Granting access to upgrade resource with existing authorization infrastructure
Described is a system for preventing unauthorized access to an upgrade implementation module while an authentication-authorization service is offline. Various embodiments of the upgrade implementation module record an upgrade token generated by a system manager. The upgrade implementation module sets an authentication-authorization service to an offline mode. The upgrade implementation module determines a match between a received upgrade token and the recorded upgrade token in order to prevent unauthorized access of the upgrade implementation module. In response to determining the match, the upgrade implementation module authorizes implementation of an upgrade package associated with the upgrade token while the authentication-authorization service is in the offline mode.
1. A system comprising:
one or more processors; and
a non-transitory computer readable medium storing a plurality of instructions, which when executed, cause the one or more processors to:
generate an upgrade token;
record the upgrade token;
set an authentication-authorization service to an offline mode, the authentication-authorization service being available to grant and validate access tokens when in an online mode and being unavailable to grant and validate the access tokens when in the offline mode;
determine a match between a received upgrade token and the recorded upgrade token in order to prevent unauthorized access of an upgrade implementation module while the authentication-authorization service is offline; and
authorize implementation of an upgrade package associated with the upgrade token by the upgrade implementation module while the authentication-authorization service is in the offline mode on a basis of the match.
2. The system of claim 1 , wherein the plurality of instructions, when executed, further cause the one or more processors to:
generate the upgrade token at a system manager;
grant the upgrade token to the client system by the system manager;
receive the upgrade token for recordation, wherein the system manager is associated with a plurality of services with protected access by the authentication-authorization service, the plurality of services comprising respective services in a cloud-based data protection and replication platform.
3. The system of claim 2 , wherein the authentication-authorization service is operative to grant respective access tokens for accessing any of the plurality of services and wherein the plurality of instructions, when executed, further cause the one or more processors to receive the upgrade token at the upgrade implementation module.
4. The system of claim 2 , wherein the plurality of instructions, when executed, further cause the one or more processors to:
receive, at the system manager, an upgrade package uploaded by the client system;
generate the upgrade token at the system manager in response to receiving the upgrade package; and
receive an upgrade request at the system manager.
5. The system of claim 4 , wherein set an authentication-authorization service to an offline mode comprises:
set the authentication-authorization service to the offline mode after the client system has sent the upgrade request.
6. The system of claim 2 , wherein the plurality of instructions, when executed, further cause the one or more processors to:
set the system manager to a system manager offline mode; and
set each service in the plurality of services to a respective service offline mode.
7. The system of claim 6 , wherein the plurality of instructions, when executed, further cause the one or more processors to:
determine the match to prevent unauthorized access of the upgrade implementation module while the authentication-authorization service, the system manager and the services are in the respective offline modes.
8. A computer-implemented method, comprising:
generating an upgrade token;
recording the upgrade token;
setting an authentication-authorization service to an offline mode, the authentication-authorization service being available to grant and validate access tokens when in an online mode and being unavailable to grant and validate the access tokens when in the offline mode;
determining a match between a received upgrade token and the recorded upgrade token in order to prevent unauthorized access of an upgrade implementation module while the authentication-authorization service is offline; and
authorizing implementation of an upgrade package associated with the upgrade token by the upgrade implementation module while the authentication-authorization service is in the offline mode on a basis of the match.
9. The computer-implemented method of claim 8 , further comprising:
generating the upgrade token at a system manager;
granting the upgrade token to the client system by the system manager;
receiving the upgrade token for recordation, wherein the system manager is associated with a plurality of services with protected access by the authentication-authorization service, the plurality of services comprising respective services in a cloud-based data protection and replication platform.
10. The computer-implemented method of claim 9 , wherein the authentication-authorization service is operative to grant respective access tokens for accessing any of the plurality of services and wherein receiving the upgrade token for recordation includes receiving the upgrade token at the upgrade implementation module.
11. The computer-implemented method of claim 10 , further comprising:
receiving, at the system manager, an upgrade package uploaded by the client system;
generating the upgrade token at the system manager in response to receiving the upgrade package; and
receiving an upgrade request at the system manager.
12. The computer-implemented method of claim 11 , further comprising:
setting the authentication-authorization service to the offline mode after the client system has sent the upgrade request.
13. The computer-implemented method of claim 9 , further comprising:
setting the system manager to a system manager offline mode; and
setting each service in the plurality of services to a respective service offline mode.
14. The computer-implemented method of claim 13 , further comprising:
determining the match to prevent unauthorized access of the upgrade implementation module while the authentication-authorization service, the system manager and the services are in the respective offline modes.
15. A computer program product comprising a non-transitory computer-readable medium having a computer-readable program code embodied therein to be executed by one or more processors, the program code including instructions to:
generate an upgrade token;
record the upgrade token;
set an authentication-authorization service to an offline mode, the authentication-authorization service being available to grant and validate access tokens when in an online mode and being unavailable to grant and validate the access tokens when in the offline mode;
determine a match between a received upgrade token and the recorded upgrade token in order to prevent unauthorized access of an upgrade implementation module while the authentication-authorization service is offline; and
authorize implementation of an upgrade package associated with the upgrade token by the upgrade implementation module while the authentication-authorization service is in the offline mode on a basis of the match.
16. The computer program product of claim 15 , wherein the program code includes further instructions to:
generate the upgrade token at a system manager;
grant the upgrade token to the client system by the system manager;
receive the upgrade token for recordation, wherein the system manager is associated with a plurality of services with protected access by the authentication-authorization service, the plurality of services comprising respective services in a cloud-based data protection and replication platform.
17. The computer program product of claim 16 , wherein the authentication-authorization service is operative to grant respective access tokens for accessing any of the plurality of services and wherein the program code includes further instructions to receive the upgrade token at the upgrade implementation module.
18. The computer program product of claim 16 , wherein the program code includes further instructions to:
receive, at the system manager, an upgrade package uploaded by the client system;
generate the upgrade token at the system manager in response to receiving the upgrade package; and
receive an upgrade request at the system manager.
19. The computer program product of claim 18 , wherein the program code includes further instructions to:
set the authentication-authorization service to the offline mode after the client system has sent the upgrade request.
20. The computer program product of claim 16 , wherein the program code includes further instructions to:
set the system manager to a system manager offline mode;
set each service in the plurality of services to a respective service offline mode; and
wherein determine a match between a received upgrade token and the recorded upgrade token comprises:
determine the match to prevent unauthorized access of the upgrade implementation module while the authentication-authorization service, the system manager and the services are in the respective offline modes.