Seamless authentication for an application development platform
Various embodiments concern mechanisms for facilitating communication between network-accessible platforms for developing, hosting, or running hybrid applications that utilize resources hosted across multiple platforms. Hybrid applications cause messages or “calls” to be passed between the platforms that must be authenticated. For example, when a call is placed by a Heroku platform to a Force.com platform, the call must be authenticated for security purposes. If Heroku has not already been authenticated when the call is submitted, an authentication process is invoked. An event listener can be used to register details regarding the initial callout task, and then register or “fire” an event when the authentication process is successfully completed. Registration of the initial callout task completely separates the authentication process from the resource being invoked. Requests can be completed without requiring further user input using at least some of the details registered by the event listener.
1. A computer-implemented method for facilitating communication between a Force.com application development platform and a Heroku application development platform, the method comprising:
receiving, at the Heroku application development platform, an initial call from an application for a process that requires the Force.com application development platform;
registering details regarding the initial call using an event listener;
determining whether the Force.com application development platform is a registered client of the Heroku application development platform;
responsive to determining the Force.com application development platform is not a registered client,
invoking an authentication process; and
passing at least some of the details regarding the initial call through the authentication process;
causing the event listener to register an event when the authentication process is successfully completed; and
responsive to the event listener registering the event,
completing the initial call for the process using the details registered by the event listener.
2. The computer-implemented method of claim 1 , wherein the initial call is completed upon the event listener registering the event without requiring further user input at the application.
3. The computer-implemented method of claim 1 , wherein registering the details regarding the initial call using the event listener causes the authentication process to be viewed as independent from the initial call for the process.
4. The computer-implemented method of claim 1 , further comprising:
receiving an authentication token from the Force.com application development platform upon successful completion of the authentication process; and
using the authentication token to make subsequent calls to the Force.com application development platform without requiring another authentication process to be invoked.
5. The computer-implemented method of claim 4 , wherein the subsequent calls are made by the Heroku application development platform to a specific application programming interface (API) of the Force.com application development platform.
6. The computer-implemented method of claim 1 , further comprising:
storing the details regarding the initial call in a database.
7. The computer-implemented method of claim 1 , wherein said completion of the initial call for the process using the details registered by the event listener is automatically performed by the Heroku application development platform without requiring resubmittal of the initial call.