diff --git a/SASjsServer.drawio b/SASjsServer.drawio index 55ed8e58..4067fec0 100644 --- a/SASjsServer.drawio +++ b/SASjsServer.drawio @@ -1,84 +1,206 @@ - + - - + + - - + + - + + + + - + - + - + - + - + - - + + - + - + - + - + - + - + - + - - + + - + - + - - + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + - + - - + + - + diff --git a/SASjsServer.svg b/SASjsServer.svg new file mode 100644 index 00000000..adb73397 --- /dev/null +++ b/SASjsServer.svg @@ -0,0 +1,3 @@ +
SASjs Server
SASjs Server
Internal Authentication
Internal Authentication
End user
End us...
/SASjsApi/auth/authorize
(username,password,clientId)
/SASjsApi/auth/authorize...
`code`
`code`
End user
End us...
/SASjsApi/auth/token
(clientId,code)
/SASjsApi/auth/token(clientId,code)
`accessToken` & `refreshToken`
`accessToken` & `refreshToken`
Validates
username/password/clientId
and issue short
Authorization code
Validates...
Validates
clientId & authorization code
and issue
Access Token & Refresh Token
Validates...
Protected APIs
Authenticate requests
with provided Bearer Token
Protected APIs...
Request with Access Token
Request with Access Token
Browser
Browser
Browser
Browser
Okta Authentication
Okta Authentication
/SASjsApi/auth/okta/authorize
/SASjsApi/auth/okta/authorize +
redirects to okta server



OKTA OIDC middleware
https://github.com/okta/okta-oidc-middleware



OKTA nodeJS Express implementation
https://github.com/okta/samples-nodejs-express-4/tree/master/okta-hosted-login
redirects to okta server...
Validates express session
through OKTA OIDC middleware
Validates express session...
Okta Authorization Server
Okta Authorization Server +
/authorize
/authorize
302 redirect to authentication promptĀ 
302 redirect to authentication promptĀ 
Authentication & Consent
Authentication & Consent
Authorization Code to redirect uri
Authorization Code to redirect uri
/token
/token
Access Token
Access Token
Request with OKTA mechanism
Request with OKTA mechanism
Viewer does not support full SVG 1.1
\ No newline at end of file