TB Interaction with IAM and Web #1650
Closed
seokho-son
started this conversation in
General
Replies: 1 comment 3 replies
-
|
@yunkon-kim 지난 MC-IAM (+ MC-WEB-CONSOLE) 간 온라인 미팅의 주요 정리 사항을 현 디스커션에 간략히 공유해주실 수 있으실까요? :) |
Beta Was this translation helpful? Give feedback.
3 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
-
TB Interaction with IAM and Web 방식 논의
IAM 메인테이너의 의견에 따르면, IAM은 현재 2가지 방식을 고려하여, 개발 및 연동 추진 중
(1) 시스템별 API 미들웨어(ex: CB-TB의 미들웨어)에서 미리 설정된 IAM의 Public Key를 이용하여 직접 사용자 토큰을 decode하는 형태 (1단계 확정안)
sequenceDiagram actor User participant WEB participant IAM as IAM (+Keycloak) IAM->>+TB: IAM Public Key (credential for TB to use IAM) Note over IAM,TB: System configuration (without login) User->>+WEB: Web Login WEB->>+IAM: Request User validation IAM->>+WEB: Return a User Token WEB->>+User: Provide a session Note over WEB,User: Session User->>+WEB: Request a function WEB->>+TB: API call (with the User token) TB-->>+TB: API Middleware: Handle API call TB-->>+TB: Validate(/Decode) the token (using the IAM Public Key) TB->>+SP: API call (with the User token) SP-->>+SP: API Middleware: Handle API call SP-->>+SP: Validate(/Decode) the token (using the IAM Public Key) SP->>+CSP: API call CSP-->>-SP: return SP-->>-TB: return TB-->>-WEB: return WEB-->>-User: return(2) 시스템별 API 미들웨어(ex: CB-TB의 미들웨어)에서, API 처리시, IAM에 요청을 통해 사용자 토큰(및 API 요청)을 검증하는 방식 (옵셔널 방식. 향후 필요시 진행.)
sequenceDiagram actor User participant WEB participant IAM as IAM (+Keycloak) Note over IAM,TB: NO System configuration User->>+WEB: Web Login WEB->>+IAM: Request User validation IAM-->>-WEB: Return a User Token WEB-->>-User: Provide a session Note over WEB,User: Session User->>+WEB: Request a function WEB->>+TB: TB API call (with the User token) TB->>+IAM: API Middleware: request is token valid IAM-->>-TB: return valid token result TB->>+SP: SP API call SP->>+IAM: API Middleware: request is token valid IAM-->>-SP: return valid token result SP->>+CSP: CSP API call CSP-->>-SP: return SP-->>-TB: return TB-->>-WEB: return WEB-->>-User: returnBeta Was this translation helpful? Give feedback.
All reactions