aboutsummaryrefslogtreecommitdiffstats
path: root/upstream/odl-aaa-moon/aaa/aaa-authn-api/src/main/docs/credential_auth_sequence.wsd
blob: 383d4031076521ba8c360362d99c582faddfdd04 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
title Credential Authentication Sequence

# This walks through the credential authentication use case where a credential 
# (typically username/password) is used to authenticate directly with the ODL 
# controller. 

Client -> ServletContainer: request access token
note right of Client
(credentials, scope=domain)
end note
ServletContainer -> TokenEndpoint: credentials, domain
TokenEndpoint -> CredentialAuth: authenticate(Credentials, domain)
CredentialAuth -> TokenEndpoint: Claim
note left of CredentialAuth
(user/domain/roles)
end note
TokenEndpoint -> TokenEndpoint: createToken
TokenEndpoint -> Client: access token