Page Comparison

...

The following diagram displays the main components and actors involved in the flow.Image Removed

Flow:

1. mod-scheduler prepares a request and puts impersonated token for the system user into x-okapi-token request header. Then the request goes from mod-scheduler to its sidecar.

2. Because Sidecar (mod-scheduler) has dynamic routing enabled and the requested route is not known, it calls the mgr-URLs to resolve the discovery information.

3. mgr-URLs calls mgr-Tenant-Entitlements to resolve the actual module's version.

4. mgr-URLs calls mgr-Applications to retrieve the actual discovery information that points to the Sidecar (Module A).

5. Sidecar (mod-scheduler) dynamically routes the request to the Sidecar (Module A).

6. Sidecar (Module A) authorizes the request to Module A.

   1. get token from request header

   2. parse token

   3. call Keycloak to evaluate permissions. Since the system user has access to all resources, authorization will be successful

7. Sidecar (Module A) forwards the request to Module A for processing.

...