marcel/familienarchiv
1
0
Fork 0
Code Issues 115 Pull Requests Actions Packages Projects Releases Wiki Activity
Files
fea837b345b30f6d687327fe612eff3e269c730e
familienarchiv/docs/architecture/c4/seq-auth-flow.puml

1019 B
Raw Blame History

Authentication FlowAuthentication FlowUserBrowserFrontend .SvelteKit.Backend .Spring Boot.PostgreSQLUserUserBrowserBrowserFrontend (SvelteKit)Frontend (SvelteKit)Backend (Spring Boot)Backend (Spring Boot)PostgreSQLPostgreSQLEnter email + passwordPOST /login (form action)Base64 encode "email:password"GET /api/users/meAuthorization: Basic <token>Spring Security parses Basic AuthSELECT user WHERE email=?AppUser + groups + permissionsBCrypt.matches(password, hash)200 OK — UserDTOSet-Cookie: auth_token=<base64>(httpOnly, SameSite=strict, maxAge=86400)GET / (next request)hooks.server.ts reads auth_token cookieGET /api/users/meAuthorization: Basic <token>200 OK — user in event.localsRender page with user context
Reference in New Issue View Git Blame Copy Permalink