Files
familienarchiv/docs/architecture/c4/l3-backend-3a-security.puml
Marcel 314f686963 docs(arch): update security C4 diagram for CSRF + rate limiting
Remove stale "CSRF is disabled pending #524" note; update secFilter
description to reflect the enabled double-submit cookie pattern.
Add LoginRateLimiter and RateLimitProperties components with their
relationships to AuthService. Update frontend→secFilter rel to show
X-XSRF-TOKEN header.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-18 15:26:29 +02:00

3.9 KiB

PlantUML 1.2026.2[From string (line 12) ] @startuml!include <C4/C4_Component>!include <C4/C4_Container>!include <C4/C4_Context>!include <C4/C4>...... ( skipping 15579 lines )...!if ($propTable != "")!$retTable = $alignedNL + $propTable!$propTable = ""!return $retTable!endif!return ""!$stereo = $toStereos($elementType,$tags)!if (%strlen($tags) == 0)!$stereos = '<<' + $elementType + '>>'%set_variable_value("$" + $elementType + "Legend", %true())!return $stereos!$calcLink = $getLink($link)!if ($link != "")!return "[[" + $link + "]]"!else!return "" !$line = $umlShape + " " + %chr(34) + $baseProp + %chr(34) +" " + $stereo + " as " + $alias + " " + $calcLink!return $lineComponent(secFilter, "Security Filter Chain", "Spring Security", "Permits /api/auth/login, /api/auth/forgot-password ...unquoted function/procedure cannot use expression.