Trusted login of user accounts
Technologies related to trusted user account login are disclosed. In one implementation, a temporary trusted login token request for accessing a service page from an originating application is received. A temporary trusted login token based on the temporary trusted login token request is generated. The temporary trusted login token is sent to the originating application. A service page access request is received for accessing the service page generated based on the temporary trusted login token. The temporary trusted login token including the service authorization from the service page access request is identified. Whether the service page is included in the one or more service pages that are identified by the service authorization is determined, and trusted login to the service page from the originating application is allowed if the service page is included in the one or more service pages.
1. A computer-implemented method, comprising:
receiving, by a first server that provides a service page within a target application and from a second server that serves an originating application, a temporary trusted login token request for accessing the service page;
generating, by the first server, a temporary trusted login token based on the temporary trusted login token request, wherein the temporary trusted login token includes a service authorization that identifies one or more service pages that can be accessed through temporary trusted login, the temporary trusted login token comprising a first mapping relationship between one or more service identifications corresponding to one or more allowed service pages and the temporary trusted login token, and further comprising a second mapping relationship between a current trusted login identification issued by the first server and the temporary trusted login token, wherein the first mapping relationship and the second mapping relationship are separate mapping relationships;
sending, by the first server, the temporary trusted login token to the originating application using the second server;
receiving, by the first server, a service page access request for accessing the service page generated based on the temporary trusted login token;
identifying, by the first server, the temporary trusted login token including the service authorization from the service page access request;
determining, by the first server, if the service page is included in the one or more service pages that are identified by the service authorization; and
allowing, by the first server, trusted login to the service page from the originating application if the service page is included in the one or more service pages, the allowing of the trusted login comprising displaying the service page in the originating application without redirecting to the target application for the display of the service page.
2. The computer-implemented method of claim 1 , wherein the service authorization identifies the service page when the temporary trusted login token satisfies the first mapping relationship and the second mapping relationship.
3. The computer-implemented method of claim 1 , further comprising:
sending, by the first server, the service page to the originating application after determining the service page is included in the one or more service pages that are identified by the service authorization.
4. The computer-implemented method of claim 1 , wherein the temporary trusted login token is valid within a predetermined time period after being generated and is updated periodically.
5. A non-transitory, computer-readable medium storing one or more instructions executable by a first server that provides a service page within a target application to perform operations comprising:
receiving, from a second server that serves an originating application; a temporary trusted login token request for accessing the service page;
generating a temporary trusted login token based on the temporary trusted login token request, wherein the temporary trusted login token includes a service authorization that identifies one or more service pages that can be accessed through temporary trusted login, the temporary trusted login token comprising a first mapping relationship between one or more service identifications corresponding to one or more allowed service pales and the temporary trusted login token, and further comprising a second mapping relationship between a current trusted login identification issued by the first server and the temporary trusted login token, wherein the first mapping relationship and the second mapping relationship are separate mapping relationships;
sending the temporary trusted login token to the originating application using the second server;
receiving a service page access request for accessing the service page generated based on the temporary trusted login token;
identifying the temporary trusted login token including the service authorization from the service page access request;
determining if the service page is included in the one or more service pages that are identified by the service authorization; and
allowing trusted login to the service page from the originating application if the service page is included in the one or more service pages, the allowing of the trusted login comprising displaying the service page in the originating application without redirecting to the target application for the display of the service page.
6. The non-transitory, computer-readable medium of claim 5 , wherein the service authorization identifies the service page when the temporary trusted login token satisfies the first mapping relationship and the second mapping relationship.
7. The non-transitory, computer-readable medium of claim 5 , further comprising sending the service page to the originating application after determining the service page is included in the one or more service pages that are identified by the service authorization.
8. The non-transitory, computer-readable medium of claim 5 , wherein the temporary trusted login token is valid within a predetermined time period after being generated and is updated periodically.
9. The non-transitory, computer-readable medium of claim 5 , further comprising: sending, by the first server, the service page to the originating application after determining the service page is included in the one or more service pages that are identified by the service authorization.
10. A computer-implemented system, comprising:
one or more computers comprising a first server that provides a service page within a target application; and
one or more computer memory devices interoperably coupled with the one or more computers and having tangible, non-transitory, machine-readable media storing one or more instructions that, when executed by the one or more computers, perform one or more operations comprising:
receiving, from a second server that serves an originating application, a temporary trusted login token request for accessing the service page;
generating a temporary trusted login token based on the temporary trusted login token request, wherein the temporary trusted login token includes a service authorization that identifies one or more service pages that can be accessed through temporary trusted login, the temporary trusted login token comprising a first mapping relationship between one or more service identifications corresponding to one or more allowed service pages and the temporary trusted login token, and further comprising a second mapping relationship between a current trusted login identification issued by the first server and the temporary trusted login token, wherein the first mapping relationship and the second mapping relationship are separate mapping relationships;
sending the temporary trusted login token to the originating application using the second server;
receiving a service page access request or accessing the service page generated based on the temporary trusted login token;
identifying the temporary trusted login token including the service authorization from the service page access request;
determining if the service page is included in the one or more service pages that are identified by the service authorization; and
allowing trusted login to the service page from the originating application if the service page is included in the one or more service pages, the allowing of the trusted login comprising displaying the service page in the originating application without redirecting to the target application for the display of the service page.
11. The computer-implemented system of claim 10 , wherein the service authorization identifies the service page when the temporary trusted login token satisfies the first mapping relationship and the second mapping relationship.
12. The computer-implemented system of claim 10 , further comprising sending the service page to the originating application after determining the service page is included in the one or more service pages that are identified by the service authorization.
13. The computer-implemented system of claim 10 , wherein the temporary trusted login token is valid within a predetermined time period after being generated and is updated periodically.
14. The computer-implemented system of claim 10 , further comprising:
sending, by the first server, the service page to the originating application after determining the service page is included in the one or more service pages that are identified by the service authorization.