solid-client-authn-js/documentation/diagrams/auth_code_flow.pluml at main · OpenLinkSoftware/solid-client-authn-js · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
@startuml

hide footbox

participant Issuer as "OIDC issuer"
actor RO as "Resource Owner (browser)"
participant Client
participant "Solid Server"

== Front channel ==

RO -> Client: Initiates login
activate Client
Client -> Client: Session::login
Client -> Issuer: Discovery
Client -> Issuer: Registration (optional)
Client -> Client: OIDC handler
Client -> RO: Redirect browser to authorization endpoint
deactivate Client
RO -> Issuer: Logs in
Issuer -> RO: Redirects browser with authorization code
RO -> Client: Reloads app at redirect IRI
activate Client
Client -> Client: Handle incoming redirect

== Back channel ==

Client -> Issuer: Sends code to token endpoint
Issuer -> Client: Sends Access, ID and (optional) Refresh Tokens
Client -> Client: Initializes authenticated fetch
Client -> "Solid Server": Accesses the protected resource\nwith the access token

@enduml