[taler-docs] branch master updated: document challenger architecture

[gnunet]

This is an automated email from the git hooks/post-receive script.

grothoff pushed a commit to branch master
in repository docs.

The following commit(s) were added to refs/heads/master by this push:
     new 07278834 document challenger architecture
07278834 is described below

commit 07278834c597f9122be600aae80fa5c738da54bd
Author: Christian Grothoff <grothoff@gnunet.org>
AuthorDate: Mon Dec 18 17:09:46 2023 +0800

    document challenger architecture
---
 taler-challenger-manual.rst | 30 ++++++++++++++++++++++++++++++
 1 file changed, 30 insertions(+)

diff --git a/taler-challenger-manual.rst b/taler-challenger-manual.rst
index 84b3b803..e4a59ee6 100644
--- a/taler-challenger-manual.rst
+++ b/taler-challenger-manual.rst
@@ -45,8 +45,38 @@ or learn about known limitations, please check our
 Architecture overview
 ---------------------
 
+The following picture gives an overview of the Challenger
+architecture and the main interactions:
+
 .. image:: images/challenger.png
 
+Here, the *resource owner* is a user that is in control
+of some *address* at a messaging service. This could be
+an e-mail account, a mobile phone number (for SMS), or
+a physical mail address (using the post office as the
+messaging service).
+
+The *resource owner* makes some request that requires
+some *client* to be in need of address validation. The
+*client* is registered with the Challenger OAuth 2.0
+service and first authorizes an address validation to
+be initiated. The client then redirects the resource
+owner to the Challenger service. In step (2), the resource
+owner submits the address that they claim to own.
+
+The Challenger service then creates a TAN code and
+submits it to the given address via a configurable
+*helper script* that is specific to the type of address
+being validated. When the resource owner submits the
+correct TAN code in step (6), they are given a token
+that they can provide to the client. Using this token
+the client can then finally obtain the now validated
+address in step (8).
+
+Address data, TAN codes and meta-data such as the number
+of failed attempts to submit a TAN code are recorded
+in a Postgres database by the Challenger service.
+
 .. _ChallengerInstallation:
 
 Installation

-- 
To stop receiving notification emails like this one, please contact
gnunet@gnunet.org.