{
  "code": null,
  "collection": "architecture",
  "href": "https://banes-lab.com/ontology#architecture-centralized-authentication",
  "id": "centralized-authentication",
  "kind": "pattern",
  "layer": {
    "href": "https://banes-lab.com/ontology/schema#layer-execution-core",
    "json": "https://banes-lab.com/json/records/layer/execution-core",
    "label": "Execution Core",
    "markdown": "https://banes-lab.com/records/layer/execution-core.md",
    "ref": "layer:execution-core"
  },
  "name": "Centralized Authentication",
  "ref": "architecture:centralized-authentication",
  "relations": [
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-identity-provider",
          "json": "https://banes-lab.com/json/records/lexicon/identity-provider",
          "label": "Identity Provider",
          "markdown": "https://banes-lab.com/records/lexicon/identity-provider.md",
          "ref": "lexicon:identity-provider"
        }
      ],
      "relation": "requires"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-security",
          "json": "https://banes-lab.com/json/records/lexicon/security",
          "label": "Security",
          "markdown": "https://banes-lab.com/records/lexicon/security.md",
          "ref": "lexicon:security"
        },
        {
          "href": "https://banes-lab.com/ontology#architecture-governance",
          "json": "https://banes-lab.com/json/records/architecture/governance",
          "label": "Governance",
          "markdown": "https://banes-lab.com/records/architecture/governance.md",
          "ref": "architecture:governance"
        }
      ],
      "relation": "reinforces"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-unified-identity",
          "json": "https://banes-lab.com/json/records/lexicon/unified-identity",
          "label": "Unified Identity",
          "markdown": "https://banes-lab.com/records/lexicon/unified-identity.md",
          "ref": "lexicon:unified-identity"
        }
      ],
      "relation": "enables"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-scattered-auth-implementations",
          "json": "https://banes-lab.com/json/records/lexicon/scattered-auth-implementations",
          "label": "Scattered Auth Implementations",
          "markdown": "https://banes-lab.com/records/lexicon/scattered-auth-implementations.md",
          "ref": "lexicon:scattered-auth-implementations"
        }
      ],
      "relation": "conflicts-with"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-identity-provider-availability",
          "json": "https://banes-lab.com/json/records/lexicon/identity-provider-availability",
          "label": "Identity Provider Availability",
          "markdown": "https://banes-lab.com/records/lexicon/identity-provider-availability.md",
          "ref": "lexicon:identity-provider-availability"
        }
      ],
      "relation": "tensions-with"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/schema#tension-centralized-authentication-identity-provider-availability",
          "json": "https://banes-lab.com/json/records/tension/centralized-authentication-identity-provider-availability",
          "label": "Centralized Authentication / Identity Provider Availability",
          "markdown": "https://banes-lab.com/records/tension/centralized-authentication-identity-provider-availability.md",
          "ref": "tension:centralized-authentication-identity-provider-availability"
        }
      ],
      "relation": "tensions"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-scattered-auth-implementations",
          "json": "https://banes-lab.com/json/records/lexicon/scattered-auth-implementations",
          "label": "Scattered Auth Implementations",
          "markdown": "https://banes-lab.com/records/lexicon/scattered-auth-implementations.md",
          "ref": "lexicon:scattered-auth-implementations"
        }
      ],
      "relation": "violated-by"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-identity-provider",
          "json": "https://banes-lab.com/json/records/lexicon/identity-provider",
          "label": "Identity Provider",
          "markdown": "https://banes-lab.com/records/lexicon/identity-provider.md",
          "ref": "lexicon:identity-provider"
        }
      ],
      "relation": "refactored-by"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/schema#vocabulary-severity-recommended",
          "json": "https://banes-lab.com/json/records/vocabulary/severity-recommended",
          "label": "recommended",
          "markdown": "https://banes-lab.com/records/vocabulary/severity-recommended.md",
          "ref": "vocabulary:severity-recommended"
        }
      ],
      "relation": "severity"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology#architecture-category-control-coordination-centralization",
          "json": "https://banes-lab.com/json/records/architecture-category/control-coordination-centralization",
          "label": "Control / Coordination / Centralization",
          "markdown": "https://banes-lab.com/records/architecture-category/control-coordination-centralization.md",
          "ref": "architecture-category:control-coordination-centralization"
        }
      ],
      "relation": "category"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology#architecture-category-security-privacy-compliance-governance",
          "json": "https://banes-lab.com/json/ontology/principles/architecture-category-security-privacy-compliance-governance",
          "label": "Security / Privacy / Compliance / Governance",
          "markdown": "https://banes-lab.com/ontology/principles/architecture-category-security-privacy-compliance-governance.md",
          "ref": "chapter:/ontology#architecture-category-security-privacy-compliance-governance"
        },
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-category-control-coordination-centralization",
          "json": "https://banes-lab.com/json/ontology/lexicon/lexicon-category-control-coordination-centralization",
          "label": "Control / Coordination / Centralization",
          "markdown": "https://banes-lab.com/ontology/lexicon/lexicon-category-control-coordination-centralization.md",
          "ref": "chapter:/ontology/lexicon#lexicon-category-control-coordination-centralization"
        },
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-category-quality-attributes",
          "json": "https://banes-lab.com/json/ontology/lexicon/lexicon-category-quality-attributes",
          "label": "Quality Attributes",
          "markdown": "https://banes-lab.com/ontology/lexicon/lexicon-category-quality-attributes.md",
          "ref": "chapter:/ontology/lexicon#lexicon-category-quality-attributes"
        },
        {
          "href": "https://banes-lab.com/ontology/schema#the-vocabulary-severity",
          "json": "https://banes-lab.com/json/ontology/schema/the-vocabulary-severity",
          "label": "Severity levels",
          "markdown": "https://banes-lab.com/ontology/schema/the-vocabulary-severity.md",
          "ref": "chapter:/ontology/schema#the-vocabulary-severity"
        },
        {
          "href": "https://banes-lab.com/ontology/schema#the-resolutions",
          "json": "https://banes-lab.com/json/ontology/schema/the-resolutions",
          "label": "The resolutions",
          "markdown": "https://banes-lab.com/ontology/schema/the-resolutions.md",
          "ref": "chapter:/ontology/schema#the-resolutions"
        }
      ],
      "relation": "linked-from"
    }
  ],
  "summary": "A design pattern that verifies identity once, at a shared identity provider, and passes the result to each service.",
  "siblings": {
    "next": {
      "href": "https://banes-lab.com/ontology#architecture-centralized-logging",
      "json": "https://banes-lab.com/json/records/architecture/centralized-logging",
      "label": "Centralized Logging",
      "markdown": "https://banes-lab.com/records/architecture/centralized-logging.md",
      "ref": "architecture:centralized-logging"
    },
    "previous": {
      "href": "https://banes-lab.com/ontology#architecture-centralized-configuration",
      "json": "https://banes-lab.com/json/records/architecture/centralized-configuration",
      "label": "Centralized Configuration",
      "markdown": "https://banes-lab.com/records/architecture/centralized-configuration.md",
      "ref": "architecture:centralized-configuration"
    }
  },
  "up": {
    "href": null,
    "json": "https://banes-lab.com/json/api/records/architecture",
    "label": "Architecture principles",
    "markdown": "https://banes-lab.com/api/records/architecture.md",
    "ref": "api:records/architecture"
  },
  "aliases": [],
  "exemplar": {
    "after": "const identity = await identityProvider.authenticate(token);\nawait fooService.handle({ identity });\nawait barService.handle({ identity });\nawait bazService.handle({ identity });",
    "before": "fooService.verifyToken(token);\nbarService.verifyToken(token);\nbazService.verifyToken(token);",
    "lang": "ts",
    "medium": "code"
  },
  "formedBy": null,
  "scope": [
    "identity",
    "system"
  ],
  "severity": "recommended"
}