AUTHORIZATION MESSAGING WITH INTEGRAL DELEGATION DATA

摘要

A computer-implemented method for authorizing access by a client application to a resource of a user maintained on a first server computing system, the client application being implemented on a second server computing system, includes receiving a delegation message from the first server computer system to initiate authorization of the access by the client application, issuing an authorization message to the first server computer system, the authorization message comprising an authorization data package for redemption by the client application, the authorization data package comprising first through fourth integral delegation data indicative of the user, the client application, the resource, and a timestamp, respectively, receiving a redemption message from the second server computing system comprising the authorization data package, conducting an analysis of the authorization data package, and sending an access token to the second server computing system based on the analysis.

主权项

1. A computer-implemented method for authorizing access by a client application to a resource of a user maintained on a first server computing system, the client application being implemented on a second server computing system, the method comprising:
receiving a delegation message from the first server computer system to initiate authorization of the access by the client application; issuing, in response to the delegation message, an authorization message to the first server computer system, the authorization message comprising an authorization data package for redemption by the client application, the authorization data package comprising first through fourth integral delegation data indicative of the user, the client application, the resource, and a timestamp, respectively; receiving a redemption message from the second server computing system comprising the authorization data package; conducting, with a processor, an analysis of the authorization data package; and sending an access token to the second server computing system based on the analysis.