donghyeon.kang/technical-visualization-haness
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

chore: readme 수정

Browse Source
This commit is contained in:
DongHyeonka
2026-07-29 18:03:21 +09:00
parent 8daa568746
commit 741c79b69f
180 changed files with 62890 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.work/keycloak-four-patterns/final/assets/ap1-direct-architecture/ap1-direct-architecture.alt.md
+23
View File
@@ -0,0 +1,23 @@
# AP1은 OAuth client와 token custody를 브라우저에 둔다
## Alternative text
SPA, Keycloak, 브라우저 JavaScript memory, Resource Server가 왼쪽에서 오른쪽으로 연결된 AP1 직접 인증 아키텍처.
## Long description
왼쪽의 public SPA가 Keycloak과 Authorization Code 및 PKCE S256 계약을 수행한다. Keycloak token 응답의 access, refresh, ID token은 브라우저 JavaScript memory에 놓이며, 그중 access JWT가 오른쪽 Resource Server의 검증 입력이 된다. Resource Server는 issuer, 시간 제약과 keycloak-pattern-api audience를 검증한다.
## Elements and evidence
- **Public SPA** (service): Authorization Code와 PKCE를 직접 다루고 access JWT로 Resource Server를 호출하는 public OAuth client. Evidence: L144–L148.
- **Browser JS memory** (database): Access, refresh, ID token을 실행 중 보관하며 reload 뒤에는 복구하지 않는 browser-side custody. Evidence: L148–L150.
- **Keycloak** (service): SPA의 code 교환 상대이며 API가 검증하는 JWT 서명의 출처. Evidence: L144–L146.
- **Resource Server** (service): Access JWT의 issuer, 시간 제약과 audience를 검증하는 API. Evidence: L144–L150.
## Relationships
- **Keycloak → Public SPA:** access · refresh · ID token. Evidence: L144–L148.
- **Public SPA → Keycloak:** Authorization Code + PKCE S256. Evidence: L144–L146.
- **Public SPA → Browser JS memory:** token set 보관. Evidence: L148–L150.
- **Public SPA → Resource Server:** memory-held access JWT · Bearer. Evidence: L144–L150.
.work/keycloak-four-patterns/final/assets/ap1-direct-architecture/ap1-direct-architecture.d2
+19
View File
@@ -0,0 +1,19 @@
# AP1은 OAuth client와 token custody를 브라우저에 둔다
# Question: AP1에서 code 교환, token 보관, Resource Server JWT 입력은 어느 구성 요소에 놓이는가?
direction: right
n0: "Public SPA" {
shape: rectangle
}
n1: "Browser JS memory" {
shape: sql_table
}
n2: "Keycloak" {
shape: rectangle
}
n3: "Resource Server" {
shape: rectangle
}
n0 -> n2: "Authorization Code + PKCE S256"
n2 -> n0: "access · refresh · ID token"
n0 -> n1: "token set 보관"
n0 -> n3: "memory-held access JWT · Bearer"
.work/keycloak-four-patterns/final/assets/ap1-direct-architecture/ap1-direct-architecture.dot
+13
View File
@@ -0,0 +1,13 @@
digraph techviz {
graph [rankdir=LR, splines=ortho, nodesep=0.55, ranksep=0.85];
node [fontname=Helvetica, fontsize=11, margin="0.18,0.12", style="rounded,filled", fillcolor=white, color="#2d4357", penwidth=1.5];
edge [fontname=Helvetica, fontsize=10, color="#364b5f", penwidth=1.4, arrowsize=0.75];
n0 [label="Public SPA", shape=box, style="rounded,filled"];
n1 [label="Browser JS memory", shape=cylinder, style="rounded,filled"];
n2 [label="Keycloak", shape=box, style="rounded,filled"];
n3 [label="Resource Server", shape=box, style="rounded,filled"];
n0 -> n2 [label="Authorization Code + PKCE S256", style=solid];
n2 -> n0 [label="access · refresh · ID token", style=solid];
n0 -> n1 [label="token set 보관", style=solid];
n0 -> n3 [label="memory-held access JWT · Bearer", style=solid];
}
.work/keycloak-four-patterns/final/assets/ap1-direct-architecture/ap1-direct-architecture.drawio
+43
View File
@@ -0,0 +1,43 @@
<?xml version="1.0" encoding="UTF-8"?>
<mxfile host="app.diagrams.net" modified="2026-07-23T00:00:00.000Z" agent="techviz-harness" version="24.7.17" type="device">
<diagram id="ap1-direct-architecture" name="AP1은 OAuth client와 token custody를 브라우저에 둔다">
<mxGraphModel dx="680" dy="535" grid="1" gridSize="10" guides="1" tooltips="1" connect="1" arrows="1" fold="1" page="1" pageScale="1" pageWidth="827" pageHeight="1169" math="0" shadow="0">
<root>
<mxCell id="0"/>
<mxCell id="1" parent="0"/>
<mxCell id="n_browser-spa" value="Public SPA&lt;br/&gt;spa-public&lt;br/&gt;PKCE S256" tooltip="Authorization Code와 PKCE를 직접 다루고 access JWT로 Resource Server를 호출하는 public OAuth client. | Evidence: L144-L148" style="whiteSpace=wrap;html=1;rounded=1;strokeWidth=2;fontSize=14;fontStyle=1;fillColor=#ffffff;strokeColor=#2d4357;verticalAlign=middle;strokeColor=#2563eb;strokeWidth=2;" vertex="1" parent="1">
<mxGeometry x="70.0" y="208.0" width="150.0" height="88.0" as="geometry"/>
</mxCell>
<mxCell id="n_api-resource-server" value="Resource Server&lt;br/&gt;issuer · time&lt;br/&gt;keycloak-pattern-api audience" tooltip="Access JWT의 issuer, 시간 제약과 audience를 검증하는 API. | Evidence: L144-L150" style="whiteSpace=wrap;html=1;rounded=1;strokeWidth=2;fontSize=14;fontStyle=1;fillColor=#ffffff;strokeColor=#2d4357;verticalAlign=middle;" vertex="1" parent="1">
<mxGeometry x="380.0" y="60.0" width="237.0" height="88.0" as="geometry"/>
</mxCell>
<mxCell id="n_browser-token-memory" value="Browser JS memory&lt;br/&gt;access · refresh · ID token&lt;br/&gt;persistent Web Storage 없음" tooltip="Access, refresh, ID token을 실행 중 보관하며 reload 뒤에는 복구하지 않는 browser-side custody. | Evidence: L148-L150" style="whiteSpace=wrap;html=1;rounded=1;strokeWidth=2;fontSize=14;fontStyle=1;fillColor=#ffffff;strokeColor=#2d4357;verticalAlign=middle;shape=cylinder3;boundedLbl=1;backgroundOutline=1;fillColor=#eef6fb;" vertex="1" parent="1">
<mxGeometry x="387.0" y="220.0" width="223.0" height="88.0" as="geometry"/>
</mxCell>
<mxCell id="n_keycloak" value="Keycloak" tooltip="SPA의 code 교환 상대이며 API가 검증하는 JWT 서명의 출처. | Evidence: L144-L146" style="whiteSpace=wrap;html=1;rounded=1;strokeWidth=2;fontSize=14;fontStyle=1;fillColor=#ffffff;strokeColor=#2d4357;verticalAlign=middle;" vertex="1" parent="1">
<mxGeometry x="423.5" y="380.0" width="150.0" height="64.0" as="geometry"/>
</mxCell>
<mxCell id="e_keycloak-to-spa" value="access · refresh · ID token" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeWidth=2;endArrow=block;endFill=1;" edge="1" parent="1" source="n_keycloak" target="n_browser-spa">
<mxGeometry relative="1" as="geometry">
<mxPoint x="247.8" y="462.0" as="offset"/>
</mxGeometry>
</mxCell>
<mxCell id="e_spa-to-keycloak" value="Authorization Code + PKCE S256" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeWidth=2;endArrow=block;endFill=1;" edge="1" parent="1" source="n_browser-spa" target="n_keycloak">
<mxGeometry relative="1" as="geometry">
<mxPoint x="307.8" y="340.0" as="offset"/>
</mxGeometry>
</mxCell>
<mxCell id="e_spa-to-memory" value="token set 보관" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeWidth=2;endArrow=block;endFill=1;" edge="1" parent="1" source="n_browser-spa" target="n_browser-token-memory">
<mxGeometry relative="1" as="geometry">
<mxPoint x="327.5" y="253.5" as="offset"/>
</mxGeometry>
</mxCell>
<mxCell id="e_spa-to-resource-server" value="memory-held access JWT · Bearer" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeWidth=2;endArrow=block;endFill=1;" edge="1" parent="1" source="n_browser-spa" target="n_api-resource-server">
<mxGeometry relative="1" as="geometry">
<mxPoint x="324.0" y="164.5" as="offset"/>
</mxGeometry>
</mxCell>
</root>
</mxGraphModel>
</diagram>
</mxfile>
.work/keycloak-four-patterns/final/assets/ap1-direct-architecture/ap1-direct-architecture.excalidraw
+685
View File
@@ -0,0 +1,685 @@
{
"type": "excalidraw",
"version": 2,
"source": "techviz-harness",
"elements": [
{
"id": "edge-keycloak-to-spa",
"type": "arrow",
"x": 145.0,
"y": 296.0,
"width": 353.5,
"height": 194.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
"fillStyle": "solid",
"strokeWidth": 2,
"strokeStyle": "solid",
"roughness": 1,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": null,
"seed": 1472844691,
"version": 1,
"versionNonce": 1445012220,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false,
"points": [
[
353.5,
148.0
],
[
353.5,
194.0
],
[
0.0,
194.0
],
[
0.0,
0.0
]
],
"lastCommittedPoint": null,
"startBinding": {
"elementId": "node-keycloak",
"focus": 0,
"gap": 4
},
"endBinding": {
"elementId": "node-browser-spa",
"focus": 0,
"gap": 4
},
"startArrowhead": null,
"endArrowhead": "arrow",
"elbowed": true
},
{
"id": "edge-label-keycloak-to-spa",
"type": "text",
"x": 139.75,
"y": 450.0,
"width": 216,
"height": 24,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
"fillStyle": "solid",
"strokeWidth": 1,
"strokeStyle": "solid",
"roughness": 0,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": {
"type": 3
},
"seed": 1729196669,
"version": 1,
"versionNonce": 152659534,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false,
"fontSize": 13,
"fontFamily": 5,
"text": "access · refresh · ID token",
"textAlign": "center",
"verticalAlign": "middle",
"containerId": null,
"originalText": "access · refresh · ID token",
"autoResize": true,
"lineHeight": 1.25
},
{
"id": "edge-spa-to-keycloak",
"type": "arrow",
"x": 220.0,
"y": 279.0,
"width": 203.5,
"height": 142.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
"fillStyle": "solid",
"strokeWidth": 2,
"strokeStyle": "solid",
"roughness": 1,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": null,
"seed": 756098302,
"version": 1,
"versionNonce": 1103524562,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false,
"points": [
[
0.0,
0.0
],
[
111.75,
0.0
],
[
111.75,
142.0
],
[
203.5,
142.0
]
],
"lastCommittedPoint": null,
"startBinding": {
"elementId": "node-browser-spa",
"focus": 0,
"gap": 4
},
"endBinding": {
"elementId": "node-keycloak",
"focus": 0,
"gap": 4
},
"startArrowhead": null,
"endArrowhead": "arrow",
"elbowed": true
},
{
"id": "edge-label-spa-to-keycloak",
"type": "text",
"x": 187.75,
"y": 328.0,
"width": 240,
"height": 24,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
"fillStyle": "solid",
"strokeWidth": 1,
"strokeStyle": "solid",
"roughness": 0,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": {
"type": 3
},
"seed": 1982957731,
"version": 1,
"versionNonce": 1531007620,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false,
"fontSize": 13,
"fontFamily": 5,
"text": "Authorization Code + PKCE S256",
"textAlign": "center",
"verticalAlign": "middle",
"containerId": null,
"originalText": "Authorization Code + PKCE S256",
"autoResize": true,
"lineHeight": 1.25
},
{
"id": "edge-spa-to-memory",
"type": "arrow",
"x": 220.0,
"y": 243.0,
"width": 167.0,
"height": 21.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
"fillStyle": "solid",
"strokeWidth": 2,
"strokeStyle": "solid",
"roughness": 1,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": null,
"seed": 1073681399,
"version": 1,
"versionNonce": 1624154339,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false,
"points": [
[
0.0,
0.0
],
[
83.5,
0.0
],
[
83.5,
21.0
],
[
167.0,
21.0
]
],
"lastCommittedPoint": null,
"startBinding": {
"elementId": "node-browser-spa",
"focus": 0,
"gap": 4
},
"endBinding": {
"elementId": "node-browser-token-memory",
"focus": 0,
"gap": 4
},
"startArrowhead": null,
"endArrowhead": "arrow",
"elbowed": true
},
{
"id": "edge-label-spa-to-memory",
"type": "text",
"x": 279.5,
"y": 241.5,
"width": 96,
"height": 24,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
"fillStyle": "solid",
"strokeWidth": 1,
"strokeStyle": "solid",
"roughness": 0,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": {
"type": 3
},
"seed": 1169729373,
"version": 1,
"versionNonce": 142618791,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false,
"fontSize": 13,
"fontFamily": 5,
"text": "token set 보관",
"textAlign": "center",
"verticalAlign": "middle",
"containerId": null,
"originalText": "token set 보관",
"autoResize": true,
"lineHeight": 1.25
},
{
"id": "edge-spa-to-resource-server",
"type": "arrow",
"x": 220.0,
"y": 104.0,
"width": 160.0,
"height": 121.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
"fillStyle": "solid",
"strokeWidth": 2,
"strokeStyle": "solid",
"roughness": 1,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": null,
"seed": 307614412,
"version": 1,
"versionNonce": 900388795,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false,
"points": [
[
0.0,
121.0
],
[
80.0,
121.0
],
[
80.0,
0.0
],
[
160.0,
0.0
]
],
"lastCommittedPoint": null,
"startBinding": {
"elementId": "node-browser-spa",
"focus": 0,
"gap": 4
},
"endBinding": {
"elementId": "node-api-resource-server",
"focus": 0,
"gap": 4
},
"startArrowhead": null,
"endArrowhead": "arrow",
"elbowed": true
},
{
"id": "edge-label-spa-to-resource-server",
"type": "text",
"x": 200.0,
"y": 152.5,
"width": 248,
"height": 24,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
"fillStyle": "solid",
"strokeWidth": 1,
"strokeStyle": "solid",
"roughness": 0,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": {
"type": 3
},
"seed": 293757913,
"version": 1,
"versionNonce": 69180808,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false,
"fontSize": 13,
"fontFamily": 5,
"text": "memory-held access JWT · Bearer",
"textAlign": "center",
"verticalAlign": "middle",
"containerId": null,
"originalText": "memory-held access JWT · Bearer",
"autoResize": true,
"lineHeight": 1.25
},
{
"id": "node-browser-spa",
"type": "rectangle",
"x": 70.0,
"y": 208.0,
"width": 150.0,
"height": 88.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "#ffffff",
"fillStyle": "solid",
"strokeWidth": 2,
"strokeStyle": "solid",
"roughness": 1,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": {
"type": 3
},
"seed": 842662139,
"version": 1,
"versionNonce": 836393305,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false
},
{
"id": "node-label-browser-spa",
"type": "text",
"x": 80.0,
"y": 218.0,
"width": 130.0,
"height": 68.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
"fillStyle": "solid",
"strokeWidth": 1,
"strokeStyle": "solid",
"roughness": 0,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": {
"type": 3
},
"seed": 680410563,
"version": 1,
"versionNonce": 168315661,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false,
"fontSize": 15,
"fontFamily": 5,
"text": "Public SPA\nspa-public\nPKCE S256",
"textAlign": "center",
"verticalAlign": "middle",
"containerId": null,
"originalText": "Public SPA\nspa-public\nPKCE S256",
"autoResize": true,
"lineHeight": 1.25
},
{
"id": "node-api-resource-server",
"type": "rectangle",
"x": 380.0,
"y": 60.0,
"width": 237.0,
"height": 88.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "#ffffff",
"fillStyle": "solid",
"strokeWidth": 2,
"strokeStyle": "solid",
"roughness": 1,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": {
"type": 3
},
"seed": 1241561907,
"version": 1,
"versionNonce": 950374087,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false
},
{
"id": "node-label-api-resource-server",
"type": "text",
"x": 390.0,
"y": 70.0,
"width": 217.0,
"height": 68.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
"fillStyle": "solid",
"strokeWidth": 1,
"strokeStyle": "solid",
"roughness": 0,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": {
"type": 3
},
"seed": 138484242,
"version": 1,
"versionNonce": 528224855,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false,
"fontSize": 15,
"fontFamily": 5,
"text": "Resource Server\nissuer · time\nkeycloak-pattern-api audience",
"textAlign": "center",
"verticalAlign": "middle",
"containerId": null,
"originalText": "Resource Server\nissuer · time\nkeycloak-pattern-api audience",
"autoResize": true,
"lineHeight": 1.25
},
{
"id": "node-browser-token-memory",
"type": "rectangle",
"x": 387.0,
"y": 220.0,
"width": 223.0,
"height": 88.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "#e7f5ff",
"fillStyle": "solid",
"strokeWidth": 2,
"strokeStyle": "solid",
"roughness": 1,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": {
"type": 3
},
"seed": 59858893,
"version": 1,
"versionNonce": 1575317861,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false
},
{
"id": "node-label-browser-token-memory",
"type": "text",
"x": 397.0,
"y": 230.0,
"width": 203.0,
"height": 68.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
"fillStyle": "solid",
"strokeWidth": 1,
"strokeStyle": "solid",
"roughness": 0,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": {
"type": 3
},
"seed": 455722088,
"version": 1,
"versionNonce": 1442910370,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false,
"fontSize": 15,
"fontFamily": 5,
"text": "Browser JS memory\naccess · refresh · ID token\npersistent Web Storage 없음",
"textAlign": "center",
"verticalAlign": "middle",
"containerId": null,
"originalText": "Browser JS memory\naccess · refresh · ID token\npersistent Web Storage 없음",
"autoResize": true,
"lineHeight": 1.25
},
{
"id": "node-keycloak",
"type": "rectangle",
"x": 423.5,
"y": 380.0,
"width": 150.0,
"height": 64.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "#ffffff",
"fillStyle": "solid",
"strokeWidth": 2,
"strokeStyle": "solid",
"roughness": 1,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": {
"type": 3
},
"seed": 819278378,
"version": 1,
"versionNonce": 1725278844,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false
},
{
"id": "node-label-keycloak",
"type": "text",
"x": 433.5,
"y": 390.0,
"width": 130.0,
"height": 44.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
"fillStyle": "solid",
"strokeWidth": 1,
"strokeStyle": "solid",
"roughness": 0,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": {
"type": 3
},
"seed": 1265230567,
"version": 1,
"versionNonce": 1115669911,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false,
"fontSize": 15,
"fontFamily": 5,
"text": "Keycloak",
"textAlign": "center",
"verticalAlign": "middle",
"containerId": null,
"originalText": "Keycloak",
"autoResize": true,
"lineHeight": 1.25
}
],
"appState": {
"gridSize": 10,
"viewBackgroundColor": "#ffffff",
"currentItemFontFamily": 5
},
"files": {}
}
.work/keycloak-four-patterns/final/assets/ap1-direct-architecture/ap1-direct-architecture.manifest.json
+32
View File
@@ -0,0 +1,32 @@
{
"harness_version": "0.2.0",
"spec_id": "ap1-direct-architecture",
"spec_version": "1.1",
"spec_sha256": "71f2cf1931f3be6908cf13db36577eb61cba8d4cdc863bd6057a8c9093fd0bcb",
"source_context": {
"document": "document.md",
"document_sha256": "df4d1a604c74e756672b5b40510abfedb8c67b39af280a5f51985ea9972f5371",
"anchor": {
"kind": "marker",
"value": "ap1-direct-architecture",
"line": 152
}
},
"outputs": [
"ap1-direct-architecture.svg",
"ap1-direct-architecture.drawio",
"ap1-direct-architecture.mmd",
"ap1-direct-architecture.d2",
"ap1-direct-architecture.dot",
"ap1-direct-architecture.excalidraw",
"ap1-direct-architecture.alt.md"
],
"lint_issue_count": 0,
"assumption_count": 0,
"assumptions_allowed": false,
"composition_profile": "component-flow",
"reference_ids": [
"payment-event-flow"
],
"diagram_only": true
}
.work/keycloak-four-patterns/final/assets/ap1-direct-architecture/ap1-direct-architecture.mmd
+11
View File
@@ -0,0 +1,11 @@
%% AP1은 OAuth client와 token custody를 브라우저에 둔다
%% question: AP1에서 code 교환, token 보관, Resource Server JWT 입력은 어느 구성 요소에 놓이는가?
flowchart LR
n0["Public SPA"]
n1[("Browser JS memory")]
n2["Keycloak"]
n3["Resource Server"]
n0 -->|"Authorization Code + PKCE S256"| n2
n2 -->|"access · refresh · ID token"| n0
n0 -->|"token set 보관"| n1
n0 -->|"memory-held access JWT · Bearer"| n3
.work/keycloak-four-patterns/final/assets/ap1-direct-architecture/ap1-direct-architecture.svg
+90
View File
@@ -0,0 +1,90 @@
<?xml version="1.0" encoding="UTF-8"?>
<svg xmlns="http://www.w3.org/2000/svg" width="680" height="535" viewBox="0 0 680 535" role="img" aria-labelledby="diagram-title diagram-description">
<title id="diagram-title">AP1은 OAuth client와 token custody를 브라우저에 둔다</title>
<desc id="diagram-description">왼쪽의 public SPA가 Keycloak과 Authorization Code 및 PKCE S256 계약을 수행한다. Keycloak token 응답의 access, refresh, ID token은 브라우저 JavaScript memory에 놓이며, 그중 access JWT가 오른쪽 Resource Server의 검증 입력이 된다. Resource Server는 issuer, 시간 제약과 keycloak-pattern-api audience를 검증한다.</desc>
<metadata>{&quot;techviz&quot;:{&quot;spec_version&quot;:&quot;1.1&quot;,&quot;id&quot;:&quot;ap1-direct-architecture&quot;,&quot;profile&quot;:&quot;component-flow&quot;},&quot;source_context&quot;:{&quot;document&quot;:&quot;document.md&quot;,&quot;document_sha256&quot;:&quot;df4d1a604c74e756672b5b40510abfedb8c67b39af280a5f51985ea9972f5371&quot;,&quot;anchor&quot;:{&quot;kind&quot;:&quot;marker&quot;,&quot;value&quot;:&quot;ap1-direct-architecture&quot;,&quot;line&quot;:152}},&quot;evidence_policy&quot;:&quot;Each factual element cites source lines or is marked assumption.&quot;,&quot;diagram_only&quot;:true}</metadata>
<defs>
<marker id="arrow" viewBox="0 0 10 10" refX="9" refY="5" markerWidth="7" markerHeight="7" orient="auto-start-reverse">
<path d="M 0 0 L 10 5 L 0 10 z" />
</marker>
<style>
:root { color-scheme: light; }
text { font-family: Inter, Pretendard, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif; fill: #111827; }
.canvas { fill: #ffffff; }
.group-box { fill: #ffffff; stroke: #9ca3af; stroke-width: 1.4; stroke-dasharray: 7 5; }
.group-label-bg { fill: #ffffff; }
.group-label { font-size: 13px; font-weight: 650; fill: #374151; }
.edge { fill: none; stroke: #374151; stroke-width: 1.8; stroke-linejoin: round; stroke-linecap: round; marker-end: url(#arrow); }
.edge.style-dashed, .edge.semantic-dashed, .edge.assumption { stroke-dasharray: 7 5; }
.edge.style-dotted { stroke-dasharray: 2 5; }
.edge.emphasis-primary { stroke: #2563eb; stroke-width: 2.2; }
.edge.emphasis-muted { stroke: #9ca3af; }
.edge.emphasis-warning, .edge.kind-failure, .edge.kind-error { stroke: #dc2626; stroke-width: 2.2; }
.edge-label-bg { fill: #ffffff; }
.edge-label { font-size: 12px; font-weight: 560; text-anchor: middle; }
.node-shape { fill: #ffffff; stroke: #4b5563; stroke-width: 1.7; }
.node-shape.emphasis-primary { stroke: #2563eb; stroke-width: 2.2; }
.node-shape.emphasis-muted { stroke: #9ca3af; fill: #f9fafb; }
.node-shape.emphasis-warning { stroke: #d97706; stroke-width: 2; fill: #fffdf5; }
.node-shape.kind-database, .node-shape.kind-datastore, .node-shape.kind-storage { fill: #f8fafc; }
.node-shape.kind-queue, .node-shape.kind-event, .node-shape.kind-topic { fill: #fafafa; }
.node-shape.assumption { stroke-dasharray: 4 4; }
.storage-bottom, .controller-divider { fill: none; stroke: #4b5563; stroke-width: 1.4; }
.controller-led { fill: #4b5563; }
.actor-symbol { fill: none; stroke: #4b5563; stroke-width: 1.8; stroke-linecap: round; }
.actor-symbol.emphasis-primary { stroke: #2563eb; stroke-width: 2.2; }
.node-label { font-size: 14px; font-weight: 650; text-anchor: middle; }
.node-role { font-size: 10px; letter-spacing: 0.04em; text-anchor: middle; fill: #6b7280; }
.node-detail-divider { stroke: #d1d5db; stroke-width: 1; }
.node-detail { font-size: 11px; fill: #374151; }
.assumption-badge { font-size: 9px; font-weight: 700; fill: #92400e; }
.failure-mark { stroke: #dc2626; stroke-width: 4; stroke-linecap: round; }
.lifeline { stroke: #9ca3af; stroke-width: 1.2; stroke-dasharray: 5 5; }
.timeline-axis { stroke: #374151; stroke-width: 1.8; marker-end: url(#arrow); }
.timeline-stem { stroke: #6b7280; stroke-width: 1.3; }
.timeline-marker { fill: #ffffff; stroke: #374151; stroke-width: 1.7; }
.timeline-marker.primary { fill: #2563eb; stroke: #2563eb; }
.timeline-marker.warning { fill: #dc2626; stroke: #dc2626; }
.timeline-label { font-size: 13px; font-weight: 650; text-anchor: middle; }
.timeline-detail { font-size: 11px; fill: #4b5563; text-anchor: middle; }
</style>
</defs>
<rect class="canvas" width="680" height="535" />
<polyline class="edge kind-response style-dashed emphasis-normal semantic-dashed" points="498.5,444.0 498.5,490.0 145.0,490.0 145.0,296.0" data-evidence="144-148" />
<rect class="edge-label-bg" x="148.3" y="448.0" width="198.9" height="22" rx="3" />
<text class="edge-label" x="247.8" y="463.0">access · refresh · ID token</text>
<polyline class="edge kind-request style-solid emphasis-normal" points="220.0,279.0 331.8,279.0 331.8,421.0 423.5,421.0" data-evidence="144-146" />
<rect class="edge-label-bg" x="198.2" y="326.0" width="219.0" height="22" rx="3" />
<text class="edge-label" x="307.8" y="341.0">Authorization Code + PKCE S256</text>
<polyline class="edge kind-data style-solid emphasis-normal" points="220.0,243.0 303.5,243.0 303.5,264.0 387.0,264.0" data-evidence="148-150" />
<rect class="edge-label-bg" x="278.3" y="239.5" width="98.4" height="22" rx="3" />
<text class="edge-label" x="327.5" y="254.5">token set 보관</text>
<polyline class="edge kind-request style-solid emphasis-primary" points="220.0,225.0 300.0,225.0 300.0,104.0 380.0,104.0" data-evidence="144-150" />
<rect class="edge-label-bg" x="211.1" y="150.5" width="225.7" height="22" rx="3" />
<text class="edge-label" x="324.0" y="165.5">memory-held access JWT · Bearer</text>
<g id="node-browser-spa">
<rect class="node-shape kind-service emphasis-primary role-source" data-evidence="144-148" x="70.0" y="208.0" width="150.0" height="88.0" rx="7" />
<text class="node-label" x="145.0" y="235.0">Public SPA</text>
<line class="node-detail-divider" x1="84.0" y1="256.0" x2="206.0" y2="256.0" />
<text class="node-detail" x="86.0" y="273.0">spa-public</text>
<text class="node-detail" x="86.0" y="289.0">PKCE S256</text>
</g>
<g id="node-api-resource-server">
<rect class="node-shape kind-service emphasis-normal role-sink" data-evidence="144-150" x="380.0" y="60.0" width="237.0" height="88.0" rx="7" />
<text class="node-label" x="498.5" y="87.0">Resource Server</text>
<line class="node-detail-divider" x1="394.0" y1="108.0" x2="603.0" y2="108.0" />
<text class="node-detail" x="396.0" y="125.0">issuer · time</text>
<text class="node-detail" x="396.0" y="141.0">keycloak-pattern-api audience</text>
</g>
<g id="node-browser-token-memory">
<rect class="node-shape kind-database emphasis-normal role-store" data-evidence="148-150" x="387.0" y="233.0" width="223.0" height="62.0" /><ellipse class="node-shape kind-database emphasis-normal role-store" cx="498.5" cy="233.0" rx="111.5" ry="13.0" /><path class="storage-bottom" d="M 387.0 295.0 A 111.5 13.0 0 0 0 610.0 295.0" />
<text class="node-label" x="498.5" y="247.0">Browser JS memory</text>
<line class="node-detail-divider" x1="401.0" y1="268.0" x2="596.0" y2="268.0" />
<text class="node-detail" x="403.0" y="285.0">access · refresh · ID token</text>
<text class="node-detail" x="403.0" y="301.0">persistent Web Storage 없음</text>
</g>
<g id="node-keycloak">
<rect class="node-shape kind-service emphasis-normal role-service" data-evidence="144-146" x="423.5" y="380.0" width="150.0" height="64.0" rx="7" />
<text class="node-label" x="498.5" y="410.0">Keycloak</text>
</g>
</svg>
Side by Side

After

Width:  |  Height:  |  Size: 7.4 KiB