Computer network, computer system, computer-implemented method, and computer program product for managing session tokens

摘要

A computer network for managing session tokens may include a client operable to run a client application; a web server hosting at least one web service; and a session token manager. The session token manager may be operable to receive a check out message along with user credentials from the client application, wherein the user credentials identify a user operating the client application; process the check out message to determine a session token from a pool of session tokens managed for the user; and send a token identifier (token ID) to the client application pointing to the determined session token, wherein the session token can be used by the client application to point to and/or to re-use a previously established session with the web service without re-establishing a new session.

主权项

1. A computer network for managing session tokens, the network comprising:
a client operable to run a client application; a web server hosting at least one web service; and a session token manager to implement a user session pool component and another session pool component to manage a pool of session tokens associated with a plurality of users operating the client application, wherein the user session pool component implements a hash structure of unlocked session tokens from the pool of session tokens and a hash structure of locked session tokens from the pool of session tokens, and the unlocked session tokens are not currently used by the plurality of users and the locked session tokens are currently used by at least one of the plurality of users, wherein the other session pool component comprises another hash structure of the unlocked session tokens and the locked session tokens, and pairs in the form , wherein the key represents a string of a session token and the value is for an associated session token, and wherein the session manager manages session tokens from the pool according to an identity of a user of the plurality of users, and the session manager is to: receive a check out message including user credentials from the client application, wherein the user credentials identify the user of the plurality of users operating the client application; in response to the received check out message, determine a session token from the hash structure of unlocked session tokens to assign to a session for the user; remove the determined session token from the hash structure of unlocked session tokens and move the determined session token into the hash structure of locked session tokens; and send a token identifier (token ID) to the client application pointing to the determined session token, wherein the session token is operable to be used by the client application to point to a previously established session with the web service without re-establishing a new session.