Internal authentication use-case

When one deployed component wants to call an API exposed by another component (internal system user), this use-case describes how they Authenticate and get a token*. The use case uses the following assumptions with component 1 as the caller and component 2 as the provider of the API.

  • The component 2 is deployed in the same canvas as component 1 (otherwise use the external authentication use-case).

  • The component 1 deployment bootstraps the system user that will be used to call the API (UC001).

  • The componnet 2 deployment bootstraps the roles relating to the APIs that it exposes (UC002).

  • The component 1 deployment declares its dependency for the API exposed by component 2, and the Operations team have configured access for this dependency (UC003).

*Refer to Which OAuth2 flow should I use

Authentication

authentication-internal-system plantUML code