I'm looking for failures in this "token based login" design, besides the UML "syntax" errors. Theoretically speaking, it will do the trick when implemented on an small project.
If true, sorry about my english.
Thaks in advance.
EDIT: Is 1) this model something useful and clear? 2) Will it work when implemented? 3) Besides the implementation, is secure?