Systems and methods for application scripts for cross-domain applications
Embodiments described include systems and methods for executing in an embedded browser an application script for network applications of different origins. A client application can establish a first session with a first network application of a first entity at a first origin via an embedded browser within the client application and a second session with a second network application of a second entity at a second origin via the embedded browser within the client application. A scripting engine within the client application of a client device of a user at a third origin can identify an application script having instructions to interact with the first network application and the second network application, and can execute the instructions to perform a task across the first network application of the first entity at the first origin and the second network application of the second entity at the second origin.
1. A method for executing in an embedded browser an application script for network applications of different origins, the method comprising:
(a) establishing, by a client application, a first one or more sessions with a first one or more network applications of a first entity at a first origin via an embedded browser within the client application;
(b) establishing, by the client application, a second one or more sessions with a second one or more network applications of a second entity at a second origin via the embedded browser within the client application;
(c) identifying, by a scripting engine within the client application of a client device of a user at a third origin, an application script comprising instructions to interact with each the first one or more networks applications of the first entity at the first origin and the second one or more network applications of the second entity at the second origin; and
(d) executing, by the scripting engine, the instructions of the application script to perform a first portion of a task using a first network application of the first one or more networks applications of the first entity at the first origin and to perform a second portion of the task using a second network application of the second one or more network applications of the second entity at the second origin.
2. The method of claim 1 , wherein the first one or more network applications comprises a suite of applications originating from or hosted by a first one or more servers at the first origin.
3. The method of claim 1 , wherein the second one or more network applications comprises a suite of applications originating from or hosted by a second one or more servers at the second origin.
4. The method of claim 1 , wherein the first origin and the second origin are different origins that fail a same origin policy.
5. The method of claim 1 , further comprising establishing, by the client application, a domain of trust between the first one or more networks applications of the first entity at the first origin and the second one or more network applications of the second entity at the second origin.
6. The method of claim 5 , wherein the domain of trust is established responsive to authentication of the same user for the first one or more network applications and the second one or more network applications via the client application on the client device of a third entity of the user corresponding to the third origin.
7. The method of claim 1 , further comprising initiating execution of the application script by one of the first one or more network applications or the second one or more network applications.
8. The method of claim 1 , wherein (d) further comprising allowing, by the client application responsive to a policy, the application script to interact across the first origin and the second origin.
9. The method of claim 8 , wherein the policy specifies that the first origin and the second origin are trusted origins to interact across via the embedded browser of the client application.
10. A method for collaborating across network applications of different origins in an embedded browser, the method comprising:
(a) establishing, by a client application, a first one or more sessions with a first one or more network applications of first entity at a first origin via an embedded browser within the client application;
(b) establishing, by the client application, a second one or more sessions with a second one or more network applications of a second entity at a second origin via the embedded browser within the client application;
(c) determining, by the client application responsive to a policy, that the first origin and the second origin are origins to be trusted to interact across via the embedded browser; and
(d) allowing, by the client application responsive to the determination, a first network application of the first one or more networks applications of the first entity at the first origin to interact via the embedded browser with a second network application of the second one or more network applications of the second entity at the second origin for the first network application to perform a first portion of a task and the second network application to perform a second portion of the task.
11. The method of claim 10 , wherein the first origin and the second origin fail a same origin policy.
12. The method of claim 10 , wherein the policies specifies a plurality of different origins to trust, the plurality of different origins comprising the first origin and the second origin.
13. The method of claim 10 , further comprising executing, by a scripting engine of the client application, a script to interact via the embedded browser between the first one or more networks applications of the first entity at the first origin and the second one or more network applications of the second entity at the second origin.
14. The method of claim 10 , wherein (d) further comprises allowing interacting responsive to authentication of the same user to each of the first one or more networks applications and the second one or more network applications.
15. A system for collaborating across network applications of different origins in an embedded browser, the system comprising:
a client application executable on one or more processors of a client device and configured to:
establish a first one or more sessions with a first one or more network applications of first entity at a first origin via an embedded browser within the client application and a second one or more sessions with a second one or more network applications of a second entity at a second origin via the embedded browser within the client application;
determine, responsive to a policy, that the first origin and the second origin are origins to be trusted to interact across via the embedded browser; and
allow, responsive to the determination, a first network application of the first one or more networks applications of the first entity at the first origin to interact via the embedded browser with a second network application of the second one or more network applications of the second entity at the second origin for the first network application to perform a first portion of a task and the second network application to perform a second portion of the task.
16. The system of claim 15 , wherein the first origin and the second origin are different origins that fail a same origin policy.
17. The system of claim 15 , wherein the policy specifies a plurality of different origins to trust, the plurality of different origins comprising the first origin and the second origin.
18. The system of claim 15 , further comprising a scripting engine configured to execute instructions of a script to perform via the embedded browser a task across the first one or more networks applications of the first entity at the first origin and the second one or more network applications of the second entity at the second origin.
19. The system of claim 15 , wherein the first one or more network applications comprises a suite of applications originating from or hosted by a first one or more servers at the first origin.
20. The system of claim 15 , wherein the client application is configured to allow the interaction responsive to authentication of the same user to each of the first one or more networks applications and the second one or more network applications.