Updated docs

docs/design-principles/0110-back-end-for-front-end.md

@@ -81,8 +81,6 @@ If the attempt to authenticate is successful, the authentication response from t
 
 These "auth tokens" are then added to [HTTPOnly, secure] cookies that are then returned to the browser to be used between the browser and BEFFE for subsequent requests/responses.
 
-![Authentication](../images/Authentication-Credentials.png)
-
 At some point in time, either of those auth tokens will expire, at which point either the `access_token` can be refreshed (using the `refresh_token`), or the `refresh_tokesn` expires, and the end user will need to re-authenticate again.
 
 #### Login
@@ -99,6 +97,8 @@ For example,
 }
 ```
 
+![Credentials Authentication](../images/Authentication-Credentials.png)
+
 or with a body containing an SSO authentication code,
 
 For example,
@@ -110,9 +110,11 @@ For example,
 }
 ```
 
+![SSO Authentication](../images/Authentication-SSO.png)
+
 > Note: you will also need to include CSRF protection in these requests, like all others coming from a JS app.
 
-A successful response from this request will yield the following body,
+A successful response from either of these requests will yield the following body,
 
 For example,
 
@@ -122,7 +124,7 @@ For example,
 }
 ```
 
-But it will also include these cookies (for the current domain):
+But the response will also include these cookies (for the current domain):
 
 `auth-tok=anaccesstoken`
 

src/IdentityApplication/ISingleSignOnApplication.cs

@@ -7,6 +7,5 @@ namespace IdentityApplication;
 public interface ISingleSignOnApplication
 {
     Task<Result<AuthenticateTokens, Error>> AuthenticateAsync(ICallerContext context, string providerName,
-        string authCode,
-        string? username, CancellationToken cancellationToken);
+        string authCode, string? username, CancellationToken cancellationToken);
 }

src/IdentityApplication/SingleSignOnApplication.cs

@@ -16,8 +16,7 @@ public class SingleSignOnApplication : ISingleSignOnApplication
     private readonly ISSOProvidersService _ssoProvidersService;
 
     public SingleSignOnApplication(IRecorder recorder, IEndUsersService endUsersService,
-        ISSOProvidersService ssoProvidersService,
-        IAuthTokensService authTokensService)
+        ISSOProvidersService ssoProvidersService, IAuthTokensService authTokensService)
     {
         _recorder = recorder;
         _endUsersService = endUsersService;