HANDLING OPEN AUTHENTICATION OF AN INVOKED WEB SERVICE IN A PROCESS

• US 20140096224A1
• Filed: 09/19/2013
• Published: 04/03/2014
• Est. Priority Date: 09/29/2012
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Liu, Ying, Wang, Xi Ning, Liu, Jian Min, Yu, Shao
• Granted Patent: US 9,614,824 B2
• Time in Patent Office: Days
• US Class Current: 726/9
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213

Abstract

Embodiments relate to methods, systems, and computer program products for handling open authentication (OAuth) of an invoked web service in a process. An aspect includes determining whether an OAuth access token has expired. Another aspect includes initiating an automatic update of the OAuth access token based on determining that the OAuth access token has expired.

Claims

1. A method for handling open authentication (OAuth) of an invoked web service in a process, comprising:

determining whether an OAuth access token has expired; and

initiating an automatic update of the OAuth access token based on determining that the OAuth access token has expired.

2. The method according to claim 1, wherein determining whether an OAuth access token has expired comprises:

sending a hypertext transfer protocol (HTTP) request to the invoked web service; and

deciding whether the OAuth access token has expired based on a returned result from the invoked web service.

3. The method according to claim 2, wherein sending a HTTP request to the invoked web service comprises:

acquiring an address of an endpoint corresponding to the invoked web service;

constructing an address of a description file of the invoked web service with the address of the endpoint; and

sending the HTTP request to the address of the description file of the invoked web service.

4. The method according to claim 3, wherein the address of the description file of the invoked web service is constructed by appending “

?wsdl”

to the address of the endpoint corresponding to the invoked web service.

5. The method according to claim 3, wherein deciding whether the OAuth access token has expired based on the returned result from the invoked web service comprises:

checking whether the returned result meets a web service definition language (WSDL) scheme;

determining that the OAuth access token has expired if the returned result does not meet the WSDL scheme.

6. The method according to claim 1, wherein the automatic update of the OAuth access token comprises:

sending a request for updating the OAuth access token to the invoked web service; and

receiving an updated OAuth access token.

7. The method according to claim 6, wherein sending the request for updating the OAuth access token to the invoked web service comprises:

sending a HTTP request to the invoked web service;

receiving a returned result; and

constructing the request for updating OAuth access token based on the returned result.

8. The method according to claim 7, wherein constructing the request for updating OAuth access token based on the returned result comprises:

extracting content from the returned result related to updating of the OAuth access token; and

constructing the request for updating OAuth access token based on the extracted content.

9. A system for handling OAuth of an invoked web service in a process, comprising:

a deciding module configured to determine whether an OAuth access token has expired; and

an initiation module configured to initiate an automatic update of the OAuth access token based on determining that the OAuth access token has expired.

10. The system according to claim 9, wherein the deciding module further comprises:

a requesting module configured to send a hypertext transfer protocol (HTTP) request to the invoked web service; and

wherein the deciding module is further configured to decide whether the OAuth access token has expired based on a returned result from the invoked web service.

11. The system according to claim 10, wherein the requesting module further comprises:

an acquiring module configured to acquire address of an endpoint corresponding to the invoked web service;

a description file address construction module configured to construct address of a description file of the invoked web service with the address of the endpoint; and

wherein the requesting module is further configured to send a HTTP request to the address of the description file of the invoked web service.

12. The system according to claim 11, wherein the description file address construction module constructs the address of the description file of the invoked web service by appending “

?wsdl”

to the address of the endpoint corresponding to the invoked web service.

13. The system according to claim 11, wherein the deciding module determines whether the OAuth access token has expired based on the returned result by:

checking whether the returned result meets a web service definition language (WSDL) scheme;

determining that the OAuth access token has expired if the returned result does not meet the WSDL scheme.

14. The system according to claim 9, wherein the automatic update of the OAuth access token comprises:

sending a request for updating OAuth access token to the invoked web service; and

receiving an updated OAuth access token from the invoked web service.

15. The system according to claim 14, wherein sending the request for updating the OAuth access token to the invoked web service comprises:

sending a HTTP request to the invoked web service;

receiving a returned result; and

constructing the request for updating OAuth access token based on the returned result.

16. The system according to claim 15, wherein constructing the request for updating OAuth access token based on the returned result comprises:

extracting content from the returned result related to updating of the OAuth access token; and

constructing the request for updating OAuth access token based on the extracted content.

17. A computer program product for handling open authentication (OAuth) of an invoked web service in a process, the computer program product comprising:

a computer readable storage medium having program code embodied therewith, the program code executable by a processor for;

deciding whether an OAuth access token has expired; and

initiating an automatic update of the OAuth access token based on determining that the OAuth access token has expired.

18. The computer program product according to claim 17, wherein deciding whether an OAuth access token has expired comprises:

sending a hypertext transfer protocol (HTTP) request to the invoked web service; and

deciding whether the OAuth access token has expired based on a returned result from the invoked web service.

19. The computer program product according to claim 18, wherein sending a HTTP request to the invoked web service comprises:

acquiring an address of an endpoint corresponding to the invoked web service;

constructing an address of a description file of the invoked web service with the address of the endpoint; and

sending the HTTP request to the address of the description file of the invoked web service.

20. The computer program product according to claim 19, wherein the address of the description file of the invoked web service is constructed by appending “

?wsdl”

to the address of the endpoint corresponding to the invoked web service.