Proxy authorization of a network device
Some methods enable a first device to assist a second device in becoming authenticated with a content management system. The content management system can receive user credentials or an elevated access token from the first device. The content management system can respond to the first device with an access token for use by the second device. Alternatively, the content management system can send the access token directly to the second device. The second device can then use the access token for authenticated communications with the content management system.
1. A computer-implemented method comprising:
receiving, by a synchronized content management system, an elevated access token from a network device and a request for a child access token for an electronic device, wherein the elevated access token is associated with one or more access privileges associated with content of a user account of the synchronized content management system and enables the network device to independently authorize child access tokens for other electronic devices;
validating the elevated access token;
generating the child access token for the electronic device, wherein the child access token is associated with the elevated access token at the synchronized content management system; and
after generating the child access token, modifying, by the synchronized content management system, the one or more access privileges of the elevated access token, wherein modifying the one or more access privileges of the elevated access token simultaneously modifies access privileges granted to the child access token and changed by the modification to the one or more access privileges of the elevated access token.
2. The computer-implemented method of claim 1 , further comprising:
receiving, by the synchronized content management system, access credentials and a network device identifier to request the elevated access token;
generating the elevated access token; and
sending the elevated access token to the network device prior to receiving the request for the child access token from the network device.
3. The computer-implemented method of claim 1 , further comprising:
receiving a first electronic device identifier along with the request for the child access token for the electronic device from the network device;
receiving a second electronic device identifier from the electronic device; and
determining a match between the first and second electronic device identifiers before generating the child access token for the electronic device.
4. The computer-implemented method of claim 1 , wherein modifying the one or more access privileges includes revoking a privilege to upload content items to the synchronized content management system.
5. The computer-implemented method of claim 1 , wherein the elevated access token is used for authentication to validate an identity of a user for a third-party service.
6. The computer-implemented method of claim 1 , wherein the network device is a router.
7. The computer-implemented method of claim 1 , further comprising:
sending the child access token directly to the electronic device.
8. A system comprising:
one or more processors;
at least one computer readable medium; and
computer readable instructions, stored on the at least one computer readable medium, that when executed by the one or more processors cause the system to:
receive, by a synchronized content management system, an elevated access token from a network device and a request for a child access token for an electronic device, wherein the elevated access token is associated with one or more access privileges associated with to content of a user account of the synchronized content management system and enables the network device to independently authorize child access tokens for other electronic devices;
validate the elevated access token;
generate the child access token for the electronic device, wherein the child access token is associated with the elevated access token at the synchronized content management system; and
after generating the child access token, modifying, by the synchronized content management system, the one or more access privileges of the elevated access token, wherein modifying the one or more access privileges of the elevated access token simultaneously modifies access privileges granted to the child access token and changed by the modification to the one or more access privileges of the elevated access token.
9. The system of claim 8 , wherein the instructions are further executable to:
receive, by the synchronized content management system, access credentials and a network device identifier to request the elevated access token;
generate the elevated access token; and
send the elevated access token to the network device prior to receiving the request for the child access token from the network device.
10. The system of claim 8 , wherein the instructions are further executable to:
receive a first electronic device identifier along with the request for the child access token for the electronic device from the network device;
receive a second electronic device identifier from the electronic device; and
determine a match between the first and second electronic device identifiers before generating the child access token for the electronic device.
11. The system of claim 8 , wherein modifying the one or more access privileges includes revoking a privilege to upload content items to the synchronized content management system.
12. The system of claim 8 , wherein the elevated access token is used only for authentication to validate a user's identify for a third-party service.
13. A non-transitory computer-readable medium storing computer executable instructions that, when executed by one or more processors, cause a computing device to:
receive, by a synchronized content management system, an elevated access token from a network device and a request for a child access token for an electronic device, wherein the elevated access token is associated with one or more access privileges associated with to content of a user account of the synchronized content management system and enables the network device to independently authorize child access tokens for other electronic devices;
validate the elevated access token;
generate the child access token for the electronic device, wherein the child access token is associated with the elevated access token at the synchronized content management system; and
after generating the child access token, modifying, by the synchronized content management system, the one or more access privileges of the elevated access token, wherein modifying the one or more access privileges of the elevated access token simultaneously modifies access privileges granted to the child access token and changed by the modification to the one or more access privileges of the elevated access token.
14. The non-transitory computer-readable medium of claim 13 , storing computer executable instructions that, when executed by the one or more processors, cause the computing device to:
receive, by the synchronized content management system, access credentials and a network device identifier to request the elevated access token;
generate the elevated access token; and
send the elevated access token to the network device prior to receiving the request for the child access token from the network device.
15. The non-transitory computer-readable medium of claim 13 , storing computer executable instructions that, when executed by the one or more processors, cause the computing device to:
receive a first electronic device identifier along with the request for the child access token for the electronic device from the network device;
receive a second electronic device identifier from the electronic device; and
determine a match between the first and second electronic device identifiers before generating the child access token for the electronic device.
16. The non-transitory computer-readable medium of claim 13 , wherein modifying the one or more access privileges includes revoking a privilege to upload content items to the synchronized content management system.
17. The non-transitory computer-readable medium of claim 13 , wherein the elevated access token is used only for authentication to validate a user's identify for a third-party service.
18. The non-transitory computer-readable medium of claim 13 , wherein the network device is a router.
19. The non-transitory computer-readable medium of claim 13 , further comprising: sending the child access token directly to the electronic device.
20. The non-transitory computer-readable medium of claim 13 , wherein the one or more access privileges comprise a limited access duration associated with the child access token, the request for the child access token comprising an indication of the limited access duration for the child access token.