<svg xmlns="http://www.w3.org/2000/svg" width="1200" height="680" viewBox="0 0 1200 680">
  <rect width="1200" height="680" fill="#f8fafc"/>
  <text x="60" y="72" font-family="Arial, 'Microsoft YaHei', sans-serif" font-size="34" font-weight="700" fill="#0f172a">API鉴权处理路径</text>
  <text x="60" y="112" font-family="Arial, 'Microsoft YaHei', sans-serif" font-size="18" fill="#475569">客户端、身份令牌、网关校验与后端服务访问的典型流程</text>
  <defs><marker id="arrow" markerWidth="12" markerHeight="12" refX="10" refY="6" orient="auto"><path d="M2,2 L10,6 L2,10 Z" fill="#2563eb"/></marker></defs>
  <g font-family="Arial, 'Microsoft YaHei', sans-serif">
    <rect x="90" y="285" width="170" height="90" rx="18" fill="#fff7ed" stroke="#f97316" stroke-width="2"/>
    <text x="175" y="323" text-anchor="middle" font-size="22" font-weight="700" fill="#9a3412">客户端</text>
    <text x="175" y="353" text-anchor="middle" font-size="16" fill="#c2410c">携带Token请求</text>
    <line x1="270" y1="330" x2="395" y2="330" stroke="#2563eb" stroke-width="3" marker-end="url(#arrow)"/>
    <rect x="410" y="265" width="220" height="130" rx="22" fill="#dbeafe" stroke="#2563eb" stroke-width="2"/>
    <text x="520" y="308" text-anchor="middle" font-size="24" font-weight="700" fill="#1e3a8a">API 网关 / 鉴权层</text>
    <text x="520" y="340" text-anchor="middle" font-size="16" fill="#1d4ed8">校验 JWT / OAuth2</text>
    <text x="520" y="366" text-anchor="middle" font-size="16" fill="#1d4ed8">检查权限与路由</text>
    <line x1="640" y1="330" x2="765" y2="250" stroke="#2563eb" stroke-width="3" marker-end="url(#arrow)"/>
    <line x1="640" y1="330" x2="765" y2="330" stroke="#2563eb" stroke-width="3" marker-end="url(#arrow)"/>
    <line x1="640" y1="330" x2="765" y2="410" stroke="#2563eb" stroke-width="3" marker-end="url(#arrow)"/>
    <rect x="780" y="205" width="300" height="70" rx="16" fill="#eef2ff" stroke="#4f46e5" stroke-width="2"/>
    <text x="930" y="247" text-anchor="middle" font-size="20" font-weight="700" fill="#3730a3">身份服务 / 授权服务</text>
    <rect x="780" y="290" width="300" height="70" rx="16" fill="#f0fdf4" stroke="#16a34a" stroke-width="2"/>
    <text x="930" y="332" text-anchor="middle" font-size="20" font-weight="700" fill="#166534">业务服务</text>
    <rect x="780" y="375" width="300" height="70" rx="16" fill="#ecfeff" stroke="#0891b2" stroke-width="2"/>
    <text x="930" y="417" text-anchor="middle" font-size="20" font-weight="700" fill="#155e75">审计 / 日志 / 限流</text>
    <rect x="250" y="510" width="700" height="54" rx="27" fill="#eff6ff" stroke="#bfdbfe"/>
    <text x="600" y="545" text-anchor="middle" font-size="18" fill="#1e40af">统一鉴权的关键是身份校验、权限判断、路由控制和审计能力集中化</text>
  </g>
</svg>
