From f34d10908a0c8dd8b310023677d8b4b50671e9e4 Mon Sep 17 00:00:00 2001 From: chrisfu Date: Mon, 11 May 2026 16:31:22 -0700 Subject: [PATCH] docs(knoe-auth): use [placeholder] instead of in mermaid MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Mermaid 10.7.0 chokes on bare in message text, parsing it as HTML. Swap to square brackets in the cross-realm §4.3 sequence diagram and the Gitea SPNEGO §5 diagram: , (§4.3) (§5) Matches the same fix landed in knoe-db's docs/knoe-auth.md. Co-Authored-By: Claude Sonnet 4.6 --- docs/knoe-auth.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/docs/knoe-auth.md b/docs/knoe-auth.md index dd0f120..4cdaba0 100644 --- a/docs/knoe-auth.md +++ b/docs/knoe-auth.md @@ -133,10 +133,10 @@ sequenceDiagram WS->>SambaKDC: TGS_REQ for krbtgt/KNOE.LOCAL@PROLE.ORG Note right of SambaKDC: Samba's krbtgt_KNOE.LOCAL user
has the shared RC4 key SambaKDC-->>WS: cross-realm TGT
(enc with shared key, kvno N) - WS->>MITKDC: TGS_REQ for HTTP/@KNOE.LOCAL + WS->>MITKDC: TGS_REQ for HTTP/[svc-host]@KNOE.LOCAL Note right of MITKDC: Decrypts inbound TGT
with matching RC4 key (kvno N) MITKDC-->>WS: service ticket - WS->>Svc: HTTP/2 + Authorization: Negotiate + WS->>Svc: HTTP/2 + Authorization: Negotiate [SPNEGO] Svc-->>WS: 200 + identity = chrisfu (PROLE.ORG) ``` @@ -176,7 +176,7 @@ sequenceDiagram Trf->>SpnegoProxy: pass-through SpnegoProxy-->>Br: 401 + WWW-Authenticate: Negotiate Br->>SambaKDC: get HTTP/git.prole.org service ticket - Br->>SpnegoProxy: GET / + Authorization: Negotiate + Br->>SpnegoProxy: GET / + Authorization: Negotiate [blob] SpnegoProxy->>SpnegoProxy: validate SPNEGO with keytab
(HTTP/git.prole.org@PROLE.ORG) SpnegoProxy->>Gitea: GET / + X-WEBAUTH-USER: chrisfu Note over Gitea: ENABLE_REVERSE_PROXY_AUTHENTICATION=true
auto-provisions user on first sign-in