에서 로그인 ===
|
|
sid jiv3rVZi1VeaO07oVJkL_MYW
|
|
sub None
|
|
iss https://auth.hyeonworks.com/realms/master
|
|
access 수명 60초
|
|
refresh 수명 1800초 typ=Refresh
|
|
refresh jti 7669cc49-4778-851f-3c49-65f76964ae8e
|
|
|
|
=== [3] 같은 sid 가 두 노드 모두에서 보이는가 ===
|
|
keycloak-0 (발급 노드) 세션 2개 중 대상 sid → 보임 ✔
|
|
ipAddress=10.42.1.44 start=1788483164000 lastAccess=1788483164000
|
|
keycloak-1 (반대편) 세션 2개 중 대상 sid → 보임 ✔
|
|
ipAddress=10.42.1.44 start=1788483164000 lastAccess=1788483164000
|
|
|
|
=== [5] keycloak-0 이 발급한 refresh token 을 keycloak-1 에 사용 ===
|
|
HTTP 200 ← 기대대로
|
|
새 토큰의 sid → 동일 ✔
|
|
|
|
=== [6] keycloak-1 을 통해 로그아웃 ===
|
|
http_code=204
|
|
|
|
=== [7] 로그아웃 후 keycloak-0 에서 갱신 시도 (무효화 전파) ===
|
|
HTTP 400 ← 기대대로
|
|
error invalid_grant
|
|
error_description Session not active
|
|
|
|
=== [8] PostgreSQL 에서 그 sid 를 직접 확인 ===
|
|
대상 sid: jiv3rVZi1VeaO07oVJkL_MYW
|
|
행 없음 — 로그아웃으로 삭제되었다
|
|
|
|
전체 세션 수: 1
|