Secure transfer of web application client persistent state information into a new domain

摘要

A technique to reassign one or more stored elements of web application client state information is provided in an HTTP-based client upon receipt of an HTTP redirect in response to a request-URI. One or more stored elements associated to the request-URI are saved in or in association with the client. Upon receipt of an HTTP 301 (permanent) redirect, the client automatically reassigns (re-associates) the one or more stored elements to the redirect domain when the redirect can be verified as authentic (e.g., to originate from the application to which the client is attempting to connect).

主权项

1. An apparatus, comprising:
a processor; computer memory holding computer program instructions that when executed by the processor securely reassign web application client state information associated with an application server domain, the computer program instructions comprising:
program code to connect to an application server domain associated with a request-URI;program code responsive to receipt of a protocol-compliant redirect associated with the application server domain, the protocol-compliant redirect pointing to a new application server domain, to determine whether the protocol-compliant redirect is authentic; andprogram code responsive to a determination that the protocol-compliant redirect is authentic to reassign the web application client state information to the new application server domain.