Seamless authentication for an application development platform
Various embodiments concern mechanisms for facilitating communication between network-accessible platforms for developing, hosting, or running hybrid applications that utilize resources hosted across multiple platforms. Hybrid applications cause messages or “calls” to be passed between the platforms that must be authenticated. For example, when a call is placed by a Heroku platform to a Force.com platform, the call must be authenticated for security purposes. If Heroku has not already been authenticated when the call is submitted, an authentication process is invoked. An event listener can be used to register details regarding the initial callout task, and then register or “fire” an event when the authentication process is successfully completed. Registration of the initial callout task completely separates the authentication process from the resource being invoked. Requests can be completed without requiring further user input using at least some of the details registered by the event listener.
1. A computer-implemented method comprising:
receiving, by a development platform, a call from an application for a resource hosted by an external service accessible to the development platform across a network;
registering, by the development platform, information regarding the call using an event listener;
determining, by the development platform, that the external service is not a registered client of the development platform;
passing, by the development platform, at least some of the information regarding the call through an authentication process;
causing, by the development platform, the event listener to register an event when the authentication process is successfully completed; and
completing, by the development platform; the call for the resource using the information registered by the event listener.
2. The computer-implemented method of claim 1 , wherein the call is placed in accordance with the Hypertext Transfer Protocol (HTTP).
3. The computer-implemented method of claim 1 , wherein the event listener is programmed in Java.
4. The computer-implemented method of claim 1 , wherein the external service is a Force.com platform, and wherein the authentication process is an OAuth 2.0 web server authentication process facilitated by the Force.com platform.
5. The computer-implemented method of claim 1 , wherein the resource is data hosted by the external service or a process to be executed by the external service.
6. The computer-implemented method of claim 1 , wherein the information includes a description of the resource, a username, an identifier that identifies the application responsible for placing the call, or any combination thereof.
7. The computer-implemented method of claim 6 , wherein the at least some information passed through the authentication process includes the username, the identifier, or both.
8. The computer-implemented method of claim 1 , further comprising:
receiving, by the development platform from the external service, an address of an application programming interface (API) to be used for making subsequent calls to the external service.
9. The computer-implemented method of claim 8 , wherein the API allows the development platform to gain programmatic access to resources of the external service without further authentication.
10. The computer-implemented method of claim 8 , wherein the subsequent calls are made directly by the development platform to the API.
11. A computer-implemented method comprising:
receiving, by a development platform, a call from an application for a resource hosted by a service accessible to the development platform across a network;
determining, by the development platform, that the service is not a registered client of the development platform;
passing, by the development platform, information regarding the call through an authentication process;
causing, by the development platform, an event listener to register an event when the authentication process is successfully completed; and
completing, by the development platform in response to the event being registered, the call for the resource.
12. The computer-implemented method of claim 11 , further comprising: registering, by the development platform, the information regarding the call using the event listener.
13. The computer-implemented method of claim 12 , wherein said completing is performed using the information registered by the event listener.
14. The computer-implemented method of claim 11 , wherein the call is completed responsive to the event being registered without requiring further input from the application.
15. The computer-implemented method of claim 12 , wherein said registering causes the authentication process to be performed by the development platform independent of handling the call for the resource.
16. The computer-implemented method of claim 11 , further comprising:
receiving, by the development platform, a token from the service in response to successfully completing the authentication process; and
using, by the development platform, the token to make a subsequent call to the service without further authentication.
17. The computer-implemented method of claim 11 , further comprising:
receiving, by the development platform from the service, an address of an application programming interface (API) to be used for making subsequent calls to the external service.
18. The computer-implemented method of claim 17 , wherein the API allows the development platform to gain programmatic access to resources of the service without further authentication.
19. A non-transitory computer-readable medium with instructions stored thereon that, when executed, cause a development platform to perform operations comprising:
receiving a call from an application for a resource hosted by a service accessible to the development platform across a network;
determining that the service is not a registered client of the development platform;
passing information regarding the call through an authentication process;
receiving a token from the service in response to the authentication process being successfully completed; and
completing the call for the resource using the token provided by the service.
20. A non-transitory computer-readable medium with instructions stored thereon that, when executed, cause a development platform to perform operations comprising:
receiving a call from an application for a resource hosted by a service accessible to the development platform across a network;
determining that the service is not a registered client of the development platform;
passing information regarding the call through an authentication process;
receiving an address for an application programming interface (API) from the service in response to the authentication process being successfully completed; and
completing the call for the resource using the address for the API provided by the service.