chrisfu/prole
1
0
Fork 0
mirror of https://github.com/dredx/prole.git synced 2026-09-24 14:54:34 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

docs(knoe-auth): use [placeholder] instead of <placeholder> in mermaid

Browse Source 
Mermaid 10.7.0 chokes on bare <placeholder> in message text, parsing
it as HTML. Swap to square brackets in the cross-realm §4.3 sequence
diagram and the Gitea SPNEGO §5 diagram:

  <svc-host>, <SPNEGO>          (§4.3)
  <blob>                        (§5)

Matches the same fix landed in knoe-db's docs/knoe-auth.md.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
chrisfu 2026-05-11 16:31:22 -07:00
parent f1450605c2
commit f34d10908a
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
docs/knoe-auth.md
View File

@ -133,10 +133,10 @@ sequenceDiagram
WS->>SambaKDC: TGS_REQ for krbtgt/KNOE.LOCAL@PROLE.ORG WS->>SambaKDC: TGS_REQ for krbtgt/KNOE.LOCAL@PROLE.ORG
Note right of SambaKDC: Samba's krbtgt_KNOE.LOCAL user<br/>has the shared RC4 key Note right of SambaKDC: Samba's krbtgt_KNOE.LOCAL user<br/>has the shared RC4 key
SambaKDC-->>WS: cross-realm TGT<br/>(enc with shared key, kvno N) SambaKDC-->>WS: cross-realm TGT<br/>(enc with shared key, kvno N)
WS->>MITKDC: TGS_REQ for HTTP/<svc-host>@KNOE.LOCAL WS->>MITKDC: TGS_REQ for HTTP/[svc-host]@KNOE.LOCAL
Note right of MITKDC: Decrypts inbound TGT<br/>with matching RC4 key (kvno N) Note right of MITKDC: Decrypts inbound TGT<br/>with matching RC4 key (kvno N)
MITKDC-->>WS: service ticket MITKDC-->>WS: service ticket
WS->>Svc: HTTP/2 + Authorization: Negotiate <SPNEGO> WS->>Svc: HTTP/2 + Authorization: Negotiate [SPNEGO]
Svc-->>WS: 200 + identity = chrisfu (PROLE.ORG) Svc-->>WS: 200 + identity = chrisfu (PROLE.ORG)
``` ```
@ -176,7 +176,7 @@ sequenceDiagram
Trf->>SpnegoProxy: pass-through Trf->>SpnegoProxy: pass-through
SpnegoProxy-->>Br: 401 + WWW-Authenticate: Negotiate SpnegoProxy-->>Br: 401 + WWW-Authenticate: Negotiate
Br->>SambaKDC: get HTTP/git.prole.org service ticket Br->>SambaKDC: get HTTP/git.prole.org service ticket
Br->>SpnegoProxy: GET / + Authorization: Negotiate <blob> Br->>SpnegoProxy: GET / + Authorization: Negotiate [blob]
SpnegoProxy->>SpnegoProxy: validate SPNEGO with keytab<br/>(HTTP/git.prole.org@PROLE.ORG) SpnegoProxy->>SpnegoProxy: validate SPNEGO with keytab<br/>(HTTP/git.prole.org@PROLE.ORG)
SpnegoProxy->>Gitea: GET / + X-WEBAUTH-USER: chrisfu SpnegoProxy->>Gitea: GET / + X-WEBAUTH-USER: chrisfu
Note over Gitea: ENABLE_REVERSE_PROXY_AUTHENTICATION=true<br/>auto-provisions user on first sign-in Note over Gitea: ENABLE_REVERSE_PROXY_AUTHENTICATION=true<br/>auto-provisions user on first sign-in