Authorization Flow
Below is a sequence diagram describing the actors and roles involved in our Authorization Flow using OAuth2.0 and Shibboleth. The server serving the YOUnite UI plays a minimal role as it is a single-page web app with all code being downloaded to the client/browser on the first hit.
The User/Browser flow is color coded to convey a sense of what site/url is showing in the browser's location bar during that part of the flow.
Comments
Oct 13, 2016
Looks good Robbie and very clear! As we start working through this and figuring out the implementation, lets draw out the expiry/token revoke sequence.