11## Assertion Framework for OAuth 2.0 Client Authentication and Authorization Grants
22
3- ### Client action on behalf of user
43``` mermaid
54---
65config:
@@ -11,14 +10,14 @@ sequenceDiagram
1110 participant TS as Token Service
1211 participant KC as Keycloak
1312 participant RS as REST API
13+
1414 C->>TS: Request assertion
1515 TS->>C: Assertion
1616 C->>KC: Token request, with assertion
1717 KC->>C: Token response
1818 C->>RS: Request with token
1919```
2020
21- ### Client action on behalf of itself
2221``` mermaid
2322---
2423config:
@@ -29,14 +28,14 @@ sequenceDiagram
2928 participant TS as Token Service
3029 participant KC as Keycloak
3130 participant RS as REST API
32- C->>TS: Request assertion
33- TS->>C: Assertion
34- C->>KC: Client credential request, with client_assertion
31+
32+ C->>TS: Request client assertion
33+ TS->>C: Client Assertion
34+ C->>KC: Client credential grant, with client assertion
3535 KC->>C: Token response
3636 C->>RS: Request with token
3737```
3838
39-
4039## OAuth Identity and Authorization Chaining Across Domains
4140
4241``` mermaid
@@ -45,10 +44,15 @@ config:
4544 mirrorActors: false
4645---
4746sequenceDiagram
47+ box Domain A
4848 participant IDPA as External IdP
4949 participant C as Client
50+ end
51+ box Domain B
5052 participant IDPB as Keycloak
5153 participant RS as REST API
54+ end
55+
5256 C->>IDPA: Exchange token
5357 IDPA->>C: Assertion
5458 C->>IDPB: Token request, with assertion
0 commit comments