From d26f935cbb7f647737f450ea348333d94b3b09fb Mon Sep 17 00:00:00 2001 From: Travis Groth Date: Thu, 22 Aug 2019 18:30:49 -0400 Subject: [PATCH] Add authenticatoin flow diagram (#275) --- docs/.vuepress/public/pomerium-auth-flow.svg | 3 +++ docs/docs/readme.md | 11 +++++++++++ 2 files changed, 14 insertions(+) create mode 100644 docs/.vuepress/public/pomerium-auth-flow.svg diff --git a/docs/.vuepress/public/pomerium-auth-flow.svg b/docs/.vuepress/public/pomerium-auth-flow.svg new file mode 100644 index 000000000..b79698564 --- /dev/null +++ b/docs/.vuepress/public/pomerium-auth-flow.svg @@ -0,0 +1,3 @@ + + +
Authorize request for identity
Authorize request for identity
Authorized Request
Authorized Request
Identity Provider
<font style="font-size: 14px">Identity Provider</font>
Proxy
[Not supported by viewer]

Secured Service

[Not supported by viewer]
Authenticate
[Not supported by viewer]
Authorize
[Not supported by viewer]
Request with session token
Request with session token
Exchange access token
Exchange access token
Store session token
Store session token
Unauthenticated
[Not supported by viewer]
Redirect for session token
[Not supported by viewer]
Redirect with access token
Redirect with access token
Redirect to IDP sign-in URL
Redirect to IDP sign-in URL
\ No newline at end of file diff --git a/docs/docs/readme.md b/docs/docs/readme.md index 143592302..7f21900fb 100644 --- a/docs/docs/readme.md +++ b/docs/docs/readme.md @@ -51,6 +51,17 @@ In test deployments, all three components may run from a single binary and confi pomerium architecture diagram +### Authentication Flow + +Pomerium's internal and external component interactions during full authentication from a fresh user are diagramed below. + +After initial authentication to provide a session token, only the authorization interactions occur. + + +pomerium architecture diagram + + + ## In action To make this a bit more concrete, see the following short video which demonstrates: