mirrors/fep
1
0
Fork 0
mirror of https://codeberg.org/fediverse/fep.git synced 2026-08-08 21:45:52 +00:00
Code Packages Wiki Activity

FEP-61cf: Add sequence diagram (#498)

Browse Source 
Add a basic sequence diagram using Mermaid syntax: https://mermaid.js.org/syntax/sequenceDiagram.html

Co-authored-by: FenTiger <fentiger@mythik.co.uk>
Reviewed-on: https://codeberg.org/fediverse/fep/pulls/498
Co-authored-by: Mike P <fentiger@noreply.codeberg.org>
Co-committed-by: Mike P <fentiger@noreply.codeberg.org>
This commit is contained in:
Mike P
2025-02-16 13:41:35 +00:00
committed by helge
parent 024bf78f02
commit 9e4076489a
1 changed files with 26 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
fep/61cf/fep-61cf.md
+26
View File
@@ -36,6 +36,32 @@ This `zid=` mechanism is not necessarily specific to OpenWebAuth. It can be used
## Operation of the protocol
The protocol can be summarised in a sequence diagram as below. This diagram shows the `zid=` case, where the user is not prompted to log in.
```mermaid
sequenceDiagram
participant browser as Browser
participant target as Target instance
participant home as Home instance
browser ->> target: GET /page?zid=user@home
target ->> home: webfinger user@home
home -->> target: location of redirection endpoint
target -->> browser: Location: https://home.example/magic?...
browser ->> home: GET /magic?...
Note over home: Check user is logged in,<br/>eg by checking session cookie
home ->> target: webfinger /
target -->> home: location of token endpoint
rect rgb(216, 255, 216)
Note over home,target: Protected by actor's private key
home ->> target: GET /token<br/>(signed)
target -->> home: <token><br/>(encrypted)
end
home -->> browser: Location: https://target.example/page?owt=<token>
browser ->> target: GET /page?owt=<token>
target -->> browser: <contents of page>
```
Regardless of how the flow is started, the protocol begins with the user's browser making a request to the target instance.
### 1. Redirection to home instance