Skip to content

Commit 2d51573

Browse files
authored
Update flows.md
1 parent f530231 commit 2d51573

1 file changed

Lines changed: 10 additions & 6 deletions

File tree

seq/flows.md

Lines changed: 10 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,5 @@
11
## Assertion Framework for OAuth 2.0 Client Authentication and Authorization Grants
22

3-
### Client action on behalf of user
43
```mermaid
54
---
65
config:
@@ -11,14 +10,14 @@ sequenceDiagram
1110
participant TS as Token Service
1211
participant KC as Keycloak
1312
participant RS as REST API
13+
1414
C->>TS: Request assertion
1515
TS->>C: Assertion
1616
C->>KC: Token request, with assertion
1717
KC->>C: Token response
1818
C->>RS: Request with token
1919
```
2020

21-
### Client action on behalf of itself
2221
```mermaid
2322
---
2423
config:
@@ -29,14 +28,14 @@ sequenceDiagram
2928
participant TS as Token Service
3029
participant KC as Keycloak
3130
participant RS as REST API
32-
C->>TS: Request assertion
33-
TS->>C: Assertion
34-
C->>KC: Client credential request, with client_assertion
31+
32+
C->>TS: Request client assertion
33+
TS->>C: Client Assertion
34+
C->>KC: Client credential grant, with client assertion
3535
KC->>C: Token response
3636
C->>RS: Request with token
3737
```
3838

39-
4039
## OAuth Identity and Authorization Chaining Across Domains
4140

4241
```mermaid
@@ -45,10 +44,15 @@ config:
4544
mirrorActors: false
4645
---
4746
sequenceDiagram
47+
box Domain A
4848
participant IDPA as External IdP
4949
participant C as Client
50+
end
51+
box Domain B
5052
participant IDPB as Keycloak
5153
participant RS as REST API
54+
end
55+
5256
C->>IDPA: Exchange token
5357
IDPA->>C: Assertion
5458
C->>IDPB: Token request, with assertion

0 commit comments

Comments
 (0)