Proxy for debugging transformed code

• US 10,565,090 B1
• Filed: 01/03/2018
• Issued: 02/18/2020
• Est. Priority Date: 01/03/2018
• Status: Active Grant

• Current Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Original Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Inventors: Bowerman, Michael, Asghari, Ali, Chopra, Vinay, Joseph, Alan, Zubkov, Andrey
• Primary Examiner(s): Dao, Thuy
• Application Number:
  US15/861,429
• Time in Patent Office: 776 Days
• CPC Class Codes: G06F 11/3624 by performing operations on the source code, e.g. via a compiler
• CPC Class Codes: G06F 11/3628 of optimised code optimisation G06F8/443
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 2221/033 Test or assess software
• CPC Class Codes: G06F 8/48 Incremental compilation software reuse G06F8/36
• CPC Class Codes: G06F 8/51 Source to source
• CPC Class Codes: G06F 8/71 Version control security arrangements therefor G06F21/57; Configuration management
• CPC Class Codes: H04L 2209/76 Proxy, i.e. using intermediary entity to perform cryptographic operations
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54
• CPC Class Codes: H04L 67/565 Conversion or adaptation of application format or content adding application control or application functional data H04L67/561
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

Disclosed are various embodiments for a proxy that enables debugging of transformed code. A proxy receives a request from a client application to obtain transformed code from a first server. The proxy obtains the transformed code from the first server, and the proxy obtains a source map corresponding to the transformed code from a second server. The proxy then returns the transformed code and the source map to the client application.

Claims

1. A non-transitory computer-readable medium embodying a proxy executable in at least one computing device, wherein when executed the proxy causes the at least one computing device to at least:

receive a request from a debugging application executed in a client device to obtain transformed code from a first server;

obtain the transformed code from the first server;

determine a version of the transformed code;

automatically obtain a source map corresponding to the version of the transformed code from a second server;

automatically modify the transformed code to include the source map or a reference to the source map;

sign the transformed code using a certificate trusted by the debugging application; and

return the transformed code and the source map to the debugging application.

2. The non-transitory computer-readable medium of claim 1, wherein the source map includes data that enables the debugging application to perform a reversal of a transformation of the transformed code, and the transformation comprises at least one of:

a minification, a transpilation, or an obfuscation.

3. The non-transitory computer-readable medium of claim 1, wherein determining a version of the transformed code further comprises determining a hash value of the transformed code.

4. A system, comprising:

at least one computing device; and

a proxy executable in a hardware processor of the at least one computing device, wherein when executed the proxy causes the at least one computing device to at least;

receive a request from a client application to obtain transformed code from a first server;

obtain the transformed code from the first server;

obtain a source map corresponding to the transformed code from a second server;

modify the transformed code to include a uniform resource locator (URL) of the source map;

sign the transformed code using a certificate trusted by the client application; and

return the transformed code and the source map to the client application.

5. The system of claim 4, wherein obtaining the source map further comprises automatically requesting the source map based at least in part on a unique identifier of the transformed code.

6. The system of claim 5, wherein when executed the proxy further causes the at least one computing device to at least determine the unique identifier by applying a hashing function to the transformed code.

7. The system of claim 4, wherein the source map enables a reversal of a transformation used to generate the transformed code.

8. The system of claim 7, wherein the transformation corresponds to a source code minification.

9. The system of claim 7, wherein the transformation corresponds to a source code obfuscation.

10. The system of claim 7, wherein the transformation corresponds to a transpilation of source code from a first programming language version to a second programming language version.

11. The system of claim 7, wherein the transformation corresponds to a removal of a symbol table.

12. The system of claim 4, wherein the proxy is implemented as a transparent proxy that transparently intercepts network traffic from the client application.

13. The system of claim 4, wherein the transformed code is executable by the client application.

14. The system of claim 4, wherein the client application is a debugging application configured to debug the transformed code.

15. The system of claim 4, wherein the proxy receives the request, obtains the transformed code and the source map, and returns the transformed code and the source map via hypertext transfer protocol (HTTP), HTTP secure (HTTPS), or WebSocket.

16. A method, comprising:

receiving, via at least one of one or more computing devices, a request from a client application to obtain transformed code from a first server;

obtaining, via at least one of the one or more computing devices, the transformed code from the first server;

determining, via at least one of the one or more computing devices, a unique identifier of a source map corresponding to the transformed code by applying a hashing function to the transformed code;

automatically requesting, via at least one of the one or more computing devices, the source map from a second server based at least in part on the unique identifier of the transformed code; and

returning, via at least one of the one or more computing devices, the transformed code and the source map to the client application.

17. The method of claim 16, further comprising modifying, via at least one of the one or more computing devices, the transformed code to include a reference to the source map.

18. The method of claim 17, wherein the reference comprises a uniform resource locator (URL) of the source map.

19. The method of claim 16, further comprising signing, via at least one of the one or more computing devices, the transformed code using a certificate trusted by the client application.

20. The method of claim 16, wherein the source map includes data that enables the client application to perform a reversal of a transformation of the transformed code, and the transformation comprises at least one of:

a minification, a transpilation, or an obfuscation.