marcel/familienarchiv
1
0
Fork 0
Code Issues 115 Pull Requests Actions Packages Projects Releases Wiki Activity
Files
4e2c5175b5acc06f972face2f89fffea7e0d2fcc
familienarchiv/docs/architecture/c4/l3-backend-3a-security.puml

1.5 KiB
Raw Blame History

Component Diagram: API Backend — Security & AuthenticationComponent Diagram: API Backend — Security & AuthenticationAPI Backend (Spring Boot)[system]«component»Security Filter Chain[Spring Security] Enforces authentication onall requests. Parses BasicAuth header and constructsan Authentication token;delegates credentialvalidation toDaoAuthenticationProvidervia BCrypt. Permitspassword-reset, invite, andregister endpoints withoutauthentication.«component»PermissionAspect[Spring AOP] Intercepts methodsannotated with@RequirePermission.Checks user's grantedauthorities against therequired permission. Throws401/403 if denied.«component»SecurityConfig[Spring @Configuration] Configures filter chain: allroutes requireauthentication, CSRFdisabled, BCrypt passwordencoder,DaoAuthenticationProviderwithCustomUserDetailsService.«component»CustomUserDetailsService[Spring SecurityUserDetailsService] Loads AppUser by emailfrom DB. Converts grouppermissions to SpringGrantedAuthority objects.Logs unknown permissions.«container»Web Frontend[SvelteKit]«container»PostgreSQL[PostgreSQL 16]All requests[HTTP / Basic Authheader]Authenticatedrequests reachguarded servicemethodsWires asUserDetailsServiceLoads user by email[JDBC]
Reference in New Issue View Git Blame Copy Permalink