Request authentication token

摘要

An authentication mechanism for use in network-based services generates an authentication token. The authentication token is provided to a client device as part of the code comprising a content page. The content page code is received and loaded by a browser application at the client device. When the content page code is received and loaded by the browser application, the authentication token is loaded by the browser as well. Upon receiving subsequent input, the browser application may send a content request to the server. The content request includes the authentication token maintained by the browser application in the content page. A server may validate the authentication token provided in the request using version information and one or more master authentication tokens.

主权项

1. An apparatus for processing data, comprising:
a communication interface; a storage device; and one or more processors in communication with said storage device and said communication interface, said one or more processors perform a method comprising:
sending a first authentication token to a client device, the authentication token provided in content page code, the content page code configured to store the authentication token in a content page provided by a browser application,receiving a request authentication token from the client device, wherein the request authentication token includes information that the request authentication token is not from a browser application that executes code; andcomparing the request authentication token to a master authentication token, the master authentication token matching the first authentication token.