explore Backend for Frontend (BFF) architecture pattern

[chr33s]

Token Handler Pattern -> OAuth Proxy !(Agent) as replacement for app-bridge

todo:

• Auth [session,access] tokens
• Direct api access / Fetch
• Remote DOM [Loading, Navigation/NavMenu, SaveBar, Scopes, WebVitals]

why: #6

see: https://github.com/cloudflare/workers-oauth-provider

refs:

• https://auth0.com/blog/the-backend-for-frontend-pattern-bff/

• https://datatracker.ietf.org/doc/html/draft-ietf-oauth-browser-based-apps-08

• https://github.com/RockSolidKnowledge/TokenExchange

• https://github.com/manfredsteyer/yarp-auth-proxy

• https://curity.io/blog/token-handler-the-single-page-applications-new-bff/ && https://curity.io/resources/documents/single-page-application-security-whitepaper

• https://github.com/curityio/spa-using-curitytokenhandler

• https://github.com/curityio/cloudflare-oauth-proxy-worker