Seamless authentication for an application development platform
Various embodiments concern mechanisms for facilitating communication between network-accessible platforms for developing, hosting, or running hybrid applications that utilize resources hosted across multiple platforms. Hybrid applications cause messages or “calls” to be passed between the platforms that must be authenticated. For example, when a call is placed by a Heroku platform to a Force.com platform, the call must be authenticated for security purposes. If Heroku has not already been authenticated when the call is submitted, an authentication process is invoked. An event listener can be used to register details regarding the initial callout task, and then register or “fire” an event when the authentication process is successfully completed. Registration of the initial callout task completely separates the authentication process from the resource being invoked. Requests can be completed without requiring further user input using at least some of the details registered by the event listener.
1. A computer system comprising:
a memory including executable instructions; and
a processor, responsive to executing the instructions, configured to provide a development platform that is configured to:
receive a call from an application for a resource hosted by an external service accessible to the development platform across a network;
register information regarding the call using an event listener;
determine that the external service is not a registered client of the development platform;
pass at least some of the information regarding the call through an authentication process;
cause the event listener to register an event when the authentication process is successfully completed; and
complete the call for the resource using the information registered by the event listener.
2. The computer system of claim 1 , wherein the call is placed in accordance with Hypertext Transfer Protocol (HTTP).
3. The computer system of claim 1 , wherein the event listener is programmed in Java.
4. The computer system of claim 1 , wherein the resource is data hosted by the external service or a process to be executed by the external service.
5. The computer system of claim 1 , wherein the information includes a description of the resource, a username, an identifier that identifies the application responsible for placing the call, or any combination thereof.
6. The computer system of claim 1 , wherein the at least some information passed through the authentication process includes either a username or an identifier, or both.
7. The computer system of claim 1 , further comprising: receiving, by the development platform from the external service, an address of an application programming interface (“API”) to be used for making subsequent calls to the external service.
8. The computer system of claim 7 , wherein the API allows the development platform to gain programmatic access to resources of the external service without further authentication.
9. The computer system of claim 8 , wherein the subsequent calls are made directly by the development platform to the API.
10. A computer system comprising:
a memory including executable instructions; and
a processor, responsive to executing the instructions, configured to provide a development platform that is configured to:
receive a call from an application for a resource hosted by a service accessible to the development platform across a network;
determine that the service is not a registered client of the development platform;
pass information regarding the call through an authentication process;
cause an event listener to register an event when the authentication process is successfully completed; and
complete, in response to the event being registered, the call for the resource.
11. The computer system of claim 10 , the processor further configured to:
register at the development platform the information regarding the call using the event listener.
12. The computer system of claim 10 , the processor further configured to:
perform the call for the resource using the information registered by the event listener.
13. The computer system of claim 10 , wherein the call is completed responsive to the event being registered without requiring further input from the application.
14. The computer system of claim 10 , wherein the processor is further configured to: cause the authentication process independent of handling the call for the resource.
15. The computer system of claim 10 , wherein the processor is further configured to: receive a token from the service in response to completing the authentication process; and use the token to make a subsequent call to the service.
16. The computer system of claim 10 , wherein the processor is further configured to: receive an address of an application programming interface (“API”) to be used for making subsequent calls to the service.
17. The computer system of claim 16 , wherein the API is configured to gam programmatic access to resources of the service without further authentication.