diagrams/004-refresh-token.svg

<?xml version="1.0" encoding="UTF-8" standalone="no"?><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" contentScriptType="application/ecmascript" contentStyleType="text/css" height="485px" preserveAspectRatio="none" style="width:657px;height:485px;" version="1.1" viewBox="0 0 657 485" width="657px" zoomAndPan="magnify"><defs><filter height="300%" id="f1pze0xdagbhf7" width="300%" x="-1" y="-1"><feGaussianBlur result="blurOut" stdDeviation="2.0"/><feColorMatrix in="blurOut" result="blurOut2" type="matrix" values="0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 .4 0"/><feOffset dx="4.0" dy="4.0" in="blurOut2" result="blurOut3"/><feBlend in="SourceGraphic" in2="blurOut3" mode="normal"/></filter></defs><g><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacingAndGlyphs" textLength="209" x="219.5" y="23.5352">Refresh Token Abstract Flow</text><rect fill="#FFEEEE" height="432.9043" style="stroke: #A80036; stroke-width: 1.0;" width="326" x="313" y="34.4883"/><text fill="#000000" font-family="sans-serif" font-size="13" font-weight="bold" lengthAdjust="spacingAndGlyphs" textLength="105" x="423.5" y="47.0566">OAuth Provider</text><rect fill="#AACCFF" filter="url(#f1pze0xdagbhf7)" height="167.8633" style="stroke: #A80036; stroke-width: 1.0;" width="10" x="37" y="126.9766"/><rect fill="#FF8888" filter="url(#f1pze0xdagbhf7)" height="29.3105" style="stroke: #A80036; stroke-width: 1.0;" width="10" x="238" y="148.2871"/><rect fill="#FFDDDD" filter="url(#f1pze0xdagbhf7)" height="29.3105" style="stroke: #A80036; stroke-width: 1.0;" width="10" x="397" y="206.9082"/><rect fill="#DDFFDD" filter="url(#f1pze0xdagbhf7)" height="29.3105" style="stroke: #A80036; stroke-width: 1.0;" width="10" x="561" y="265.5293"/><rect fill="#FF22AA" filter="url(#f1pze0xdagbhf7)" height="29.3105" style="stroke: #A80036; stroke-width: 1.0;" width="10" x="561" y="367.4609"/><rect fill="#DDFFDD" filter="url(#f1pze0xdagbhf7)" height="29.3105" style="stroke: #A80036; stroke-width: 1.0;" width="10" x="561" y="426.082"/><line style="stroke: #A80036; stroke-width: 1.0; stroke-dasharray: 5.0,5.0;" x1="42" x2="42" y1="116.9766" y2="473.3926"/><line style="stroke: #A80036; stroke-width: 1.0; stroke-dasharray: 5.0,5.0;" x1="243" x2="243" y1="116.9766" y2="473.3926"/><line style="stroke: #A80036; stroke-width: 1.0; stroke-dasharray: 5.0,5.0;" x1="402" x2="402" y1="116.9766" y2="473.3926"/><line style="stroke: #A80036; stroke-width: 1.0; stroke-dasharray: 5.0,5.0;" x1="566" x2="566" y1="116.9766" y2="473.3926"/><rect fill="#AACCFF" filter="url(#f1pze0xdagbhf7)" height="30.4883" style="stroke: #A80036; stroke-width: 1.5;" width="54" x="13" y="81.4883"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacingAndGlyphs" textLength="40" x="20" y="102.0234">Client</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacingAndGlyphs" textLength="112" x="184" y="114.0234">Resource Owner</text><ellipse cx="243" cy="43.4883" fill="#FF8888" filter="url(#f1pze0xdagbhf7)" rx="8" ry="8" style="stroke: #A80036; stroke-width: 2.0;"/><path d="M243,51.4883 L243,78.4883 M230,59.4883 L256,59.4883 M243,78.4883 L230,93.4883 M243,78.4883 L256,93.4883 " fill="none" filter="url(#f1pze0xdagbhf7)" style="stroke: #A80036; stroke-width: 2.0;"/><rect fill="#FFDDDD" filter="url(#f1pze0xdagbhf7)" height="30.4883" style="stroke: #A80036; stroke-width: 1.5;" width="156" x="322" y="81.4883"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacingAndGlyphs" textLength="142" x="329" y="102.0234">Authorization Server</text><rect fill="#DDFFDD" filter="url(#f1pze0xdagbhf7)" height="30.4883" style="stroke: #A80036; stroke-width: 1.5;" width="124" x="502" y="81.4883"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacingAndGlyphs" textLength="110" x="509" y="102.0234">Resource Server</text><rect fill="#AACCFF" filter="url(#f1pze0xdagbhf7)" height="167.8633" style="stroke: #A80036; stroke-width: 1.0;" width="10" x="37" y="126.9766"/><rect fill="#FF8888" filter="url(#f1pze0xdagbhf7)" height="29.3105" style="stroke: #A80036; stroke-width: 1.0;" width="10" x="238" y="148.2871"/><rect fill="#FFDDDD" filter="url(#f1pze0xdagbhf7)" height="29.3105" style="stroke: #A80036; stroke-width: 1.0;" width="10" x="397" y="206.9082"/><rect fill="#DDFFDD" filter="url(#f1pze0xdagbhf7)" height="29.3105" style="stroke: #A80036; stroke-width: 1.0;" width="10" x="561" y="265.5293"/><rect fill="#FF22AA" filter="url(#f1pze0xdagbhf7)" height="29.3105" style="stroke: #A80036; stroke-width: 1.0;" width="10" x="561" y="367.4609"/><rect fill="#DDFFDD" filter="url(#f1pze0xdagbhf7)" height="29.3105" style="stroke: #A80036; stroke-width: 1.0;" width="10" x="561" y="426.082"/><polygon fill="#A80036" points="226,144.2871,236,148.2871,226,152.2871,230,148.2871" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.0;" x1="47" x2="232" y1="148.2871" y2="148.2871"/><text fill="#000000" font-family="sans-serif" font-size="13" font-weight="bold" lengthAdjust="spacingAndGlyphs" textLength="20" x="62" y="143.5449">(A)</text><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="140" x="86" y="143.5449">Authorization Request</text><polygon fill="#A80036" points="58,173.5977,48,177.5977,58,181.5977,54,177.5977" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.0; stroke-dasharray: 2.0,2.0;" x1="52" x2="242" y1="177.5977" y2="177.5977"/><text fill="#000000" font-family="sans-serif" font-size="13" font-weight="bold" lengthAdjust="spacingAndGlyphs" textLength="18" x="64" y="172.8555">(B)</text><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="124" x="86" y="172.8555">Authorization Grant</text><polygon fill="#A80036" points="385,202.9082,395,206.9082,385,210.9082,389,206.9082" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.0;" x1="47" x2="391" y1="206.9082" y2="206.9082"/><text fill="#000000" font-family="sans-serif" font-size="13" font-weight="bold" lengthAdjust="spacingAndGlyphs" textLength="19" x="62" y="202.166">(C)</text><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="124" x="85" y="202.166">Authorization Grant</text><polygon fill="#A80036" points="58,232.2188,48,236.2188,58,240.2188,54,236.2188" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.0; stroke-dasharray: 2.0,2.0;" x1="52" x2="401" y1="236.2188" y2="236.2188"/><text fill="#000000" font-family="sans-serif" font-size="13" font-weight="bold" lengthAdjust="spacingAndGlyphs" textLength="20" x="64" y="231.4766">(D)</text><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="87" x="88" y="231.4766">Access Token</text><polygon fill="#A80036" points="549,261.5293,559,265.5293,549,269.5293,553,265.5293" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.0;" x1="47" x2="555" y1="265.5293" y2="265.5293"/><text fill="#000000" font-family="sans-serif" font-size="13" font-weight="bold" lengthAdjust="spacingAndGlyphs" textLength="18" x="66" y="260.7871">(E)</text><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="87" x="88" y="260.7871">Access Token</text><polygon fill="#A80036" points="53,290.8398,43,294.8398,53,298.8398,49,294.8398" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.0; stroke-dasharray: 2.0,2.0;" x1="47" x2="565" y1="294.8398" y2="294.8398"/><text fill="#000000" font-family="sans-serif" font-size="13" font-weight="bold" lengthAdjust="spacingAndGlyphs" textLength="17" x="67" y="290.0977">(F)</text><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="120" x="88" y="290.0977">Protected Resource</text><rect fill="#EEEEEE" filter="url(#f1pze0xdagbhf7)" height="3" style="stroke: #EEEEEE; stroke-width: 1.0;" width="642" x="3" y="323.4951"/><line style="stroke: #000000; stroke-width: 1.0;" x1="3" x2="645" y1="323.4951" y2="323.4951"/><line style="stroke: #000000; stroke-width: 1.0;" x1="3" x2="645" y1="326.4951" y2="326.4951"/><rect fill="#EEEEEE" filter="url(#f1pze0xdagbhf7)" height="23.3105" style="stroke: #000000; stroke-width: 2.0;" width="100" x="274" y="312.8398"/><text fill="#000000" font-family="sans-serif" font-size="13" font-weight="bold" lengthAdjust="spacingAndGlyphs" textLength="86" x="280" y="329.4082">After a while</text><polygon fill="#A80036" points="549,363.4609,559,367.4609,549,371.4609,553,367.4609" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.0;" x1="42" x2="555" y1="367.4609" y2="367.4609"/><text fill="#000000" font-family="sans-serif" font-size="13" font-weight="bold" lengthAdjust="spacingAndGlyphs" textLength="18" x="61" y="362.7188">(E)</text><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="87" x="83" y="362.7188">Access Token</text><polygon fill="#A80036" points="53,392.7715,43,396.7715,53,400.7715,49,396.7715" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.0; stroke-dasharray: 2.0,2.0;" x1="47" x2="565" y1="396.7715" y2="396.7715"/><text fill="#000000" font-family="sans-serif" font-size="13" font-weight="bold" lengthAdjust="spacingAndGlyphs" textLength="17" x="67" y="392.0293">(F)</text><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="119" x="88" y="392.0293">Invalid Token Error</text><line style="stroke: #A80036; stroke-width: 2.0;" x1="557" x2="575" y1="387.7715" y2="405.7715"/><line style="stroke: #A80036; stroke-width: 2.0;" x1="557" x2="575" y1="405.7715" y2="387.7715"/><polygon fill="#A80036" points="549,422.082,559,426.082,549,430.082,553,426.082" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.0;" x1="42" x2="555" y1="426.082" y2="426.082"/><text fill="#000000" font-family="sans-serif" font-size="13" font-weight="bold" lengthAdjust="spacingAndGlyphs" textLength="20" x="61" y="421.3398">(G)</text><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="90" x="85" y="421.3398">Refresh Token</text><polygon fill="#A80036" points="53,451.3926,43,455.3926,53,459.3926,49,455.3926" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.0; stroke-dasharray: 2.0,2.0;" x1="47" x2="565" y1="455.3926" y2="455.3926"/><text fill="#000000" font-family="sans-serif" font-size="13" font-weight="bold" lengthAdjust="spacingAndGlyphs" textLength="17" x="67" y="450.6504">(F)</text><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="252" x="88" y="450.6504">Access Token &amp; Optional Refresh Token</text><!--
@startuml

title Refresh Token Abstract Flow
hide footbox
skinparam {
  ParticipantPadding 5
  BoxPadding 5
}

participant "Client"                as CL       #ACF
actor       "Resource Owner"        as RO       #F88
box "OAuth Provider" #FEE
participant "Authorization Server"  as AS       #FDD
participant "Resource Server"       as RS       #DFD
end box

activate CL #ACF
  CL->RO ++ #F88:   <b>  (A)</b> Authorization Request
  return            <b>(B)</b> Authorization Grant
  CL->AS ++ #FDD:   <b>  (C)</b> Authorization Grant
  return            <b>(D)</b> Access Token
  CL->RS ++ #DFD:   <b>   (E)</b> Access Token
  return            <b>  (F)</b> Protected Resource
deactivate CL

==After a while==

CL -> RS:   <b>   (E)</b> Access Token
activate RS #F2A
CL <- -RS: <b>  (F)</b> Invalid Token Error
destroy RS

CL -> RS ++ #DFD:   <b>   (G)</b> Refresh Token
return <b>  (F)</b> Access Token & Optional Refresh Token

@enduml

PlantUML version 1.2019.06(Fri May 24 13:10:25 EDT 2019)
(GPL source distribution)
Java Runtime: Java(TM) SE Runtime Environment
JVM: Java HotSpot(TM) 64-Bit Server VM
Java Version: 1.8.0_202-b08
Operating System: Mac OS X
OS Version: 10.14.5
Default Encoding: UTF-8
Language: en
Country: CA
--></g></svg>