Maximize
Component View: ORamaVR Cloud - Login API Internal Login API authentication components for interactive and external sign-in, OAuth and OIDC protocol handling, and role or tenant claim issuance. ORamaVR Cloud [Software System] Login API [Container: C# / ASP.NET Core] User Administration API [Component: C# — UsersController] Current-user, account, role, tenant, and user-management endpoints. OIDC & OAuth Authorization Server [Component: C# — IdentityServer4 + Startup/Config] Authorization-code with PKCE, refresh, client credentials, and external token-exchange flows for Portal and SDK clients. Interactive Account Sign-in [Component: C# — AccountController + ExternalController + ASP.NET Identity] Username/password and external-provider login, account confirmation, lockout, cookies, and authorization redirects. External Token Exchange [Component: C# — CustomGrantValidator] Validates an external identity token, resolves the local user, and requires acceptance of the license agreement. Token Claims & Profile [Component: C# — ProfileService] Loads the active user and emits identity, role, and tenant claims into ID and access tokens. User & Invitation Management [Component: C# — UserService + UserInvitationService] Manages users, roles, tenant membership, invitations, and accepted license agreements. Identity & License Persistence [Component: EF Core — ApplicationDbContext] Stores users, tenants, products, license grants, license assignments, feature grants, and invitations. UserAdministrationAPI → UserInvitationManagement — Manages users, roles, and membership Manages users, roles, and membership OIDCOAuthAuthorizationServer → InteractiveAccountSignin — Redirects browser authentication Redirects browser authentication OIDCOAuthAuthorizationServer → ExternalTokenExchange — Validates external token exchange grants Validates external token exchange grants OIDCOAuthAuthorizationServer → TokenClaimsProfile — Builds identity and access-token claims Builds identity and access-token claims InteractiveAccountSignin → IdentityLicensePersistence — Validates users and sign-in state Validates users and sign-in state ExternalTokenExchange → IdentityLicensePersistence — Resolves external identities and agreement acceptance Resolves external identities and agreement acceptance TokenClaimsProfile → IdentityLicensePersistence — Loads users, roles, and tenant context Loads users, roles, and tenant context UserInvitationManagement → IdentityLicensePersistence — Reads and writes users and invitations Reads and writes users and invitations Component View: ORamaVR Cloud - Login API Legend
Component View: ORamaVR Cloud - Login API Internal Login API authentication components for interactive and external sign-in, OAuth and OIDC protocol handling, and role or tenant claim issuance. ORamaVR Cloud [Software System] Login API [Container: C# / ASP.NET Core] User Administration API [Component: C# — UsersController] Current-user, account, role, tenant, and user-management endpoints. OIDC & OAuth Authorization Server [Component: C# — IdentityServer4 + Startup/Config] Authorization-code with PKCE, refresh, client credentials, and external token-exchange flows for Portal and SDK clients. Interactive Account Sign-in [Component: C# — AccountController + ExternalController + ASP.NET Identity] Username/password and external-provider login, account confirmation, lockout, cookies, and authorization redirects. External Token Exchange [Component: C# — CustomGrantValidator] Validates an external identity token, resolves the local user, and requires acceptance of the license agreement. Token Claims & Profile [Component: C# — ProfileService] Loads the active user and emits identity, role, and tenant claims into ID and access tokens. User & Invitation Management [Component: C# — UserService + UserInvitationService] Manages users, roles, tenant membership, invitations, and accepted license agreements. Identity & License Persistence [Component: EF Core — ApplicationDbContext] Stores users, tenants, products, license grants, license assignments, feature grants, and invitations. UserAdministrationAPI → UserInvitationManagement — Manages users, roles, and membership Manages users, roles, and membership OIDCOAuthAuthorizationServer → InteractiveAccountSignin — Redirects browser authentication Redirects browser authentication OIDCOAuthAuthorizationServer → ExternalTokenExchange — Validates external token exchange grants Validates external token exchange grants OIDCOAuthAuthorizationServer → TokenClaimsProfile — Builds identity and access-token claims Builds identity and access-token claims InteractiveAccountSignin → IdentityLicensePersistence — Validates users and sign-in state Validates users and sign-in state ExternalTokenExchange → IdentityLicensePersistence — Resolves external identities and agreement acceptance Resolves external identities and agreement acceptance TokenClaimsProfile → IdentityLicensePersistence — Loads users, roles, and tenant context Loads users, roles, and tenant context UserInvitationManagement → IdentityLicensePersistence — Reads and writes users and invitations Reads and writes users and invitations Component View: ORamaVR Cloud - Login API [
svg |
png |
puml ]