documentation/diagrams/auth_code_flow.svg

<?xml version="1.0" encoding="UTF-8" standalone="no"?><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" contentScriptType="application/ecmascript" contentStyleType="text/css" height="679px" preserveAspectRatio="none" style="width:953px;height:679px;" version="1.1" viewBox="0 0 953 679" width="953px" zoomAndPan="magnify"><defs><filter height="300%" id="fjkswim1w2vux" width="300%" x="-1" y="-1"><feGaussianBlur result="blurOut" stdDeviation="2.0"/><feColorMatrix in="blurOut" result="blurOut2" type="matrix" values="0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 .4 0"/><feOffset dx="4.0" dy="4.0" in="blurOut2" result="blurOut3"/><feBlend in="SourceGraphic" in2="blurOut3" mode="normal"/></filter></defs><g><rect fill="#FFFFFF" filter="url(#fjkswim1w2vux)" height="171.6641" style="stroke: #A80036; stroke-width: 1.0;" width="10" x="641.5" y="160.4297"/><rect fill="#FFFFFF" filter="url(#fjkswim1w2vux)" height="239.0625" style="stroke: #A80036; stroke-width: 1.0;" width="10" x="641.5" y="419.4922"/><line style="stroke: #A80036; stroke-width: 1.0; stroke-dasharray: 5.0,5.0;" x1="57" x2="57" y1="86.2969" y2="667.5547"/><line style="stroke: #A80036; stroke-width: 1.0; stroke-dasharray: 5.0,5.0;" x1="346.5" x2="346.5" y1="86.2969" y2="667.5547"/><line style="stroke: #A80036; stroke-width: 1.0; stroke-dasharray: 5.0,5.0;" x1="646" x2="646" y1="86.2969" y2="667.5547"/><line style="stroke: #A80036; stroke-width: 1.0; stroke-dasharray: 5.0,5.0;" x1="886" x2="886" y1="86.2969" y2="667.5547"/><rect fill="#FEFECE" filter="url(#fjkswim1w2vux)" height="30.2969" style="stroke: #A80036; stroke-width: 1.5;" width="95" x="8" y="51"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacingAndGlyphs" textLength="81" x="15" y="70.9951">OIDC issuer</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacingAndGlyphs" textLength="186" x="250.5" y="82.9951">Resource Owner (browser)</text><ellipse cx="346.5" cy="13" fill="#FEFECE" filter="url(#fjkswim1w2vux)" rx="8" ry="8" style="stroke: #A80036; stroke-width: 2.0;"/><path d="M346.5,21 L346.5,48 M333.5,29 L359.5,29 M346.5,48 L333.5,63 M346.5,48 L359.5,63 " fill="#FEFECE" filter="url(#fjkswim1w2vux)" style="stroke: #A80036; stroke-width: 2.0;"/><rect fill="#FEFECE" filter="url(#fjkswim1w2vux)" height="30.2969" style="stroke: #A80036; stroke-width: 1.5;" width="53" x="618" y="51"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacingAndGlyphs" textLength="39" x="625" y="70.9951">Client</text><rect fill="#FEFECE" filter="url(#fjkswim1w2vux)" height="30.2969" style="stroke: #A80036; stroke-width: 1.5;" width="95" x="837" y="51"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacingAndGlyphs" textLength="81" x="844" y="70.9951">Solid Server</text><rect fill="#FFFFFF" filter="url(#fjkswim1w2vux)" height="171.6641" style="stroke: #A80036; stroke-width: 1.0;" width="10" x="641.5" y="160.4297"/><rect fill="#FFFFFF" filter="url(#fjkswim1w2vux)" height="239.0625" style="stroke: #A80036; stroke-width: 1.0;" width="10" x="641.5" y="419.4922"/><rect fill="#EEEEEE" filter="url(#fjkswim1w2vux)" height="3" style="stroke: #EEEEEE; stroke-width: 1.0;" width="938" x="3" y="116.8633"/><line style="stroke: #000000; stroke-width: 1.0;" x1="3" x2="941" y1="116.8633" y2="116.8633"/><line style="stroke: #000000; stroke-width: 1.0;" x1="3" x2="941" y1="119.8633" y2="119.8633"/><rect fill="#EEEEEE" filter="url(#fjkswim1w2vux)" height="23.1328" style="stroke: #000000; stroke-width: 2.0;" width="120" x="412" y="106.2969"/><text fill="#000000" font-family="sans-serif" font-size="13" font-weight="bold" lengthAdjust="spacingAndGlyphs" textLength="101" x="418" y="122.3638">Front channel</text><polygon fill="#A80036" points="629.5,156.4297,639.5,160.4297,629.5,164.4297,633.5,160.4297" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.0;" x1="346.5" x2="635.5" y1="160.4297" y2="160.4297"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="84" x="353.5" y="155.4966">Initiates login</text><line style="stroke: #A80036; stroke-width: 1.0;" x1="651.5" x2="693.5" y1="189.6953" y2="189.6953"/><line style="stroke: #A80036; stroke-width: 1.0;" x1="693.5" x2="693.5" y1="189.6953" y2="202.6953"/><line style="stroke: #A80036; stroke-width: 1.0;" x1="652.5" x2="693.5" y1="202.6953" y2="202.6953"/><polygon fill="#A80036" points="662.5,198.6953,652.5,202.6953,662.5,206.6953,658.5,202.6953" style="stroke: #A80036; stroke-width: 1.0;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="88" x="658.5" y="184.6294">Session::login</text><polygon fill="#A80036" points="68.5,227.6953,58.5,231.6953,68.5,235.6953,64.5,231.6953" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.0;" x1="62.5" x2="640.5" y1="231.6953" y2="231.6953"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="62" x="74.5" y="226.7622">Discovery</text><polygon fill="#A80036" points="68.5,256.8281,58.5,260.8281,68.5,264.8281,64.5,260.8281" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.0;" x1="62.5" x2="640.5" y1="260.8281" y2="260.8281"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="141" x="74.5" y="255.895">Registration (optional)</text><line style="stroke: #A80036; stroke-width: 1.0;" x1="651.5" x2="693.5" y1="290.0938" y2="290.0938"/><line style="stroke: #A80036; stroke-width: 1.0;" x1="693.5" x2="693.5" y1="290.0938" y2="303.0938"/><line style="stroke: #A80036; stroke-width: 1.0;" x1="652.5" x2="693.5" y1="303.0938" y2="303.0938"/><polygon fill="#A80036" points="662.5,299.0938,652.5,303.0938,662.5,307.0938,658.5,303.0938" style="stroke: #A80036; stroke-width: 1.0;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="84" x="658.5" y="285.0278">OIDC handler</text><polygon fill="#A80036" points="357.5,328.0938,347.5,332.0938,357.5,336.0938,353.5,332.0938" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.0;" x1="351.5" x2="645.5" y1="332.0938" y2="332.0938"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="271" x="363.5" y="327.1606">Redirect browser to authorization endpoint</text><polygon fill="#A80036" points="68.5,357.2266,58.5,361.2266,68.5,365.2266,64.5,361.2266" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.0;" x1="62.5" x2="345.5" y1="361.2266" y2="361.2266"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="45" x="74.5" y="356.2935">Logs in</text><polygon fill="#A80036" points="334.5,386.3594,344.5,390.3594,334.5,394.3594,338.5,390.3594" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.0;" x1="57.5" x2="340.5" y1="390.3594" y2="390.3594"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="265" x="64.5" y="385.4263">Redirects browser with authorization code</text><polygon fill="#A80036" points="629.5,415.4922,639.5,419.4922,629.5,423.4922,633.5,419.4922" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.0;" x1="346.5" x2="635.5" y1="419.4922" y2="419.4922"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="166" x="353.5" y="414.5591">Reloads app at redirect IRI</text><line style="stroke: #A80036; stroke-width: 1.0;" x1="651.5" x2="693.5" y1="448.7578" y2="448.7578"/><line style="stroke: #A80036; stroke-width: 1.0;" x1="693.5" x2="693.5" y1="448.7578" y2="461.7578"/><line style="stroke: #A80036; stroke-width: 1.0;" x1="652.5" x2="693.5" y1="461.7578" y2="461.7578"/><polygon fill="#A80036" points="662.5,457.7578,652.5,461.7578,662.5,465.7578,658.5,461.7578" style="stroke: #A80036; stroke-width: 1.0;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="160" x="658.5" y="443.6919">Handle incoming redirect</text><rect fill="#EEEEEE" filter="url(#fjkswim1w2vux)" height="3" style="stroke: #EEEEEE; stroke-width: 1.0;" width="938" x="3" y="490.3242"/><line style="stroke: #000000; stroke-width: 1.0;" x1="3" x2="941" y1="490.3242" y2="490.3242"/><line style="stroke: #000000; stroke-width: 1.0;" x1="3" x2="941" y1="493.3242" y2="493.3242"/><rect fill="#EEEEEE" filter="url(#fjkswim1w2vux)" height="23.1328" style="stroke: #000000; stroke-width: 2.0;" width="117" x="413.5" y="479.7578"/><text fill="#000000" font-family="sans-serif" font-size="13" font-weight="bold" lengthAdjust="spacingAndGlyphs" textLength="98" x="419.5" y="495.8247">Back channel</text><polygon fill="#A80036" points="68.5,529.8906,58.5,533.8906,68.5,537.8906,64.5,533.8906" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.0;" x1="62.5" x2="640.5" y1="533.8906" y2="533.8906"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="192" x="74.5" y="528.9575">Sends code to token endpoint</text><polygon fill="#A80036" points="629.5,559.0234,639.5,563.0234,629.5,567.0234,633.5,563.0234" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.0;" x1="57.5" x2="635.5" y1="563.0234" y2="563.0234"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="304" x="64.5" y="558.0903">Sends Access, ID and (optional) Refresh Tokens</text><line style="stroke: #A80036; stroke-width: 1.0;" x1="651.5" x2="693.5" y1="592.2891" y2="592.2891"/><line style="stroke: #A80036; stroke-width: 1.0;" x1="693.5" x2="693.5" y1="592.2891" y2="605.2891"/><line style="stroke: #A80036; stroke-width: 1.0;" x1="652.5" x2="693.5" y1="605.2891" y2="605.2891"/><polygon fill="#A80036" points="662.5,601.2891,652.5,605.2891,662.5,609.2891,658.5,605.2891" style="stroke: #A80036; stroke-width: 1.0;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="187" x="658.5" y="587.2231">Initializes authenticated fetch</text><polygon fill="#A80036" points="874.5,645.2891,884.5,649.2891,874.5,653.2891,878.5,649.2891" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.0;" x1="651.5" x2="880.5" y1="649.2891" y2="649.2891"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="211" x="658.5" y="629.356">Accesses the protected resource</text><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="138" x="658.5" y="644.4888">with the access token</text><!--
@startuml

hide footbox

participant Issuer as "OIDC issuer"
actor RO as "Resource Owner (browser)"
participant Client
participant "Solid Server"

== Front channel ==

RO -> Client: Initiates login
activate Client
Client -> Client: Session::login
Client -> Issuer: Discovery
Client -> Issuer: Registration (optional)
Client -> Client: OIDC handler
Client -> RO: Redirect browser to authorization endpoint
deactivate Client
RO -> Issuer: Logs in
Issuer -> RO: Redirects browser with authorization code
RO -> Client: Reloads app at redirect IRI
activate Client
Client -> Client: Handle incoming redirect

== Back channel ==

Client -> Issuer: Sends code to token endpoint
Issuer -> Client: Sends Access, ID and (optional) Refresh Tokens
Client -> Client: Initializes authenticated fetch
Client -> "Solid Server": Accesses the protected resource\nwith the access token

@enduml

PlantUML version 1.2017.15(Mon Jul 03 18:45:34 CEST 2017)
(GPL source distribution)
Java Runtime: OpenJDK Runtime Environment
JVM: OpenJDK 64-Bit Server VM
Java Version: 11.0.11+9-Ubuntu-0ubuntu2.18.04
Operating System: Linux
OS Version: 4.15.0-142-generic
Default Encoding: UTF-8
Language: fr
Country: FR
--></g></svg>