<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<oembed><type>rich</type><version>1.0</version><provider_name>phorkie</provider_name><provider_url>https://p.cweiske.de/</provider_url><title>indieauth authorization process</title><author_name>Christian Weiske</author_name><cache_age>86400</cache_age><width>900</width><height>900</height><html>&lt;!-- embedding all files of https://p.cweiske.de/181 --&gt;
&lt;link rel="stylesheet" href="https://p.cweiske.de/css/embed.css"/&gt;
&lt;div class="phork" id="181"&gt;
    &lt;div class="phork-file"&gt;
 &lt;div class="phork-content"&gt;
  
&lt;div class="document"&gt;


&lt;p&gt;&lt;a class="reference external" href="https://www.websequencediagrams.com/"&gt;https://www.websequencediagrams.com/&lt;/a&gt;&lt;/p&gt;
&lt;/div&gt;

 &lt;/div&gt;
 &lt;div class="phork-meta"&gt;
  &lt;a href="https://p.cweiske.de/181/rev-raw/34400f67f9bdc6f08b590819d677303392dc3e91/README.rst" style="float: right"&gt;view raw source&lt;/a&gt;
  &lt;a href="https://p.cweiske.de/181#README.rst"&gt;README.rst&lt;/a&gt;
 &lt;/div&gt;
&lt;/div&gt;
    &lt;div class="phork-file"&gt;
 &lt;div class="phork-content"&gt;
  &lt;div class="image"&gt;&lt;img src="181/rev-raw/34400f67f9bdc6f08b590819d677303392dc3e91/indieauth auth process.png" alt="indieauth auth process.png"/&gt;&lt;/div&gt;
 &lt;/div&gt;
 &lt;div class="phork-meta"&gt;
  &lt;a href="https://p.cweiske.de/181/rev-raw/34400f67f9bdc6f08b590819d677303392dc3e91/indieauth auth process.png" style="float: right"&gt;view raw source&lt;/a&gt;
  &lt;a href="https://p.cweiske.de/181#indieauth auth process.png"&gt;indieauth auth process.png&lt;/a&gt;
 &lt;/div&gt;
&lt;/div&gt;
    &lt;div class="phork-file"&gt;
 &lt;div class="phork-content"&gt;
  &lt;div class="code"&gt;&lt;pre class="txt"&gt;title Authorization process&#13;
&#13;
User browser-&amp;gt;+Web application: 1. Click &amp;quot;Login&amp;quot;&#13;
Web application-&amp;gt;+User Server: 2. Fetch homepage&#13;
User Server--&amp;gt;-Web application:&#13;
note over Web application&#13;
    Discover auth endpoint&#13;
end note&#13;
Web application--&amp;gt;-User browser: 3. Redirect to auth endpoint&#13;
User browser-&amp;gt;+Auth endpoint: 4. Verify user&#13;
Auth endpoint--&amp;gt;-User browser: 5. Redirect to web application (with token)&#13;
User browser-&amp;gt;+Web application: Load page&#13;
Web application-&amp;gt;+Auth endpoint: 6. Verify token&#13;
Auth endpoint--&amp;gt;-Web application:&#13;
note over Web application&#13;
    Log user in&#13;
end note&#13;
Web application--&amp;gt;-User browser: 7. Show page&lt;/pre&gt;&lt;/div&gt;

 &lt;/div&gt;
 &lt;div class="phork-meta"&gt;
  &lt;a href="https://p.cweiske.de/181/rev-raw/34400f67f9bdc6f08b590819d677303392dc3e91/sequence.txt" style="float: right"&gt;view raw source&lt;/a&gt;
  &lt;a href="https://p.cweiske.de/181#sequence.txt"&gt;sequence.txt&lt;/a&gt;
 &lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
</html></oembed>
