Implementierung von OIDC-Logout und Sitzungsverwaltung: Ein umfassender Leitfaden
Erkunden Sie die OIDC-Authentifizierung und Sitzungsverwaltung im Detail. Lernen Sie, wie man OIDC RP-initiierten, IdP-initiierten und Back-Channel-Logout für sichere Sitzungsverwaltung implementiert.
SimengDeveloper
Verschwenden Sie keine Wochen mit Benutzerauthentifizierung
Bringen Sie sichere Apps schneller mit Logto auf den Markt. Integrieren Sie Benutzerauthentifizierung in Minuten und konzentrieren Sie sich auf Ihr Kernprodukt.
OpenID Connect (OIDC) ist eine einfache Identitätsschicht, die auf dem OAuth 2.0-Protokoll basiert. Sie ermöglicht es Clients, die Identität des Endbenutzers basierend auf der vom Autorisierungsserver durchgeführten Authentifizierung zu überprüfen sowie grundlegende Profilinformationen über den Endbenutzer in einer interoperablen und REST-ähnlichen Weise zu erhalten.
OIDC ist darauf ausgelegt, einfach zu verwenden und zu implementieren zu sein, mit einem Fokus auf Einfachheit und Flexibilität. Es wird häufig für Single Sign-On (SSO) und Identitätsprüfung in Webanwendungen, mobilen Apps und APIs genutzt.
Das Verständnis des Authentifizierungsstatus und der Sitzungsverwaltung in OIDC ist entscheidend. Dieser Artikel erklärt, wie OIDC-Sitzungen und der Benutzerauthentifizierungsstatus im Kontext der Interaktionen zwischen dem Identitätsanbieter (IdP) und der anfragenden Partei (RP) oder Dienstanbieter (SP) verwaltet werden.
Dieser Artikel enthält mehrere wichtige Begriffe.
Identitätsanbieter (IdP): Der Dienst, der Benutzeridentitäten speichert und authentifiziert.
Dienstanbieter (SP) oder Anfragende Partei (RP): Eine Webanwendung oder ein Dienst, der Dienste für Benutzer bereitstellt und auf den IdP für die Benutzerauthentifizierung vertraut.
Anmeldesitzung oder Authentifizierungssitzung: Die Sitzung, die eingerichtet wird, wenn sich ein Benutzer beim IdP anmeldet.
Grant: Die zentralisierte Benutzerautorisierungs- und Authentifizierungsinformation, die vom IdP generiert und verwaltet wird.
Single Sign-On (SSO): Ein Sitzungs- und Benutzerauthentifizierungsdienst, der es einem Benutzer erlaubt, ein Login-Set (z. B. Name und Passwort) zu nutzen, um auf mehrere Anwendungen zuzugreifen.
Wie funktioniert der OIDC-Authentifizierungsablauf?#
Um das OIDC-Sitzungs- und Benutzerauthentifizierungsstatusmanagement besser zu verstehen, werfen wir einen kurzen Blick auf den OIDC-Authentifizierungsablauf für eine Webanwendung:
Der Benutzer greift auf die Webanwendung (RP) zu.
Der RP leitet den Benutzer zu dem OIDC-Anbieter (IdP) zur Authentifizierung weiter.
Der OIDC-Anbieter überprüft den Anmeldesitzungsstatus des Benutzers. Wenn keine Sitzung existiert oder die Sitzung abgelaufen ist, wird der Benutzer aufgefordert, sich anzumelden.
Der Benutzer interagiert mit der Anmeldeseite, um sich zu authentifizieren.
Die Anmeldeseite übermittelt das Interaktionsergebnis an den OIDC-Anbieter.
Der OIDC-Anbieter erstellt eine neue Anmeldesitzung und einen Authentifizierungs-Grant für den Benutzer.
Der OIDC-Anbieter leitet den Benutzer mit einem Authentifizierungscode (Authorization Code flow) zurück zur RP.
Der RP erhält den Authentifizierungscode und tauscht ihn gegen Tokens aus, um auf Benutzerinformationen zuzugreifen.
Eine Anmeldesitzung wird eingerichtet, wenn sich ein Benutzer beim IdP anmeldet. Diese Sitzung wird verwendet, um den Authentifizierungsstatus des Benutzers beim IdP zu verfolgen. Die Sitzung enthält typischerweise Informationen wie die Identität des Benutzers, die Authentifizierungszeit und die Ablaufzeit der Sitzung. Sie wird erstellt, wenn der Benutzer sich zuerst anmeldet, und bleibt bestehen, bis der Benutzer sich abmeldet oder die Sitzung abläuft.
Ein Sitzungscookie wird sicher im Browser des Benutzers gesetzt, um den Sitzungsstatus aufrechtzuerhalten. Das Sitzungscookie wird verwendet, um die Benutzersitzung zu identifizieren und den Benutzer für nachfolgende Authentifizierungsanforderungen zu authentifizieren. Dieses Cookie wird in der Regel mit den Flags HttpOnly und Secure gesetzt, um den Zugriff von der Client-Seite zu verhindern und eine sichere Kommunikation zu gewährleisten.
Für jeden RP, auf den der Benutzer von verschiedenen Geräten oder Browsern zugreift, wird eine separate Benutzeranmeldesitzung eingerichtet. Dies bedeutet, dass der Authentifizierungsstatus des Benutzers für jeden RP separat aufrechterhalten wird. Wenn sich der Benutzer von einem RP abmeldet, bleibt er bei anderen RPs weiterhin authentifiziert, bis die Sitzung abläuft oder der Benutzer sich von allen RPs abmeldet.
Diese zentralisierte Sitzungsverwaltung ermöglicht es dem IdP auch, einen konsistenten Authentifizierungsstatus über mehrere RPs aufrechtzuerhalten, solange die Sitzung des Benutzers aktiv ist und die Authentifizierungsanfragen vom selben Benutzeragenten (Gerät/Browser) stammen. Dieser Mechanismus ermöglicht SSO-Funktionen, bei denen der Benutzer auf mehrere RPs zugreifen kann, ohne sich erneut anmelden zu müssen.
In OIDC verlässt sich die Clientanwendung (RP) auf die vom IdP ausgegebenen Tokens, um die Identität des Benutzers und dessen Authentifizierungs- oder Autorisierungsstatus zu überprüfen. Die "Anmeldesitzung" auf der Client-Seite wird durch die vom IdP ausgestellten Tokens aufrechterhalten.
ID-Token: Ein kurzlebiger Token, der Benutzerinformationen enthält und verwendet wird, um die Identität des authentifizierten Benutzers zu überprüfen.
Zugriffstoken: Ein Token, das den Zugriff auf geschützte Ressourcen im Namen des Benutzers gewährt. Die Lebensdauer des Zugriffstokens kann kurzlebig oder langlebig sein, je nach Konfiguration. Clientanwendungen können sich auf die Gültigkeit des Zugriffstokens verlassen, um den Authentifizierungsstatus des Benutzers zu bestimmen. Wenn das Zugriffstoken abgelaufen oder gelöscht ist, kann der Benutzer als "abgemeldet" oder "nicht authentifiziert" betrachtet werden und muss sich erneut authentifizieren.
Aktualisierungstoken: Wenn der offline_access-Bereich angefordert und gewährt wird, kann die Clientanwendung ein Aktualisierungstoken erhalten. Es bietet eine Möglichkeit, den Authentifizierungsstatus des Benutzers zu verlängern, ohne dass der Benutzer sich erneut authentifizieren muss. Die Clientanwendung kann das Aktualisierungstoken verwenden, um ein neues Zugriffstoken zu erhalten, wenn das aktuelle Zugriffstoken abläuft. Solange das Aktualisierungstoken gültig ist, kann der Authentifizierungsstatus des Benutzers ohne Benutzerinteraktion aufrechterhalten werden.
Die Kombination dieser Tokens ermöglicht es der Clientanwendung, den Authentifizierungsstatus des Benutzers aufrechtzuerhalten und im Namen des Benutzers auf geschützte Ressourcen zuzugreifen. Die Clientanwendung muss diese Tokens sicher speichern und ihren Lebenszyklus verwalten. (Z.B. Für SPA-Anwendungen können die Tokens im lokalen Speicher oder Sitzungsspeicher des Browsers gespeichert werden. Für Webanwendungen können die Tokens in den serverseitigen Sitzungsdaten oder in Cookies gespeichert werden.)
Der Abmeldeprozess in OIDC ist aufgrund der Beteiligung sowohl von zentralisierten, durch den IdP verwalteten Anmeldesitzungen als auch von verteilten Client-seitigen Tokens ein mehrschichtiges Konzept.
Tokens und lokale Sitzung auf der Clientseite löschen#
Um den Authentifizierungsstatus eines Benutzers auf der Client-Seite abzumelden oder zu widerrufen, ist relativ einfach. Die Clientanwendung kann gespeicherte Tokens (ID-Token, Zugriffstoken und Aktualisierungstoken) aus dem Browser oder dem Speicher des Benutzers entfernen. Diese Aktion hebt effektiv den Authentifizierungsstatus des Benutzers auf der Client-Seite auf.
Für Webanwendungen, die ihre eigenen Benutzer-Anmeldesitzungen verwalten, können zusätzliche Schritte erforderlich sein. Dazu gehört das Löschen des Sitzungscookies und jeglicher Sitzungsdaten (wie von der Identity Provider oder IdP ausgestellte Tokens), um sicherzustellen, dass der Benutzer vollständig abgemeldet ist.
Der IdP verwaltet eine zentrale Anmeldesitzung für jeden Benutzer. Solange diese Sitzung aktiv ist, kann der Benutzer automatisch erneut authentifiziert werden, selbst wenn die Client-seitigen Tokens gelöscht wurden, was es ermöglicht, neue Tokens an die Clientanwendung auszustellen, ohne dass eine weitere Interaktion mit dem IdP erforderlich ist.
Um einen Benutzer vollständig vom IdP abzumelden, kann die Clientanwendung (RP) eine Abmeldeanforderung an den IdP initiieren. Die Anwendung (RP) sollte den Benutzer zur End-Sitzung-Endpunkt des IdP umleiten, um die Anmeldesitzung zu beenden und Sitzungscookies zu löschen. Dies stellt sicher, dass eine vollständige Abmeldung über alle Anwendungen (RPs), die eine gleiche zentrale Sitzung teilen, erfolgt. Sobald die Anmeldesitzung beendet ist, wird der IdP den Benutzer auffordern, sich erneut zu authentifizieren, wann immer er eine Token-Anforderung von einem der verbundenen RPs erhält, die die gleiche Sitzung teilen.
In einigen Fällen, wenn sich ein Benutzer von einer Anwendung (RP) abmeldet, möchte er möglicherweise auch automatisch von allen anderen Anwendungen (RPs) abgemeldet werden, ohne zusätzliche Benutzerinteraktion. Dies kann durch den Back-Channel-Logout-Mechanismus erreicht werden.
Wenn der IdP eine Abmeldeanforderung von einem RP erhält, löscht er nicht nur die Anmeldesitzung, sondern sendet auch eine Back-Channel-Logout-Benachrichtigung an alle RPs, die dieselbe Sitzung nutzen und einen registrierten Back-Channel-Logout-Endpunkt haben.
Wenn die RPs die Back-Channel-Logout-Benachrichtigung erhalten, können sie die notwendigen Schritte unternehmen, um die Sitzung und die Tokens des Benutzers zu löschen, sodass der Benutzer vollständig von allen Anwendungen abgemeldet ist.
' fill='transparent' y='0' x='979'/%3e%3ctext style='text-anchor: middle%3b font-size: 16px%3b font-weight: 400%3b font-family: arial%2c sans-serif%3b' class='text' alignment-baseline='central' dominant-baseline='central' y='8.5' x='1253.5'%3e%3ctspan dy='0' x='1253.5'%3eIdentity Provider (IdP)%3c/tspan%3e%3c/text%3e%3c/g%3e%3cg%3e%3crect class='rect' height='599' width='160' stroke='rgb(0%2c0%2c0%2c 0.5)' fill='transparent' y='0' x='236'/%3e%3ctext style='text-anchor: middle%3b font-size: 16px%3b font-weight: 400%3b font-family: arial%2c sans-serif%3b' class='text' alignment-baseline='central' dominant-baseline='central' y='8.5' x='316'%3e%3ctspan dy='0' x='316'%3eRelying Party (RP)%3c/tspan%3e%3c/text%3e%3c/g%3e%3cg%3e%3crect class='actor actor-bottom' ry='3' rx='3' name='SignIn' height='65' width='150' stroke='%23666' fill='%23eaeaea' y='524' x='1373'/%3e%3ctext style='text-anchor: middle%3b font-size: 16px%3b font-weight: 400%3b font-family: arial%2c sans-serif%3b' class='actor actor-box' alignment-baseline='central' dominant-baseline='central' y='556.5' x='1448'%3e%3ctspan dy='0' x='1448'%3eSign-in page%3c/tspan%3e%3c/text%3e%3c/g%3e%3cg%3e%3crect class='actor actor-bottom' ry='3' rx='3' name='OIDC' height='65' width='150' stroke='%23666' fill='%23eaeaea' y='524' x='984'/%3e%3ctext style='text-anchor: middle%3b font-size: 16px%3b font-weight: 400%3b font-family: arial%2c sans-serif%3b' class='actor actor-box' alignment-baseline='central' dominant-baseline='central' y='556.5' x='1059'%3e%3ctspan dy='0' x='1059'%3eOIDC provider%3c/tspan%3e%3c/text%3e%3c/g%3e%3cg%3e%3crect class='actor actor-bottom' ry='3' rx='3' name='Client' height='65' width='150' stroke='%23666' fill='%23eaeaea' y='524' x='241'/%3e%3ctext style='text-anchor: middle%3b font-size: 16px%3b font-weight: 400%3b font-family: arial%2c sans-serif%3b' class='actor actor-box' alignment-baseline='central' dominant-baseline='central' y='556.5' x='316'%3e%3ctspan dy='0' x='316'%3eClient application%3c/tspan%3e%3c/text%3e%3c/g%3e%3cg/%3e%3cg%3e%3cline name='SignIn' stroke='%23999' stroke-width='0.5px' class='actor-line 200' y2='524' x2='1448' y1='92' x1='1448' id='actor3'/%3e%3cg id='root-3'%3e%3crect class='actor actor-top' ry='3' rx='3' name='SignIn' height='65' width='150' stroke='%23666' fill='%23eaeaea' y='27' x='1373'/%3e%3ctext style='text-anchor: middle%3b font-size: 16px%3b font-weight: 400%3b font-family: arial%2c sans-serif%3b' class='actor actor-box' alignment-baseline='central' dominant-baseline='central' y='59.5' x='1448'%3e%3ctspan dy='0' x='1448'%3eSign-in page%3c/tspan%3e%3c/text%3e%3c/g%3e%3c/g%3e%3cg%3e%3cline name='OIDC' stroke='%23999' stroke-width='0.5px' class='actor-line 200' y2='524' x2='1059' y1='92' x1='1059' id='actor2'/%3e%3cg id='root-2'%3e%3crect class='actor actor-top' ry='3' rx='3' name='OIDC' height='65' width='150' stroke='%23666' fill='%23eaeaea' y='27' x='984'/%3e%3ctext style='text-anchor: middle%3b font-size: 16px%3b font-weight: 400%3b font-family: arial%2c sans-serif%3b' class='actor actor-box' alignment-baseline='central' dominant-baseline='central' y='59.5' x='1059'%3e%3ctspan dy='0' x='1059'%3eOIDC provider%3c/tspan%3e%3c/text%3e%3c/g%3e%3c/g%3e%3cg%3e%3cline name='Client' stroke='%23999' stroke-width='0.5px' class='actor-line 200' y2='524' x2='316' y1='92' x1='316' id='actor1'/%3e%3cg id='root-1'%3e%3crect class='actor actor-top' ry='3' rx='3' name='Client' height='65' width='150' stroke='%23666' fill='%23eaeaea' y='27' x='241'/%3e%3ctext style='text-anchor: middle%3b font-size: 16px%3b font-weight: 400%3b font-family: arial%2c sans-serif%3b' class='actor actor-box' alignment-baseline='central' dominant-baseline='central' y='59.5' x='316'%3e%3ctspan dy='0' x='316'%3eClient application%3c/tspan%3e%3c/text%3e%3c/g%3e%3c/g%3e%3cg%3e%3cline name='User' stroke='%23999' stroke-width='0.5px' class='actor-line 200' y2='524' x2='75' y1='107' x1='75' id='actor0'/%3e%3c/g%3e%3cstyle%3e%23mermaid-0%7bfont-family:arial%2csans-serif%3bfont-size:16px%3bfill:%23333%3b%7d%23mermaid-0 .error-icon%7bfill:%23552222%3b%7d%23mermaid-0 .error-text%7bfill:%23552222%3bstroke:%23552222%3b%7d%23mermaid-0 .edge-thickness-normal%7bstroke-width:1px%3b%7d%23mermaid-0 .edge-thickness-thick%7bstroke-width:3.5px%3b%7d%23mermaid-0 .edge-pattern-solid%7bstroke-dasharray:0%3b%7d%23mermaid-0 .edge-thickness-invisible%7bstroke-width:0%3bfill:none%3b%7d%23mermaid-0 .edge-pattern-dashed%7bstroke-dasharray:3%3b%7d%23mermaid-0 .edge-pattern-dotted%7bstroke-dasharray:2%3b%7d%23mermaid-0 .marker%7bfill:%23333333%3bstroke:%23333333%3b%7d%23mermaid-0 .marker.cross%7bstroke:%23333333%3b%7d%23mermaid-0 svg%7bfont-family:arial%2csans-serif%3bfont-size:16px%3b%7d%23mermaid-0 p%7bmargin:0%3b%7d%23mermaid-0 .actor%7bstroke:hsl(259.6261682243%2c 59.7765363128%25%2c 87.9019607843%25)%3bfill:%23ECECFF%3b%7d%23mermaid-0 text.actor%26gt%3btspan%7bfill:black%3bstroke:none%3b%7d%23mermaid-0 .actor-line%7bstroke:hsl(259.6261682243%2c 59.7765363128%25%2c 87.9019607843%25)%3b%7d%23mermaid-0 .messageLine0%7bstroke-width:1.5%3bstroke-dasharray:none%3bstroke:%23333%3b%7d%23mermaid-0 .messageLine1%7bstroke-width:1.5%3bstroke-dasharray:2%2c2%3bstroke:%23333%3b%7d%23mermaid-0 %23arrowhead path%7bfill:%23333%3bstroke:%23333%3b%7d%23mermaid-0 .sequenceNumber%7bfill:white%3b%7d%23mermaid-0 %23sequencenumber%7bfill:%23333%3b%7d%23mermaid-0 %23crosshead path%7bfill:%23333%3bstroke:%23333%3b%7d%23mermaid-0 .messageText%7bfill:%23333%3bstroke:none%3b%7d%23mermaid-0 .labelBox%7bstroke:hsl(259.6261682243%2c 59.7765363128%25%2c 87.9019607843%25)%3bfill:%23ECECFF%3b%7d%23mermaid-0 .labelText%2c%23mermaid-0 .labelText%26gt%3btspan%7bfill:black%3bstroke:none%3b%7d%23mermaid-0 .loopText%2c%23mermaid-0 .loopText%26gt%3btspan%7bfill:black%3bstroke:none%3b%7d%23mermaid-0 .loopLine%7bstroke-width:2px%3bstroke-dasharray:2%2c2%3bstroke:hsl(259.6261682243%2c 59.7765363128%25%2c 87.9019607843%25)%3bfill:hsl(259.6261682243%2c 59.7765363128%25%2c 87.9019607843%25)%3b%7d%23mermaid-0 .note%7bstroke:%23aaaa33%3bfill:%23fff5ad%3b%7d%23mermaid-0 .noteText%2c%23mermaid-0 .noteText%26gt%3btspan%7bfill:black%3bstroke:none%3b%7d%23mermaid-0 .activation0%7bfill:%23f4f4f4%3bstroke:%23666%3b%7d%23mermaid-0 .activation1%7bfill:%23f4f4f4%3bstroke:%23666%3b%7d%23mermaid-0 .activation2%7bfill:%23f4f4f4%3bstroke:%23666%3b%7d%23mermaid-0 .actorPopupMenu%7bposition:absolute%3b%7d%23mermaid-0 .actorPopupMenuPanel%7bposition:absolute%3bfill:%23ECECFF%3bbox-shadow:0px 8px 16px 0px rgba(0%2c0%2c0%2c0.2)%3bfilter:drop-shadow(3px 5px 2px rgb(0 0 0 / 0.4))%3b%7d%23mermaid-0 .actor-man line%7bstroke:hsl(259.6261682243%2c 59.7765363128%25%2c 87.9019607843%25)%3bfill:%23ECECFF%3b%7d%23mermaid-0 .actor-man circle%2c%23mermaid-0 line%7bstroke:hsl(259.6261682243%2c 59.7765363128%25%2c 87.9019607843%25)%3bfill:%23ECECFF%3bstroke-width:2px%3b%7d%23mermaid-0 :root%7b--mermaid-font-family:arial%2csans-serif%3b%7d%3c/style%3e%3cg/%3e%3cdefs%3e%3csymbol height='24' width='24' id='computer'%3e%3cpath d='M2 2v13h20v-13h-20zm18 11h-16v-9h16v9zm-10.228 6l.466-1h3.524l.467 1h-4.457zm14.228 3h-24l2-6h2.104l-1.33 4h18.45l-1.297-4h2.073l2 6zm-5-10h-14v-7h14v7z' transform='scale(.5)'/%3e%3c/symbol%3e%3c/defs%3e%3cdefs%3e%3csymbol clip-rule='evenodd' fill-rule='evenodd' id='database'%3e%3cpath d='M12.258.001l.256.004.255.005.253.008.251.01.249.012.247.015.246.016.242.019.241.02.239.023.236.024.233.027.231.028.229.031.225.032.223.034.22.036.217.038.214.04.211.041.208.043.205.045.201.046.198.048.194.05.191.051.187.053.183.054.18.056.175.057.172.059.168.06.163.061.16.063.155.064.15.066.074.033.073.033.071.034.07.034.069.035.068.035.067.035.066.035.064.036.064.036.062.036.06.036.06.037.058.037.058.037.055.038.055.038.053.038.052.038.051.039.05.039.048.039.047.039.045.04.044.04.043.04.041.04.04.041.039.041.037.041.036.041.034.041.033.042.032.042.03.042.029.042.027.042.026.043.024.043.023.043.021.043.02.043.018.044.017.043.015.044.013.044.012.044.011.045.009.044.007.045.006.045.004.045.002.045.001.045v17l-.001.045-.002.045-.004.045-.006.045-.007.045-.009.044-.011.045-.012.044-.013.044-.015.044-.017.043-.018.044-.02.043-.021.043-.023.043-.024.043-.026.043-.027.042-.029.042-.03.042-.032.042-.033.042-.034.041-.036.041-.037.041-.039.041-.04.041-.041.04-.043.04-.044.04-.045.04-.047.039-.048.039-.05.039-.051.039-.052.038-.053.038-.055.038-.055.038-.058.037-.058.037-.06.037-.06.036-.062.036-.064.036-.064.036-.066.035-.067.035-.068.035-.069.035-.07.034-.071.034-.073.033-.074.033-.15.066-.155.064-.16.063-.163.061-.168.06-.172.059-.175.057-.18.056-.183.054-.187.053-.191.051-.194.05-.198.048-.201.046-.205.045-.208.043-.211.041-.214.04-.217.038-.22.036-.223.034-.225.032-.229.031-.231.028-.233.027-.236.024-.239.023-.241.02-.242.019-.246.016-.247.015-.249.012-.251.01-.253.008-.255.005-.256.004-.258.001-.258-.001-.256-.004-.255-.005-.253-.008-.251-.01-.249-.012-.247-.015-.245-.016-.243-.019-.241-.02-.238-.023-.236-.024-.234-.027-.231-.028-.228-.031-.226-.032-.223-.034-.22-.036-.217-.038-.214-.04-.211-.041-.208-.043-.204-.045-.201-.046-.198-.048-.195-.05-.19-.051-.187-.053-.184-.054-.179-.056-.176-.057-.172-.059-.167-.06-.164-.061-.159-.063-.155-.064-.151-.066-.074-.033-.072-.033-.072-.034-.07-.034-.069-.035-.068-.035-.067-.035-.066-.035-.064-.036-.063-.036-.062-.036-.061-.036-.06-.037-.058-.037-.057-.037-.056-.038-.055-.038-.053-.038-.052-.038-.051-.039-.049-.039-.049-.039-.046-.039-.046-.04-.044-.04-.043-.04-.041-.04-.04-.041-.039-.041-.037-.041-.036-.041-.034-.041-.033-.042-.032-.042-.03-.042-.029-.042-.027-.042-.026-.043-.024-.043-.023-.043-.021-.043-.02-.043-.018-.044-.017-.043-.015-.044-.013-.044-.012-.044-.011-.045-.009-.044-.007-.045-.006-.045-.004-.045-.002-.045-.001-.045v-17l.001-.045.002-.045.004-.045.006-.045.007-.045.009-.044.011-.045.012-.044.013-.044.015-.044.017-.043.018-.044.02-.043.021-.043.023-.043.024-.043.026-.043.027-.042.029-.042.03-.042.032-.042.033-.042.034-.041.036-.041.037-.041.039-.041.04-.041.041-.04.043-.04.044-.04.046-.04.046-.039.049-.039.049-.039.051-.039.052-.038.053-.038.055-.038.056-.038.057-.037.058-.037.06-.037.061-.036.062-.036.063-.036.064-.036.066-.035.067-.035.068-.035.069-.035.07-.034.072-.034.072-.033.074-.033.151-.066.155-.064.159-.063.164-.061.167-.06.172-.059.176-.057.179-.056.184-.054.187-.053.19-.051.195-.05.198-.048.201-.046.204-.045.208-.043.211-.041.214-.04.217-.038.22-.036.223-.034.226-.032.228-.031.231-.028.234-.027.236-.024.238-.023.241-.02.243-.019.245-.016.247-.015.249-.012.251-.01.253-.008.255-.005.256-.004.258-.001.258.001zm-9.258 20.499v.01l.001.021.003.021.004.022.005.021.006.022.007.022.009.023.01.022.011.023.012.023.013.023.015.023.016.024.017.023.018.024.019.024.021.024.022.025.023.024.024.025.052.049.056.05.061.051.066.051.07.051.075.051.079.052.084.052.088.052.092.052.097.052.102.051.105.052.11.052.114.051.119.051.123.051.127.05.131.05.135.05.139.048.144.049.147.047.152.047.155.047.16.045.163.045.167.043.171.043.176.041.178.041.183.039.187.039.19.037.194.035.197.035.202.033.204.031.209.03.212.029.216.027.219.025.222.024.226.021.23.02.233.018.236.016.24.015.243.012.246.01.249.008.253.005.256.004.259.001.26-.001.257-.004.254-.005.25-.008.247-.011.244-.012.241-.014.237-.016.233-.018.231-.021.226-.021.224-.024.22-.026.216-.027.212-.028.21-.031.205-.031.202-.034.198-.034.194-.036.191-.037.187-.039.183-.04.179-.04.175-.042.172-.043.168-.044.163-.045.16-.046.155-.046.152-.047.148-.048.143-.049.139-.049.136-.05.131-.05.126-.05.123-.051.118-.052.114-.051.11-.052.106-.052.101-.052.096-.052.092-.052.088-.053.083-.051.079-.052.074-.052.07-.051.065-.051.06-.051.056-.05.051-.05.023-.024.023-.025.021-.024.02-.024.019-.024.018-.024.017-.024.015-.023.014-.024.013-.023.012-.023.01-.023.01-.022.008-.022.006-.022.006-.022.004-.022.004-.021.001-.021.001-.021v-4.127l-.077.055-.08.053-.083.054-.085.053-.087.052-.09.052-.093.051-.095.05-.097.05-.1.049-.102.049-.105.048-.106.047-.109.047-.111.046-.114.045-.115.045-.118.044-.12.043-.122.042-.124.042-.126.041-.128.04-.13.04-.132.038-.134.038-.135.037-.138.037-.139.035-.142.035-.143.034-.144.033-.147.032-.148.031-.15.03-.151.03-.153.029-.154.027-.156.027-.158.026-.159.025-.161.024-.162.023-.163.022-.165.021-.166.02-.167.019-.169.018-.169.017-.171.016-.173.015-.173.014-.175.013-.175.012-.177.011-.178.01-.179.008-.179.008-.181.006-.182.005-.182.004-.184.003-.184.002h-.37l-.184-.002-.184-.003-.182-.004-.182-.005-.181-.006-.179-.008-.179-.008-.178-.01-.176-.011-.176-.012-.175-.013-.173-.014-.172-.015-.171-.016-.17-.017-.169-.018-.167-.019-.166-.02-.165-.021-.163-.022-.162-.023-.161-.024-.159-.025-.157-.026-.156-.027-.155-.027-.153-.029-.151-.03-.15-.03-.148-.031-.146-.032-.145-.033-.143-.034-.141-.035-.14-.035-.137-.037-.136-.037-.134-.038-.132-.038-.13-.04-.128-.04-.126-.041-.124-.042-.122-.042-.12-.044-.117-.043-.116-.045-.113-.045-.112-.046-.109-.047-.106-.047-.105-.048-.102-.049-.1-.049-.097-.05-.095-.05-.093-.052-.09-.051-.087-.052-.085-.053-.083-.054-.08-.054-.077-.054v4.127zm0-5.654v.011l.001.021.003.021.004.021.005.022.006.022.007.022.009.022.01.022.011.023.012.023.013.023.015.024.016.023.017.024.018.024.019.024.021.024.022.024.023.025.024.024.052.05.056.05.061.05.066.051.07.051.075.052.079.051.084.052.088.052.092.052.097.052.102.052.105.052.11.051.114.051.119.052.123.05.127.051.131.05.135.049.139.049.144.048.147.048.152.047.155.046.16.045.163.045.167.044.171.042.176.042.178.04.183.04.187.038.19.037.194.036.197.034.202.033.204.032.209.03.212.028.216.027.219.025.222.024.226.022.23.02.233.018.236.016.24.014.243.012.246.01.249.008.253.006.256.003.259.001.26-.001.257-.003.254-.006.25-.008.247-.01.244-.012.241-.015.237-.016.233-.018.231-.02.226-.022.224-.024.22-.025.216-.027.212-.029.21-.03.205-.032.202-.033.198-.035.194-.036.191-.037.187-.039.183-.039.179-.041.175-.042.172-.043.168-.044.163-.045.16-.045.155-.047.152-.047.148-.048.143-.048.139-.05.136-.049.131-.05.126-.051.123-.051.118-.051.114-.052.11-.052.106-.052.101-.052.096-.052.092-.052.088-.052.083-.052.079-.052.074-.051.07-.052.065-.051.06-.05.056-.051.051-.049.023-.025.023-.024.021-.025.02-.024.019-.024.018-.024.017-.024.015-.023.014-.023.013-.024.012-.022.01-.023.01-.023.008-.022.006-.022.006-.022.004-.021.004-.022.001-.021.001-.021v-4.139l-.077.054-.08.054-.083.054-.085.052-.087.053-.09.051-.093.051-.095.051-.097.05-.1.049-.102.049-.105.048-.106.047-.109.047-.111.046-.114.045-.115.044-.118.044-.12.044-.122.042-.124.042-.126.041-.128.04-.13.039-.132.039-.134.038-.135.037-.138.036-.139.036-.142.035-.143.033-.144.033-.147.033-.148.031-.15.03-.151.03-.153.028-.154.028-.156.027-.158.026-.159.025-.161.024-.162.023-.163.022-.165.021-.166.02-.167.019-.169.018-.169.017-.171.016-.173.015-.173.014-.175.013-.175.012-.177.011-.178.009-.179.009-.179.007-.181.007-.182.005-.182.004-.184.003-.184.002h-.37l-.184-.002-.184-.003-.182-.004-.182-.005-.181-.007-.179-.007-.179-.009-.178-.009-.176-.011-.176-.012-.175-.013-.173-.014-.172-.015-.171-.016-.17-.017-.169-.018-.167-.019-.166-.02-.165-.021-.163-.022-.162-.023-.161-.024-.159-.025-.157-.026-.156-.027-.155-.028-.153-.028-.151-.03-.15-.03-.148-.031-.146-.033-.145-.033-.143-.033-.141-.035-.14-.036-.137-.036-.136-.037-.134-.038-.132-.039-.13-.039-.128-.04-.126-.041-.124-.042-.122-.043-.12-.043-.117-.044-.116-.044-.113-.046-.112-.046-.109-.046-.106-.047-.105-.048-.102-.049-.1-.049-.097-.05-.095-.051-.093-.051-.09-.051-.087-.053-.085-.052-.083-.054-.08-.054-.077-.054v4.139zm0-5.666v.011l.001.02.003.022.004.021.005.022.006.021.007.022.009.023.01.022.011.023.012.023.013.023.015.023.016.024.017.024.018.023.019.024.021.025.022.024.023.024.024.025.052.05.056.05.061.05.066.051.07.051.075.052.079.051.084.052.088.052.092.052.097.052.102.052.105.051.11.052.114.051.119.051.123.051.127.05.131.05.135.05.139.049.144.048.147.048.152.047.155.046.16.045.163.045.167.043.171.043.176.042.178.04.183.04.187.038.19.037.194.036.197.034.202.033.204.032.209.03.212.028.216.027.219.025.222.024.226.021.23.02.233.018.236.017.24.014.243.012.246.01.249.008.253.006.256.003.259.001.26-.001.257-.003.254-.006.25-.008.247-.01.244-.013.241-.014.237-.016.233-.018.231-.02.226-.022.224-.024.22-.025.216-.027.212-.029.21-.03.205-.032.202-.033.198-.035.194-.036.191-.037.187-.039.183-.039.179-.041.175-.042.172-.043.168-.044.163-.045.16-.045.155-.047.152-.047.148-.048.143-.049.139-.049.136-.049.131-.051.126-.05.123-.051.118-.052.114-.051.11-.052.106-.052.101-.052.096-.052.092-.052.088-.052.083-.052.079-.052.074-.052.07-.051.065-.051.06-.051.056-.05.051-.049.023-.025.023-.025.021-.024.02-.024.019-.024.018-.024.017-.024.015-.023.014-.024.013-.023.012-.023.01-.022.01-.023.008-.022.006-.022.006-.022.004-.022.004-.021.001-.021.001-.021v-4.153l-.077.054-.08.054-.083.053-.085.053-.087.053-.09.051-.093.051-.095.051-.097.05-.1.049-.102.048-.105.048-.106.048-.109.046-.111.046-.114.046-.115.044-.118.044-.12.043-.122.043-.124.042-.126.041-.128.04-.13.039-.132.039-.134.038-.135.037-.138.036-.139.036-.142.034-.143.034-.144.033-.147.032-.148.032-.15.03-.151.03-.153.028-.154.028-.156.027-.158.026-.159.024-.161.024-.162.023-.163.023-.165.021-.166.02-.167.019-.169.018-.169.017-.171.016-.173.015-.173.014-.175.013-.175.012-.177.01-.178.01-.179.009-.179.007-.181.006-.182.006-.182.004-.184.003-.184.001-.185.001-.185-.001-.184-.001-.184-.003-.182-.004-.182-.006-.181-.006-.179-.007-.179-.009-.178-.01-.176-.01-.176-.012-.175-.013-.173-.014-.172-.015-.171-.016-.17-.017-.169-.018-.167-.019-.166-.02-.165-.021-.163-.023-.162-.023-.161-.024-.159-.024-.157-.026-.156-.027-.155-.028-.153-.028-.151-.03-.15-.03-.148-.032-.146-.032-.145-.033-.143-.034-.141-.034-.14-.036-.137-.036-.136-.037-.134-.038-.132-.039-.13-.039-.128-.041-.126-.041-.124-.041-.122-.043-.12-.043-.117-.044-.116-.044-.113-.046-.112-.046-.109-.046-.106-.048-.105-.048-.102-.048-.1-.05-.097-.049-.095-.051-.093-.051-.09-.052-.087-.052-.085-.053-.083-.053-.08-.054-.077-.054v4.153zm8.74-8.179l-.257.004-.254.005-.25.008-.247.011-.244.012-.241.014-.237.016-.233.018-.231.021-.226.022-.224.023-.22.026-.216.027-.212.028-.21.031-.205.032-.202.033-.198.034-.194.036-.191.038-.187.038-.183.04-.179.041-.175.042-.172.043-.168.043-.163.045-.16.046-.155.046-.152.048-.148.048-.143.048-.139.049-.136.05-.131.05-.126.051-.123.051-.118.051-.114.052-.11.052-.106.052-.101.052-.096.052-.092.052-.088.052-.083.052-.079.052-.074.051-.07.052-.065.051-.06.05-.056.05-.051.05-.023.025-.023.024-.021.024-.02.025-.019.024-.018.024-.017.023-.015.024-.014.023-.013.023-.012.023-.01.023-.01.022-.008.022-.006.023-.006.021-.004.022-.004.021-.001.021-.001.021.001.021.001.021.004.021.004.022.006.021.006.023.008.022.01.022.01.023.012.023.013.023.014.023.015.024.017.023.018.024.019.024.02.025.021.024.023.024.023.025.051.05.056.05.06.05.065.051.07.052.074.051.079.052.083.052.088.052.092.052.096.052.101.052.106.052.11.052.114.052.118.051.123.051.126.051.131.05.136.05.139.049.143.048.148.048.152.048.155.046.16.046.163.045.168.043.172.043.175.042.179.041.183.04.187.038.191.038.194.036.198.034.202.033.205.032.21.031.212.028.216.027.22.026.224.023.226.022.231.021.233.018.237.016.241.014.244.012.247.011.25.008.254.005.257.004.26.001.26-.001.257-.004.254-.005.25-.008.247-.011.244-.012.241-.014.237-.016.233-.018.231-.021.226-.022.224-.023.22-.026.216-.027.212-.028.21-.031.205-.032.202-.033.198-.034.194-.036.191-.038.187-.038.183-.04.179-.041.175-.042.172-.043.168-.043.163-.045.16-.046.155-.046.152-.048.148-.048.143-.048.139-.049.136-.05.131-.05.126-.051.123-.051.118-.051.114-.052.11-.052.106-.052.101-.052.096-.052.092-.052.088-.052.083-.052.079-.052.074-.051.07-.052.065-.051.06-.05.056-.05.051-.05.023-.025.023-.024.021-.024.02-.025.019-.024.018-.024.017-.023.015-.024.014-.023.013-.023.012-.023.01-.023.01-.022.008-.022.006-.023.006-.021.004-.022.004-.021.001-.021.001-.021-.001-.021-.001-.021-.004-.021-.004-.022-.006-.021-.006-.023-.008-.022-.01-.022-.01-.023-.012-.023-.013-.023-.014-.023-.015-.024-.017-.023-.018-.024-.019-.024-.02-.025-.021-.024-.023-.024-.023-.025-.051-.05-.056-.05-.06-.05-.065-.051-.07-.052-.074-.051-.079-.052-.083-.052-.088-.052-.092-.052-.096-.052-.101-.052-.106-.052-.11-.052-.114-.052-.118-.051-.123-.051-.126-.051-.131-.05-.136-.05-.139-.049-.143-.048-.148-.048-.152-.048-.155-.046-.16-.046-.163-.045-.168-.043-.172-.043-.175-.042-.179-.041-.183-.04-.187-.038-.191-.038-.194-.036-.198-.034-.202-.033-.205-.032-.21-.031-.212-.028-.216-.027-.22-.026-.224-.023-.226-.022-.231-.021-.233-.018-.237-.016-.241-.014-.244-.012-.247-.011-.25-.008-.254-.005-.257-.004-.26-.001-.26.001z' transform='scale(.5)'/%3e%3c/symbol%3e%3c/defs%3e%3cdefs%3e%3csymbol height='24' width='24' id='clock'%3e%3cpath d='M12 2c5.514 0 10 4.486 10 10s-4.486 10-10 10-10-4.486-10-10 4.486-10 10-10zm0-2c-6.627 0-12 5.373-12 12s5.373 12 12 12 12-5.373 12-12-5.373-12-12-12zm5.848 12.459c.202.038.202.333.001.372-1.907.361-6.045 1.111-6.547 1.111-.719 0-1.301-.582-1.301-1.301 0-.512.77-5.447 1.125-7.445.034-.192.312-.181.343.014l.985 6.238 5.394 1.011z' transform='scale(.5)'/%3e%3c/symbol%3e%3c/defs%3e%3cdefs%3e%3cmarker orient='auto-start-reverse' markerHeight='12' markerWidth='12' markerUnits='userSpaceOnUse' refY='5' refX='7.9' id='arrowhead'%3e%3cpath d='M -1 0 L 10 5 L 0 10 z'/%3e%3c/marker%3e%3c/defs%3e%3cdefs%3e%3cmarker refY='4.5' refX='4' orient='auto' markerHeight='8' markerWidth='15' id='crosshead'%3e%3cpath style='stroke-dasharray: 0%2c 0%3b' d='M 1%2c2 L 6%2c7 M 6%2c2 L 1%2c7' stroke-width='1pt' stroke='black' fill='none'/%3e%3c/marker%3e%3c/defs%3e%3cdefs%3e%3cmarker orient='auto' markerHeight='28' markerWidth='20' refY='7' refX='15.5' id='filled-head'%3e%3cpath d='M 18%2c7 L9%2c13 L14%2c7 L9%2c1 Z'/%3e%3c/marker%3e%3c/defs%3e%3cdefs%3e%3cmarker orient='auto' markerHeight='40' markerWidth='60' refY='15' refX='15' id='sequencenumber'%3e%3ccircle r='6' cy='15' cx='15'/%3e%3c/marker%3e%3c/defs%3e%3cg name='User' class='actor-man actor-top'%3e%3cline y2='72' x2='75' y1='52' x1='75' id='actor-man-torso0'/%3e%3cline y2='60' x2='93' y1='60' x1='57' id='actor-man-arms0'/%3e%3cline y2='72' x2='75' y1='87' x1='57'/%3e%3cline y2='87' x2='91' y1='72' x1='75'/%3e%3ccircle height='65' width='150' r='15' cy='37' cx='75'/%3e%3ctext style='text-anchor: middle%3b font-size: 16px%3b font-weight: 400%3b font-family: arial%2c sans-serif%3b' class='actor actor-man' alignment-baseline='central' dominant-baseline='central' y='94.5' x='75'%3e%3ctspan dy='0' x='75'%3eUser%3c/tspan%3e%3c/text%3e%3c/g%3e%3ctext style='font-family: arial%2c sans-serif%3b font-size: 16px%3b font-weight: 400%3b' dy='1em' class='messageText' alignment-baseline='middle' dominant-baseline='middle' text-anchor='middle' y='107' x='194'%3eAccess web application%3c/text%3e%3cline style='fill: none%3b' marker-start='url(%23sequencenumber)' marker-end='url(%23arrowhead)' stroke='none' stroke-width='2' class='messageLine0' y2='136' x2='312' y1='136' x1='76'/%3e%3ctext class='sequenceNumber' text-anchor='middle' font-size='12px' font-family='sans-serif' y='140' x='76'%3e1%3c/text%3e%3ctext style='font-family: arial%2c sans-serif%3b font-size: 16px%3b font-weight: 400%3b' dy='1em' class='messageText' alignment-baseline='middle' dominant-baseline='middle' text-anchor='middle' y='151' x='686'%3eRedirect user to OIDC for authentication%3c/text%3e%3cline style='fill: none%3b' marker-start='url(%23sequencenumber)' marker-end='url(%23arrowhead)' stroke='none' stroke-width='2' class='messageLine0' y2='180' x2='1055' y1='180' x1='317'/%3e%3ctext class='sequenceNumber' text-anchor='middle' font-size='12px' font-family='sans-serif' y='184' x='317'%3e2%3c/text%3e%3ctext style='font-family: arial%2c sans-serif%3b font-size: 16px%3b font-weight: 400%3b' dy='1em' class='messageText' alignment-baseline='middle' dominant-baseline='middle' text-anchor='middle' y='195' x='1060'%3eCheck user's sign-in session%3c/text%3e%3cpath style='stroke-dasharray: 3%2c 3%3b fill: none%3b' marker-start='url(%23sequencenumber)' marker-end='url(%23arrowhead)' stroke='none' stroke-width='2' class='messageLine1' d='M 1060%2c224 C 1120%2c214 1120%2c254 1060%2c244'/%3e%3ctext class='sequenceNumber' text-anchor='middle' font-size='12px' font-family='sans-serif' y='228' x='1060'%3e3%3c/text%3e%3ctext style='font-family: arial%2c sans-serif%3b font-size: 16px%3b font-weight: 400%3b' dy='1em' class='messageText' alignment-baseline='middle' dominant-baseline='middle' text-anchor='middle' y='269' x='1252'%3ePrompt user to sign in%3c/text%3e%3cline style='fill: none%3b' marker-start='url(%23sequencenumber)' marker-end='url(%23arrowhead)' stroke='none' stroke-width='2' class='messageLine0' y2='298' x2='1444' y1='298' x1='1060'/%3e%3ctext class='sequenceNumber' text-anchor='middle' font-size='12px' font-family='sans-serif' y='302' x='1060'%3e4%3c/text%3e%3ctext style='font-family: arial%2c sans-serif%3b font-size: 16px%3b font-weight: 400%3b' dy='1em' class='messageText' alignment-baseline='middle' dominant-baseline='middle' text-anchor='middle' y='313' x='1255'%3eIdentify user and submit the interaction result%3c/text%3e%3cline style='fill: none%3b' marker-start='url(%23sequencenumber)' marker-end='url(%23arrowhead)' stroke='none' stroke-width='2' class='messageLine0' y2='342' x2='1063' y1='342' x1='1447'/%3e%3ctext class='sequenceNumber' text-anchor='middle' font-size='12px' font-family='sans-serif' y='346' x='1447'%3e5%3c/text%3e%3ctext style='font-family: arial%2c sans-serif%3b font-size: 16px%3b font-weight: 400%3b' dy='1em' class='messageText' alignment-baseline='middle' dominant-baseline='middle' text-anchor='middle' y='357' x='1060'%3eEstablish user's sign-in session and authentication grant%3c/text%3e%3cpath style='stroke-dasharray: 3%2c 3%3b fill: none%3b' marker-start='url(%23sequencenumber)' marker-end='url(%23arrowhead)' stroke='none' stroke-width='2' class='messageLine1' d='M 1060%2c386 C 1120%2c376 1120%2c416 1060%2c406'/%3e%3ctext class='sequenceNumber' text-anchor='middle' font-size='12px' font-family='sans-serif' y='390' x='1060'%3e6%3c/text%3e%3ctext style='font-family: arial%2c sans-serif%3b font-size: 16px%3b font-weight: 400%3b' dy='1em' class='messageText' alignment-baseline='middle' dominant-baseline='middle' text-anchor='middle' y='431' x='689'%3eRedirect user back to the web application with authentication code (Authorization Code flow)%3c/text%3e%3cline style='fill: none%3b' marker-start='url(%23sequencenumber)' marker-end='url(%23arrowhead)' stroke='none' stroke-width='2' class='messageLine0' y2='460' x2='320' y1='460' x1='1058'/%3e%3ctext class='sequenceNumber' text-anchor='middle' font-size='12px' font-family='sans-serif' y='464' x='1058'%3e7%3c/text%3e%3ctext style='font-family: arial%2c sans-serif%3b font-size: 16px%3b font-weight: 400%3b' dy='1em' class='messageText' alignment-baseline='middle' dominant-baseline='middle' text-anchor='middle' y='475' x='686'%3eExchange the code for tokens%3c/text%3e%3cline style='fill: none%3b' marker-start='url(%23sequencenumber)' marker-end='url(%23arrowhead)' stroke='none' stroke-width='2' class='messageLine0' y2='504' x2='1055' y1='504' x1='317'/%3e%3ctext class='sequenceNumber' text-anchor='middle' font-size='12px' font-family='sans-serif' y='508' x='317'%3e8%3c/text%3e%3cg name='User' class='actor-man actor-bottom'%3e%3cline y2='569' x2='75' y1='549' x1='75' id='actor-man-torso3'/%3e%3cline y2='557' x2='93' y1='557' x1='57' id='actor-man-arms3'/%3e%3cline y2='569' x2='75' y1='584' x1='57'/%3e%3cline y2='584' x2='91' y1='569' x1='75'/%3e%3ccircle height='65' width='150' r='15' cy='534' cx='75'/%3e%3ctext style='text-anchor: middle%3b font-size: 16px%3b font-weight: 400%3b font-family: arial%2c sans-serif%3b' class='actor actor-man' alignment-baseline='central' dominant-baseline='central' y='591.5' x='75'%3e%3ctspan dy='0' x='75'%3eUser%3c/tspan%3e%3c/text%3e%3c/g%3e%3c/svg%3e)
%3btext-align:center%3b%7d%23mermaid-1 .edgeLabel p%7bbackground-color:rgba(232%2c232%2c232%2c 0.8)%3b%7d%23mermaid-1 .edgeLabel rect%7bopacity:0.5%3bbackground-color:rgba(232%2c232%2c232%2c 0.8)%3bfill:rgba(232%2c232%2c232%2c 0.8)%3b%7d%23mermaid-1 .labelBkg%7bbackground-color:rgba(232%2c 232%2c 232%2c 0.5)%3b%7d%23mermaid-1 .cluster rect%7bfill:%23ffffde%3bstroke:%23aaaa33%3bstroke-width:1px%3b%7d%23mermaid-1 .cluster text%7bfill:%23333%3b%7d%23mermaid-1 .cluster span%7bcolor:%23333%3b%7d%23mermaid-1 div.mermaidTooltip%7bposition:absolute%3btext-align:center%3bmax-width:200px%3bpadding:2px%3bfont-family:arial%2csans-serif%3bfont-size:12px%3bbackground:hsl(80%2c 100%25%2c 96.2745098039%25)%3bborder:1px solid %23aaaa33%3bborder-radius:2px%3bpointer-events:none%3bz-index:100%3b%7d%23mermaid-1 .flowchartTitleText%7btext-anchor:middle%3bfont-size:18px%3bfill:%23333%3b%7d%23mermaid-1 rect.text%7bfill:none%3bstroke-width:0%3b%7d%23mermaid-1 .icon-shape%2c%23mermaid-1 .image-shape%7bbackground-color:rgba(232%2c232%2c232%2c 0.8)%3btext-align:center%3b%7d%23mermaid-1 .icon-shape p%2c%23mermaid-1 .image-shape p%7bbackground-color:rgba(232%2c232%2c232%2c 0.8)%3bpadding:2px%3b%7d%23mermaid-1 .icon-shape rect%2c%23mermaid-1 .image-shape rect%7bopacity:0.5%3bbackground-color:rgba(232%2c232%2c232%2c 0.8)%3bfill:rgba(232%2c232%2c232%2c 0.8)%3b%7d%23mermaid-1 :root%7b--mermaid-font-family:arial%2csans-serif%3b%7d%3c/style%3e%3cg%3e%3cmarker orient='auto' markerHeight='8' markerWidth='8' markerUnits='userSpaceOnUse' refY='5' refX='5' viewBox='0 0 10 10' class='marker flowchart-v2' id='mermaid-1_flowchart-v2-pointEnd'%3e%3cpath style='stroke-width: 1%3b stroke-dasharray: 1%2c 0%3b' class='arrowMarkerPath' d='M 0 0 L 10 5 L 0 10 z'/%3e%3c/marker%3e%3cmarker orient='auto' markerHeight='8' markerWidth='8' markerUnits='userSpaceOnUse' refY='5' refX='4.5' viewBox='0 0 10 10' class='marker flowchart-v2' id='mermaid-1_flowchart-v2-pointStart'%3e%3cpath style='stroke-width: 1%3b stroke-dasharray: 1%2c 0%3b' class='arrowMarkerPath' d='M 0 5 L 10 10 L 10 0 z'/%3e%3c/marker%3e%3cmarker orient='auto' markerHeight='11' markerWidth='11' markerUnits='userSpaceOnUse' refY='5' refX='11' viewBox='0 0 10 10' class='marker flowchart-v2' id='mermaid-1_flowchart-v2-circleEnd'%3e%3ccircle style='stroke-width: 1%3b stroke-dasharray: 1%2c 0%3b' class='arrowMarkerPath' r='5' cy='5' cx='5'/%3e%3c/marker%3e%3cmarker orient='auto' markerHeight='11' markerWidth='11' markerUnits='userSpaceOnUse' refY='5' refX='-1' viewBox='0 0 10 10' class='marker flowchart-v2' id='mermaid-1_flowchart-v2-circleStart'%3e%3ccircle style='stroke-width: 1%3b stroke-dasharray: 1%2c 0%3b' class='arrowMarkerPath' r='5' cy='5' cx='5'/%3e%3c/marker%3e%3cmarker orient='auto' markerHeight='11' markerWidth='11' markerUnits='userSpaceOnUse' refY='5.2' refX='12' viewBox='0 0 11 11' class='marker cross flowchart-v2' id='mermaid-1_flowchart-v2-crossEnd'%3e%3cpath style='stroke-width: 2%3b stroke-dasharray: 1%2c 0%3b' class='arrowMarkerPath' d='M 1%2c1 l 9%2c9 M 10%2c1 l -9%2c9'/%3e%3c/marker%3e%3cmarker orient='auto' markerHeight='11' markerWidth='11' markerUnits='userSpaceOnUse' refY='5.2' refX='-1' viewBox='0 0 11 11' class='marker cross flowchart-v2' id='mermaid-1_flowchart-v2-crossStart'%3e%3cpath style='stroke-width: 2%3b stroke-dasharray: 1%2c 0%3b' class='arrowMarkerPath' d='M 1%2c1 l 9%2c9 M 10%2c1 l -9%2c9'/%3e%3c/marker%3e%3cg class='root'%3e%3cg class='clusters'%3e%3cg data-look='classic' id='DeviceB' class='cluster'%3e%3crect height='619.21875' width='330.88671875' y='136' x='8' style=''/%3e%3cg transform='translate(126.748046875%2c 136)' class='cluster-label'%3e%3cforeignObject height='24' width='93.390625'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='nodeLabel'%3e%3cp%3eUser agent B%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg data-look='classic' id='DeviceA' class='cluster'%3e%3crect height='619.21875' width='330.88671875' y='136' x='358.88671875' style=''/%3e%3cg transform='translate(478.080078125%2c 136)' class='cluster-label'%3e%3cforeignObject height='24' width='92.5'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='nodeLabel'%3e%3cp%3eUser agent A%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg data-look='classic' id='Layer4' class='cluster'%3e%3crect height='391.21875' width='290.88671875' y='339' x='28' style=''/%3e%3cg transform='translate(124.958984375%2c 339)' class='cluster-label'%3e%3cforeignObject height='24' width='96.96875'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='nodeLabel'%3e%3cp%3eLogto domain%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg data-look='classic' id='Layer3' class='cluster'%3e%3crect height='104' width='267.859375' y='161' x='35.6796875' style=''/%3e%3cg transform='translate(113.1328125%2c 161)' class='cluster-label'%3e%3cforeignObject height='24' width='112.953125'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='nodeLabel'%3e%3cp%3eClient domain B%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg data-look='classic' id='Layer2' class='cluster'%3e%3crect height='391.21875' width='290.88671875' y='339' x='378.88671875' style=''/%3e%3cg transform='translate(475.845703125%2c 339)' class='cluster-label'%3e%3cforeignObject height='24' width='96.96875'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='nodeLabel'%3e%3cp%3eLogto domain%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg data-look='classic' id='Layer1' class='cluster'%3e%3crect height='104' width='266.984375' y='161' x='387.00390625' style=''/%3e%3cg transform='translate(464.46484375%2c 161)' class='cluster-label'%3e%3cforeignObject height='24' width='112.0625'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='nodeLabel'%3e%3cp%3eClient domain A%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3c/g%3e%3cg class='edgePaths'%3e%3cpath marker-end='url(%23mermaid-1_flowchart-v2-pointEnd)' style='' class='edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link' id='L_U_A_0' d='M388.109%2c51.739L410.174%2c59.616C432.238%2c67.493%2c476.367%2c83.246%2c498.432%2c97.29C520.496%2c111.333%2c520.496%2c123.667%2c520.496%2c134C520.496%2c144.333%2c520.496%2c152.667%2c520.496%2c160.333C520.496%2c168%2c520.496%2c175%2c520.496%2c178.5L520.496%2c182'/%3e%3cpath marker-end='url(%23mermaid-1_flowchart-v2-pointEnd)' style='' class='edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link' id='L_A_C_1' d='M520.496%2c240L520.496%2c244.167C520.496%2c248.333%2c520.496%2c256.667%2c520.496%2c267C520.496%2c277.333%2c520.496%2c289.667%2c520.496%2c302C520.496%2c314.333%2c520.496%2c326.667%2c520.566%2c336.417C520.637%2c346.167%2c520.777%2c353.334%2c520.847%2c356.917L520.918%2c360.501'/%3e%3cpath marker-end='url(%23mermaid-1_flowchart-v2-pointEnd)' style='' class='edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link' id='L_U_B_2' d='M294.328%2c52.487L273.542%2c60.239C252.755%2c67.992%2c211.182%2c83.496%2c190.396%2c97.415C169.609%2c111.333%2c169.609%2c123.667%2c169.609%2c134C169.609%2c144.333%2c169.609%2c152.667%2c169.609%2c160.333C169.609%2c168%2c169.609%2c175%2c169.609%2c178.5L169.609%2c182'/%3e%3cpath marker-end='url(%23mermaid-1_flowchart-v2-pointEnd)' style='' class='edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link' id='L_B_E_3' d='M169.609%2c240L169.609%2c244.167C169.609%2c248.333%2c169.609%2c256.667%2c169.609%2c267C169.609%2c277.333%2c169.609%2c289.667%2c169.609%2c302C169.609%2c314.333%2c169.609%2c326.667%2c169.68%2c336.417C169.75%2c346.167%2c169.89%2c353.334%2c169.961%2c356.917L170.031%2c360.501'/%3e%3cpath marker-end='url(%23mermaid-1_flowchart-v2-pointEnd)' style='' class='edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link' id='L_C_D_4' d='M491.206%2c547.928L486.806%2c558.977C482.405%2c570.025%2c473.605%2c592.122%2c474.133%2c608.834C474.662%2c625.546%2c484.519%2c636.874%2c489.447%2c642.537L494.376%2c648.201'/%3e%3cpath marker-end='url(%23mermaid-1_flowchart-v2-pointEnd)' style='' class='edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link' id='L_E_F_5' d='M140.319%2c547.928L135.919%2c558.977C131.519%2c570.025%2c122.718%2c592.122%2c123.247%2c608.834C123.775%2c625.546%2c133.632%2c636.874%2c138.56%2c642.537L143.489%2c648.201'/%3e%3cpath marker-end='url(%23mermaid-1_flowchart-v2-pointEnd)' style='' class='edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link' id='L_D_C_6' d='M538.128%2c651.219L542.154%2c645.052C546.181%2c638.885%2c554.235%2c626.552%2c555.568%2c610.938C556.901%2c595.324%2c551.513%2c576.429%2c548.819%2c566.981L546.125%2c557.534'/%3e%3cpath marker-end='url(%23mermaid-1_flowchart-v2-pointEnd)' style='' class='edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link' id='L_F_E_7' d='M187.241%2c651.219L191.268%2c645.052C195.295%2c638.885%2c203.348%2c626.552%2c204.681%2c610.938C206.014%2c595.324%2c200.626%2c576.429%2c197.932%2c566.981L195.238%2c557.534'/%3e%3c/g%3e%3cg class='edgeLabels'%3e%3cg transform='translate(520.49609375%2c 99)' class='edgeLabel'%3e%3cg transform='translate(-24.90625%2c -12)' class='label'%3e%3cforeignObject height='24' width='49.8125'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' class='labelBkg' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='edgeLabel'%3e%3cp%3eSign-in%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg transform='translate(520.49609375%2c 302)' class='edgeLabel'%3e%3cg transform='translate(-60.9296875%2c -12)' class='label'%3e%3cforeignObject height='24' width='121.859375'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' class='labelBkg' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='edgeLabel'%3e%3cp%3eRedirect to Logto%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg transform='translate(169.609375%2c 99)' class='edgeLabel'%3e%3cg transform='translate(-24.90625%2c -12)' class='label'%3e%3cforeignObject height='24' width='49.8125'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' class='labelBkg' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='edgeLabel'%3e%3cp%3eSign-in%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg transform='translate(169.609375%2c 302)' class='edgeLabel'%3e%3cg transform='translate(-60.9296875%2c -12)' class='label'%3e%3cforeignObject height='24' width='121.859375'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' class='labelBkg' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='edgeLabel'%3e%3cp%3eRedirect to Logto%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg transform='translate(464.8046875%2c 614.21875)' class='edgeLabel'%3e%3cg transform='translate(-10.2265625%2c -12)' class='label'%3e%3cforeignObject height='24' width='20.453125'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' class='labelBkg' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='edgeLabel'%3e%3cp%3eNo%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg transform='translate(113.91796875%2c 614.21875)' class='edgeLabel'%3e%3cg transform='translate(-10.2265625%2c -12)' class='label'%3e%3cforeignObject height='24' width='20.453125'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' class='labelBkg' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='edgeLabel'%3e%3cp%3eNo%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg transform='translate(562.2890625%2c 614.21875)' class='edgeLabel'%3e%3cg transform='translate(-53.359375%2c -12)' class='label'%3e%3cforeignObject height='24' width='106.71875'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' class='labelBkg' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='edgeLabel'%3e%3cp%3eCreate session%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg transform='translate(211.40234375%2c 614.21875)' class='edgeLabel'%3e%3cg transform='translate(-53.359375%2c -12)' class='label'%3e%3cforeignObject height='24' width='106.71875'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' class='labelBkg' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='edgeLabel'%3e%3cp%3eCreate session%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3c/g%3e%3cg class='nodes'%3e%3cg transform='translate(341.21875%2c 35)' id='flowchart-U-0' class='node default'%3e%3crect height='54' width='93.78125' y='-27' x='-46.890625' style='' class='basic label-container'/%3e%3cg transform='translate(-16.890625%2c -12)' style='' class='label'%3e%3crect/%3e%3cforeignObject height='24' width='33.78125'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='nodeLabel'%3e%3cp%3eUser%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg transform='translate(520.49609375%2c 213)' id='flowchart-A-1' class='node default'%3e%3crect height='54' width='196.984375' y='-27' x='-98.4921875' style='' class='basic label-container'/%3e%3cg transform='translate(-68.4921875%2c -12)' style='' class='label'%3e%3crect/%3e%3cforeignObject height='24' width='136.984375'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='nodeLabel'%3e%3cp%3eClient Application A%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg transform='translate(520.49609375%2c 470.609375)' id='flowchart-C-2' class='node default'%3e%3cpolygon transform='translate(-106.609375%2c106.609375)' class='label-container' points='106.609375%2c0 213.21875%2c-106.609375 106.609375%2c-213.21875 0%2c-106.609375'/%3e%3cg transform='translate(-79.609375%2c -12)' style='' class='label'%3e%3crect/%3e%3cforeignObject height='24' width='159.21875'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='nodeLabel'%3e%3cp%3eLogto sign-in session%3f%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg transform='translate(520.49609375%2c 678.21875)' id='flowchart-D-3' class='node default'%3e%3crect height='54' width='147.171875' y='-27' x='-73.5859375' style='' class='basic label-container'/%3e%3cg transform='translate(-43.5859375%2c -12)' style='' class='label'%3e%3crect/%3e%3cforeignObject height='24' width='87.171875'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='nodeLabel'%3e%3cp%3esign-in page%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg transform='translate(169.609375%2c 213)' id='flowchart-B-4' class='node default'%3e%3crect height='54' width='197.859375' y='-27' x='-98.9296875' style='' class='basic label-container'/%3e%3cg transform='translate(-68.9296875%2c -12)' style='' class='label'%3e%3crect/%3e%3cforeignObject height='24' width='137.859375'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='nodeLabel'%3e%3cp%3eClient Application B%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg transform='translate(169.609375%2c 470.609375)' id='flowchart-E-5' class='node default'%3e%3cpolygon transform='translate(-106.609375%2c106.609375)' class='label-container' points='106.609375%2c0 213.21875%2c-106.609375 106.609375%2c-213.21875 0%2c-106.609375'/%3e%3cg transform='translate(-79.609375%2c -12)' style='' class='label'%3e%3crect/%3e%3cforeignObject height='24' width='159.21875'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='nodeLabel'%3e%3cp%3eLogto sign-in session%3f%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg transform='translate(169.609375%2c 678.21875)' id='flowchart-F-6' class='node default'%3e%3crect height='54' width='147.171875' y='-27' x='-73.5859375' style='' class='basic label-container'/%3e%3cg transform='translate(-43.5859375%2c -12)' style='' class='label'%3e%3crect/%3e%3cforeignObject height='24' width='87.171875'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='nodeLabel'%3e%3cp%3esign-in page%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3c/g%3e%3c/g%3e%3c/g%3e%3c/svg%3e)
%3btext-align:center%3b%7d%23mermaid-2 .edgeLabel p%7bbackground-color:rgba(232%2c232%2c232%2c 0.8)%3b%7d%23mermaid-2 .edgeLabel rect%7bopacity:0.5%3bbackground-color:rgba(232%2c232%2c232%2c 0.8)%3bfill:rgba(232%2c232%2c232%2c 0.8)%3b%7d%23mermaid-2 .labelBkg%7bbackground-color:rgba(232%2c 232%2c 232%2c 0.5)%3b%7d%23mermaid-2 .cluster rect%7bfill:%23ffffde%3bstroke:%23aaaa33%3bstroke-width:1px%3b%7d%23mermaid-2 .cluster text%7bfill:%23333%3b%7d%23mermaid-2 .cluster span%7bcolor:%23333%3b%7d%23mermaid-2 div.mermaidTooltip%7bposition:absolute%3btext-align:center%3bmax-width:200px%3bpadding:2px%3bfont-family:arial%2csans-serif%3bfont-size:12px%3bbackground:hsl(80%2c 100%25%2c 96.2745098039%25)%3bborder:1px solid %23aaaa33%3bborder-radius:2px%3bpointer-events:none%3bz-index:100%3b%7d%23mermaid-2 .flowchartTitleText%7btext-anchor:middle%3bfont-size:18px%3bfill:%23333%3b%7d%23mermaid-2 rect.text%7bfill:none%3bstroke-width:0%3b%7d%23mermaid-2 .icon-shape%2c%23mermaid-2 .image-shape%7bbackground-color:rgba(232%2c232%2c232%2c 0.8)%3btext-align:center%3b%7d%23mermaid-2 .icon-shape p%2c%23mermaid-2 .image-shape p%7bbackground-color:rgba(232%2c232%2c232%2c 0.8)%3bpadding:2px%3b%7d%23mermaid-2 .icon-shape rect%2c%23mermaid-2 .image-shape rect%7bopacity:0.5%3bbackground-color:rgba(232%2c232%2c232%2c 0.8)%3bfill:rgba(232%2c232%2c232%2c 0.8)%3b%7d%23mermaid-2 :root%7b--mermaid-font-family:arial%2csans-serif%3b%7d%3c/style%3e%3cg%3e%3cmarker orient='auto' markerHeight='8' markerWidth='8' markerUnits='userSpaceOnUse' refY='5' refX='5' viewBox='0 0 10 10' class='marker flowchart-v2' id='mermaid-2_flowchart-v2-pointEnd'%3e%3cpath style='stroke-width: 1%3b stroke-dasharray: 1%2c 0%3b' class='arrowMarkerPath' d='M 0 0 L 10 5 L 0 10 z'/%3e%3c/marker%3e%3cmarker orient='auto' markerHeight='8' markerWidth='8' markerUnits='userSpaceOnUse' refY='5' refX='4.5' viewBox='0 0 10 10' class='marker flowchart-v2' id='mermaid-2_flowchart-v2-pointStart'%3e%3cpath style='stroke-width: 1%3b stroke-dasharray: 1%2c 0%3b' class='arrowMarkerPath' d='M 0 5 L 10 10 L 10 0 z'/%3e%3c/marker%3e%3cmarker orient='auto' markerHeight='11' markerWidth='11' markerUnits='userSpaceOnUse' refY='5' refX='11' viewBox='0 0 10 10' class='marker flowchart-v2' id='mermaid-2_flowchart-v2-circleEnd'%3e%3ccircle style='stroke-width: 1%3b stroke-dasharray: 1%2c 0%3b' class='arrowMarkerPath' r='5' cy='5' cx='5'/%3e%3c/marker%3e%3cmarker orient='auto' markerHeight='11' markerWidth='11' markerUnits='userSpaceOnUse' refY='5' refX='-1' viewBox='0 0 10 10' class='marker flowchart-v2' id='mermaid-2_flowchart-v2-circleStart'%3e%3ccircle style='stroke-width: 1%3b stroke-dasharray: 1%2c 0%3b' class='arrowMarkerPath' r='5' cy='5' cx='5'/%3e%3c/marker%3e%3cmarker orient='auto' markerHeight='11' markerWidth='11' markerUnits='userSpaceOnUse' refY='5.2' refX='12' viewBox='0 0 11 11' class='marker cross flowchart-v2' id='mermaid-2_flowchart-v2-crossEnd'%3e%3cpath style='stroke-width: 2%3b stroke-dasharray: 1%2c 0%3b' class='arrowMarkerPath' d='M 1%2c1 l 9%2c9 M 10%2c1 l -9%2c9'/%3e%3c/marker%3e%3cmarker orient='auto' markerHeight='11' markerWidth='11' markerUnits='userSpaceOnUse' refY='5.2' refX='-1' viewBox='0 0 11 11' class='marker cross flowchart-v2' id='mermaid-2_flowchart-v2-crossStart'%3e%3cpath style='stroke-width: 2%3b stroke-dasharray: 1%2c 0%3b' class='arrowMarkerPath' d='M 1%2c1 l 9%2c9 M 10%2c1 l -9%2c9'/%3e%3c/marker%3e%3cg class='root'%3e%3cg class='clusters'/%3e%3cg class='edgePaths'/%3e%3cg class='edgeLabels'/%3e%3cg class='nodes'%3e%3cg transform='translate(0%2c 0)' class='root'%3e%3cg class='clusters'%3e%3cg data-look='classic' id='User' class='cluster'%3e%3crect height='897.21875' width='562.7421875' y='8' x='8' style=''/%3e%3cg transform='translate(243.12109375%2c 8)' class='cluster-label'%3e%3cforeignObject height='24' width='92.5'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='nodeLabel'%3e%3cp%3eUser agent A%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg data-look='classic' id='Layer2' class='cluster'%3e%3crect height='441.21875' width='419.03125' y='426.5' x='74.74609375' style=''/%3e%3cg transform='translate(235.77734375%2c 426.5)' class='cluster-label'%3e%3cforeignObject height='24' width='96.96875'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='nodeLabel'%3e%3cp%3eLogto domain%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg data-look='classic' id='Layer1' class='cluster'%3e%3crect height='129' width='514.84375' y='198.5' x='32.05859375' style=''/%3e%3cg transform='translate(233.44921875%2c 198.5)' class='cluster-label'%3e%3cforeignObject height='24' width='112.0625'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='nodeLabel'%3e%3cp%3eClient domain A%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3c/g%3e%3cg class='edgePaths'%3e%3cpath marker-end='url(%23mermaid-2_flowchart-v2-pointEnd)' style='' class='edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link' id='L_U_A_0' d='M245.599%2c99.5L232.258%2c107.75C218.916%2c116%2c192.234%2c132.5%2c178.892%2c149C165.551%2c165.5%2c165.551%2c182%2c165.551%2c195.833C165.551%2c209.667%2c165.551%2c220.833%2c165.551%2c226.417L165.551%2c232'/%3e%3cpath marker-end='url(%23mermaid-2_flowchart-v2-pointEnd)' style='' class='edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link' id='L_A_C_1' d='M165.551%2c290L165.551%2c296.25C165.551%2c302.5%2c165.551%2c315%2c165.551%2c329.5C165.551%2c344%2c165.551%2c360.5%2c165.551%2c377C165.551%2c393.5%2c165.551%2c410%2c177.611%2c432.285C189.671%2c454.57%2c213.79%2c482.641%2c225.85%2c496.676L237.91%2c510.711'/%3e%3cpath marker-end='url(%23mermaid-2_flowchart-v2-pointEnd)' style='' class='edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link' id='L_U_B_2' d='M332.924%2c99.5L346.266%2c107.75C359.607%2c116%2c386.29%2c132.5%2c399.631%2c149C412.973%2c165.5%2c412.973%2c182%2c412.973%2c195.833C412.973%2c209.667%2c412.973%2c220.833%2c412.973%2c226.417L412.973%2c232'/%3e%3cpath marker-end='url(%23mermaid-2_flowchart-v2-pointEnd)' style='' class='edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link' id='L_B_C_3' d='M412.973%2c290L412.973%2c296.25C412.973%2c302.5%2c412.973%2c315%2c412.973%2c329.5C412.973%2c344%2c412.973%2c360.5%2c412.973%2c377C412.973%2c393.5%2c412.973%2c410%2c401.076%2c432.282C389.179%2c454.565%2c365.386%2c482.629%2c353.49%2c496.661L341.593%2c510.694'/%3e%3cpath marker-end='url(%23mermaid-2_flowchart-v2-pointEnd)' style='' class='edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link' id='L_C_D_4' d='M241.608%2c629.565L228.117%2c645.757C214.627%2c661.95%2c187.645%2c694.334%2c187.45%2c718.436C187.255%2c742.537%2c213.846%2c758.355%2c227.141%2c766.265L240.437%2c774.174'/%3e%3cpath marker-end='url(%23mermaid-2_flowchart-v2-pointEnd)' style='' class='edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link' id='L_D_C_5' d='M323.508%2c776.219L333.972%2c767.969C344.436%2c759.719%2c365.365%2c743.219%2c366.902%2c720.558C368.439%2c697.897%2c350.586%2c669.076%2c341.659%2c654.665L332.733%2c640.255'/%3e%3c/g%3e%3cg class='edgeLabels'%3e%3cg transform='translate(165.55078125%2c 149)' class='edgeLabel'%3e%3cg transform='translate(-24.90625%2c -12)' class='label'%3e%3cforeignObject height='24' width='49.8125'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' class='labelBkg' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='edgeLabel'%3e%3cp%3eSign-in%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg transform='translate(165.55078125%2c 377)' class='edgeLabel'%3e%3cg transform='translate(-60.9296875%2c -12)' class='label'%3e%3cforeignObject height='24' width='121.859375'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' class='labelBkg' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='edgeLabel'%3e%3cp%3eRedirect to Logto%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg transform='translate(412.97265625%2c 149)' class='edgeLabel'%3e%3cg transform='translate(-24.90625%2c -12)' class='label'%3e%3cforeignObject height='24' width='49.8125'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' class='labelBkg' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='edgeLabel'%3e%3cp%3eSign-in%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg transform='translate(412.97265625%2c 377)' class='edgeLabel'%3e%3cg transform='translate(-60.9296875%2c -12)' class='label'%3e%3cforeignObject height='24' width='121.859375'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' class='labelBkg' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='edgeLabel'%3e%3cp%3eRedirect to Logto%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg transform='translate(160.6640625%2c 726.71875)' class='edgeLabel'%3e%3cg transform='translate(-10.2265625%2c -12)' class='label'%3e%3cforeignObject height='24' width='20.453125'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' class='labelBkg' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='edgeLabel'%3e%3cp%3eNo%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg transform='translate(386.29296875%2c 726.71875)' class='edgeLabel'%3e%3cg transform='translate(-53.359375%2c -12)' class='label'%3e%3cforeignObject height='24' width='106.71875'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' class='labelBkg' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='edgeLabel'%3e%3cp%3eCreate session%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3c/g%3e%3cg class='nodes'%3e%3cg transform='translate(289.26171875%2c 570.609375)' id='flowchart-C-26' class='node default'%3e%3cpolygon transform='translate(-106.609375%2c106.609375)' class='label-container' points='106.609375%2c0 213.21875%2c-106.609375 106.609375%2c-213.21875 0%2c-106.609375'/%3e%3cg transform='translate(-79.609375%2c -12)' style='' class='label'%3e%3crect/%3e%3cforeignObject height='24' width='159.21875'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='nodeLabel'%3e%3cp%3eLogto sign-in session%3f%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg transform='translate(289.26171875%2c 72.5)' id='flowchart-U-23' class='node default'%3e%3crect height='54' width='93.78125' y='-27' x='-46.890625' style='' class='basic label-container'/%3e%3cg transform='translate(-16.890625%2c -12)' style='' class='label'%3e%3crect/%3e%3cforeignObject height='24' width='33.78125'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='nodeLabel'%3e%3cp%3eUser%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg transform='translate(165.55078125%2c 263)' id='flowchart-A-24' class='node default'%3e%3crect height='54' width='196.984375' y='-27' x='-98.4921875' style='' class='basic label-container'/%3e%3cg transform='translate(-68.4921875%2c -12)' style='' class='label'%3e%3crect/%3e%3cforeignObject height='24' width='136.984375'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='nodeLabel'%3e%3cp%3eClient Application A%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg transform='translate(412.97265625%2c 263)' id='flowchart-B-25' class='node default'%3e%3crect height='54' width='197.859375' y='-27' x='-98.9296875' style='' class='basic label-container'/%3e%3cg transform='translate(-68.9296875%2c -12)' style='' class='label'%3e%3crect/%3e%3cforeignObject height='24' width='137.859375'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='nodeLabel'%3e%3cp%3eClient Application B%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg transform='translate(289.26171875%2c 803.21875)' id='flowchart-D-27' class='node default'%3e%3crect height='54' width='147.171875' y='-27' x='-73.5859375' style='' class='basic label-container'/%3e%3cg transform='translate(-43.5859375%2c -12)' style='' class='label'%3e%3crect/%3e%3cforeignObject height='24' width='87.171875'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='nodeLabel'%3e%3cp%3esign-in page%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3c/g%3e%3c/g%3e%3c/g%3e%3c/g%3e%3c/g%3e%3c/svg%3e)