graph TB
    Client["🎮 Game Client"]
    Lares["🔐 Lares<br/>(Authentication Service)"]
    Janus["🔰 Janus<br/>(Gateway Service)"]
    Senate["📊 Senate<br/>(Management Service)"]

    subgraph Roma["⚙️ Roma Game Service Cluster"]
        direction LR
        Player["👤 Player Service"]
        Room["🏠 Room Service"]
        Team["🤝 Team Service"]
        Other["... Other Services"]
    end

    subgraph ThirdParty["🌐 Third-party Platforms"]
        direction LR
        Apple["Apple"]
        Google["Google"]
        Facebook["Facebook"]
    end

    subgraph OwnAccount["🔐 Native Account System"]
        direction LR
        Register["📝 Register/Login"]
        Session["🎫 Session Management"]
        Renewal["🔄 Session Renewal"]
    end

    Client -->|"1.Authentication Request"| Lares
    ThirdParty -->|"Token Verification"| Lares
    OwnAccount -->|"Username/Password & Session Verification"| Lares
    Lares -->|"Return Account Token + Session"| Client
    Client -->|"2.Game Connection + Token"| Janus
    Janus -->|"3.gRPC Call"| Player
    Janus -->|"gRPC Call"| Room
    Janus -->|"gRPC Call"| Team
    Player -->|"Business Response"| Janus
    Room -->|"Business Response"| Janus
    Team -->|"Business Response"| Janus
    Janus -->|"4.Game Data"| Client
    Lares -.->|"User Data"| Senate

    classDef clientStyle fill:#e1f5fe,stroke:#01579b,stroke-width:2px
    classDef laresStyle fill:#fff3e0,stroke:#f57c00,stroke-width:3px
    classDef serviceStyle fill:#f3e5f5,stroke:#4a148c,stroke-width:2px
    classDef gatewayStyle fill:#e8f5e8,stroke:#1b5e20,stroke-width:2px
    classDef thirdPartyStyle fill:#fce4ec,stroke:#c2185b,stroke-width:2px
    classDef ownAccountStyle fill:#e8f5e8,stroke:#2e7d32,stroke-width:2px

    class Client clientStyle
    class Lares laresStyle
    class Janus gatewayStyle
    class Senate serviceStyle
    class Player,Room,Team,Other serviceStyle
    class Apple,Google,Facebook thirdPartyStyle
    class Register,Session,Renewal ownAccountStyle

graph TB
    subgraph Lares["🔐 Lares Account Authentication Service"]
        direction TB

        subgraph Services["Microservice Modules"]
            direction LR

            subgraph Account["👤 Account Service"]
                AccountAPI["API Layer"]
                AccountBiz["Business Layer"]
                AccountData["Data Layer"]
            end

            subgraph Notice["📢 Notice Service"]
                NoticeAPI["API Layer"]
                NoticeBiz["Business Layer"]
                NoticeData["Data Layer"]
            end

            subgraph Future["🔮 Future Services"]
                ServerAPI["Server Management API"]
                ServerBiz["Server Management Business"]
                ServerData["Server Management Data"]
            end
        end

        subgraph Security["🛡️ Security Components"]
            direction LR
            JWT["JWT Validator"]
            AES["AES Encryptor"]
            Password["Password Hasher"]
            Session["Session Manager"]
        end

        subgraph Platform["🌐 Platform Integration"]
            direction LR
            AppleDomain["Apple Verification"]
            GoogleDomain["Google Verification"]
            FacebookDomain["Facebook Verification"]
        end
    end

    subgraph Infrastructure["Infrastructure"]
        direction LR
        PostgreSQL["PostgreSQL<br/>User Data Storage"]
        Etcd["etcd<br/>Service Discovery"]
    end

    subgraph External["External Services"]
        direction LR
        AppleAuth["Apple Authentication Service"]
        GoogleAuth["Google Authentication Service"]
        FacebookAuth["Facebook Authentication Service"]
    end

    AccountData -.->|"User Data"| PostgreSQL
    NoticeData -.->|"Notice Data"| PostgreSQL
    AccountAPI -.->|"Service Registration"| Etcd
    NoticeAPI -.->|"Service Registration"| Etcd

    AppleDomain -.->|"Token Verification"| AppleAuth
    GoogleDomain -.->|"Token Verification"| GoogleAuth
    FacebookDomain -.->|"Token Verification"| FacebookAuth

    AccountBiz -.->|"Use"| JWT
    AccountBiz -.->|"Use"| AES
    AccountBiz -.->|"Use"| Password
    AccountBiz -.->|"Use"| Session

    classDef serviceStyle fill:#fff3e0,stroke:#f57c00,stroke-width:2px
    classDef securityStyle fill:#e8f5e8,stroke:#388e3c,stroke-width:2px
    classDef infraStyle fill:#fce4ec,stroke:#c2185b,stroke-width:2px
    classDef externalStyle fill:#f3e5f5,stroke:#4a148c,stroke-width:2px

    class AccountAPI,AccountBiz,AccountData,NoticeAPI,NoticeBiz,NoticeData,ServerAPI,ServerBiz,ServerData serviceStyle
    class JWT,AES,Password,Session,AppleDomain,GoogleDomain,FacebookDomain securityStyle
    class PostgreSQL,Redis,Etcd infraStyle
    class AppleAuth,GoogleAuth,FacebookAuth externalStyle

sequenceDiagram
    participant C as 🎮 Game Client
    participant L as 🔐 Lares
    participant TP as 🌐 Third-party Platform
    participant OA as 🔐 Native Account System
    participant J as 🔰 Janus
    participant R as ⚙️ Roma Service

    Note over C,R: Method 1: Third-party Platform Login
    C->>L: 1.1 Send third-party login request
    L->>TP: 1.2 Verify third-party token
    TP-->>L: 1.3 Return user information
    L->>L: 1.4 Generate/update user account
    L->>L: 1.5 Generate Account Token + Session
    L-->>C: 1.6 Return Account Token + Session

    Note over C,R: Method 2: Native Account Registration/Login
    C->>L: 2.1 Send register/login request (username + password)
    L->>OA: 2.2 Verify account credentials
    OA-->>L: 2.3 Return verification result
    L->>L: 2.4 Generate/update user account
    L->>L: 2.5 Generate Account Token + Session
    L-->>C: 2.6 Return Account Token + Session

    Note over C,R: Method 3: Session Quick Login
    C->>L: 3.1 Send Session login request
    L->>OA: 3.2 Verify Session validity
    OA-->>L: 3.3 Session verification passed
    L->>L: 3.4 Generate new Account Token
    L-->>C: 3.5 Return Account Token

    Note over C,R: Method 4: Session Renewal (Independent Operation)
    C->>L: 4.1 Send Session renewal request
    L->>OA: 4.2 Verify Session validity
    OA-->>L: 4.3 Session verification passed
    L->>L: 4.4 Extend Session validity
    L-->>C: 4.5 Return new renewed Session

    Note over C,R: Game Connection Phase
    C->>J: 5.1 Establish TCP connection
    C->>J: 5.2 Send handshake request (with Token)
    J->>J: 5.3 Verify Account Token
    J-->>C: 5.4 Handshake success response

    Note over C,R: Game Interaction Phase
    C->>J: 6.1 Send game protocol
    J->>R: 6.2 Forward as gRPC call
    R->>R: 6.3 Process game logic
    R-->>J: 6.4 Return processing result
    J-->>C: 6.5 Forward game response