Network system and control method thereof

1 . A network system comprising a resource server that provides a resource, and a client server that accesses the resource server,

wherein the client server includes at least one memory storing at least one program, and at least one processor, the at least one program causing the at least one processor to:

manage user information of a user who can access a web application in which code for rendering a page with the resource provided by the resource server is implemented, wherein the user accesses the web application using a web browser executed on an information processing device;

issue, to the web application, verification data capable of verifying that the user has been authenticated;

perform transmitting, to an authorization server, an issuance request including tenant information corresponding to the verification data to obtain an access token, in response to receiving a token request, based on rendering of a page including a user interface (UI) component by the web application, including the verification data from the web application; and

transmit, to the web application, the access token obtained from the authorization server,

wherein the UI component incorporated in the page of the web application transmits a resource request for resources using the access token to the resource server, by the web application inputting the access token into the UI component, and

wherein the resource server includes at least one memory storing at least one program, and at least one processor, the at least one program causing the at least one processor to:

verify the access token when the resource request including the access token is received from the UI component; and

in a case where the verifying of the access token is successful, transmit, to the UI component, the resource managed by a tenant corresponding to the tenant information included in the access token,

wherein the UI component displays, in the page of the web application, a UI based on the resource received from the resource server.

2 . The network system according to claim 1 ,

wherein

the client server transmits, to the authorization server, an issuance request for a registration code of a communication terminal of the user for which the verification data is issued according to an operation of the user on the web application, the issuance request including tenant information;

wherein the web application displays the terminal registration code that is issued by the authorization server in response to the issuance request for the registration code and received from the client server; wherein the communication terminal transmits a terminal registration input by the user to the authorization server; and

wherein the authorization server registers the communication terminal in the network system and returns another access token for making a request to the resource server to store information of the communication terminal as the resource.

3 . The network system according to claim 2 ,

wherein the authorization server stores an identifier of the communication terminal registered through the registering in association with an identifier of the tenant information and the terminal registration code.

4 . The network system according to claim 2 ,

wherein the resource includes at least one of a communication record, an operation record, and terminal settings of the communication terminal.

5 . The network system according to claim 2 ,

wherein the resource server includes an application programming interface (API) that accepts information from the communication terminal and an API that accepts the request from the UI component.

6 . The network system according to claim 1 ,

wherein the authorization server generates the tenant information in response to a request from the user who uses the web application, and transmits the tenant information to the client server to be stored in the client server.

7 . The network system according to claim 1 ,

wherein the client server does not receive a token request from the web application and transmit, to the authorization server, an issuance request to obtain an access token when starting rendering of a page that does not include the UI component by the web application.

8 . The network system according to claim 1 ,

wherein the verification data is data in token format indicating that the user has been authenticated.

9 . A control method for controlling a network system including a resource server that provides a resource, and a client server that accesses the resource server, the control method comprising:

the client server:

managing user information of a user who can access a web application in which code for rendering a page with the resource provided by the resource server is implemented, wherein the user accesses the web application using a web browser executed on an information processing device;

issuing, to the web application, verification data capable of verifying that the user has been authenticated;

transmitting, to an authorization server, an issuance request including tenant information corresponding to the verification data to obtain an access token, in response to receiving a token request, based on rendering of a page including a user interface (UI) component by the web application, including the verification data from the web application; and

transmitting, to the web application, the access token obtained from the authorization server,

wherein the UI component incorporated in the page of the web applications transmits a resource a request for resources using the access token to the resource server, by the web application inputting the access token into the UI component, and

the resource server:

verifying the access token when the resource request including the access token is received from the UI component; and

in a case where the verifying of the access token is successful, transmitting, to the UI component, the resource managed by a tenant corresponding to the tenant information included in the access token,

wherein the UI component displays, in the page of the web application, a UI based on the resource received from the resource server.

10 . A non-transitory computer-readable medium having stored therein a program, the program causing a computer to:

in a case where a resource request including an access token is received from a user interface (UI) component, verify the access token; and

in a case where the verifying of the access token is successful, transmit, to the UI component, the resource managed by a tenant corresponding to tenant information included in the access token,

wherein the UI component displays, in a page of a web application, a UI based on the resource.

11 . A non-transitory computer-readable medium having stored therein a program, the program causing a computer to:

manage user information of a user who can access a web application in which code for rendering a page with the resource provided by a resource server is implemented, wherein the user accesses the web application using a web browser executed on the information processing device;

issue, to the web application, verification data capable of verifying that the user has been authenticated;

perform transmitting, to an authorization server, an issuance request including tenant information corresponding to the verification data to obtain an access token, in response to receiving a token request, based on rendering of a page including a user interface (UI) component by the web application, including the verification data from the web application; and

transmit, to the web application, the access token obtained from the authorization server,

wherein the UI component incorporated in a page of the web application transmits a resource request for resources using the access token to the resource server, by the web application inputting the access token into the UI component, and

the UI component displays, in the page of the web application, a UI based on the resource received from the resource server.