CROSS DOMAIN IN-BROWSER PROXY

• US 20140082140A1
• Filed: 09/12/2013
• Published: 03/20/2014
• Est. Priority Date: 09/17/2012
• Status: Active Grant

• Current Assignee: Salesforce.com, Inc.
• Original Assignee: Alex Toussaint, Chris Jolley
• Inventors: TOUSSAINT, ALEX, JOLLEY, CHRIS, HURST, JAY
• Granted Patent: US 9,503,501 B2
• Time in Patent Office: Days
• US Class Current: 709/217
• CPC Class Codes: G06F 16/95 Retrieval from the web
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/563 Data redirection of data network streams

Abstract

An in-browser proxy enables an application in a frame to make a cross domain request. The proxy executes within the browser, which has a first domain. The browser provides a frame in which a client application executes, which has a second domain. The request from the client application is a request for data access to the external domain. The proxy identifies a registration of the client application, and forwards the request to the external domain. The proxy receives a response to the request and provides the response back to the client application within the frame.

Claims

1. A method comprising:

receiving, at a proxy executing with a browser, a request from an application executing in a frame within the browser, the request for data access to an external domain, outside a domain of the application;

identifying registration of the application with the proxy;

generating the request in the external domain in response to identifying registration of the application;

receiving a response to the request; and

providing the response to the application within the frame.

2. The method of claim 1, wherein the external domain is an on demand database system.

3. The method of claim 1, wherein the proxy comprises a JavaScript process, which receives a request from a JavaScript process in the application, wherein the JavaScript process in the application is configured to address the JavaScript process of the proxy.

4. The method of claim 1, wherein the frame comprises an inline frame (iFrame).

5. The method of claim 1, wherein the request comprises an XML HTTP request.

6. The method of claim 1, wherein identifying the registration of the application further comprises checking authentication information for the application, and authorizing the application in the external domain in accordance with the authentication of the application with the proxy.

7. The method of claim 1, further comprising the proxy holding a callback for the application, and wherein providing the response to the application comprises making a call on the callback of the application.

8. An article of manufacture comprising a computer readable storage medium having content stored thereon, which when executed, cause a machine to perform operations including:

receiving, at a proxy executing with a browser, a request from an application executing in a frame within the browser, the request for data access to an external domain, outside a domain of the application;

identifying registration of the application with the proxy;

generating the request in the external domain in response to identifying registration of the application;

receiving a response to the request; and

providing the response to the application within the frame.

9. The article of manufacture of claim 8, wherein the external domain is an on demand database system.

10. The article of manufacture of claim 8, wherein the proxy comprises a JavaScript process, which receives a request from a JavaScript process in the application, wherein the JavaScript process in the application is configured to address the JavaScript process of the proxy.

11. The article of manufacture of claim 8, wherein the frame comprises an inline frame (iFrame).

12. The article of manufacture of claim 8, wherein the request comprises an XML HTTP request.

13. The article of manufacture of claim 8, wherein the content for identifying the registration of the application further comprises content for checking authentication information for the application, and authorizing the application in the external domain in accordance with the authentication of the application with the proxy.

14. The article of manufacture of claim 8, further comprising content for the proxy holding a callback for the application, and wherein the content for providing the response to the application comprises content for making a call on the callback of the application.

15. A computer system comprising:

network interface hardware to connect to a multitenant database system (MTS), wherein the MTS stores data for multiple client organizations each identified by a tenant identifier (ID) and one or more users are associated with the tenant ID, wherein the one or more users of each client organization access data identified by the tenant ID associated with the respective client organization, and wherein the multitenant database is hosted by an entity separate from the client organization;

a processor device to execute a browser, wherein the browser includes an in-browser proxy executing within the browser, the proxy to

receive a request from an application executing in a frame within the browser, the request for data access to a domain of the MTS, outside a domain of the application;

identify registration of the application with the proxy;

generate the request in the browser domain in response to identifying registration of the application;

receive a response to the request; and

provide the response to the application within the frame.

16. The system of claim 15, wherein the proxy comprises a JavaScript process, which receives a request from a JavaScript process in the application, wherein the JavaScript process in the application is configured to address the JavaScript process of the proxy.

17. The system of claim 15, wherein the frame comprises an inline frame (iFrame).

18. The system of claim 15, wherein the request comprises an XML HTTP request.

19. The system of claim 15, wherein the proxy to identify the registration of the application further comprises the proxy to check authentication information for the application, and authorize the application in the external domain in accordance with the authentication of the application with the proxy.

20. The system of claim 15, further comprising the proxy to hold a callback for the application, wherein the proxy is to provide the response to the application by making a call on the callback of the application.