SpecsModelExplore
User sign-in
IDsign-in
DescriptionHow a browser request authenticates across the reverse proxy, Studio, Keycloak, and the realtime server.
Keysign-in
100%

Steps

Workflow steps
NumberSourceDestinationDescription
1BrowserReverse ProxyOpen Studio (no session)
2Reverse ProxyIOModel StudioForward request
3IOModel StudioBrowserRedirect to Keycloak
4BrowserReverse ProxyFollow auth redirect
5Reverse ProxyKeycloakRoute to identity provider
6KeycloakBrowserLogin form
7BrowserKeycloakSubmit credentials
8KeycloakBrowserAuth code + SSO cookie
9BrowserReverse ProxyCallback with auth code
10Reverse ProxyIOModel StudioForward callback
11IOModel StudioKeycloakExchange code for tokens
12KeycloakIOModel StudioID and access tokens
13IOModel StudioBrowserApp session established
14BrowserReverse ProxyOpen realtime document
15Reverse ProxyIOModel StudioRequest WebSocket token
16IOModel StudioYjs Realtime ServerMint short-lived WS token
17IOModel StudioBrowserWS token
18BrowserYjs Realtime ServerConnect over WebSocket (token)
19Yjs Realtime ServerBrowserRealtime sync started
Open diagram editor (read-only in guest)