plain: { shape: page a: |`text TOKEN-1 TOKEN-2 TOKEN-3 `| } hashed: { shape: page a: |`text 36a9e7f... b82ffb9... 78a4403... `| } NGINX: { a: |`text /auth `| } akas: { load and check format: { a: |`text plain: prefix + length [optional] hashed: SHA-256 format `| } HashSet: {shape: cylinder} /auth: { unauthorized OK } Extract token from header: { a: |`text Authorization: Bearer `| } Check token format: { a: |`text prefix [optional] length [optional] `| } Verify if token exists: { a: |`text hashed: Hash token `| } } plain -> akas.load and check format hashed -> akas.load and check format akas.load and check format -> akas.HashSet NGINX.a <-> akas./auth akas./auth -> akas.Extract token from header akas.Extract token from header -> akas.Check token format akas.Check token format -> akas.Verify if token exists akas.Verify if token exists -> akas.HashSet