Secure authorization via modal window
The disclosure relates to systems and methods for authorization of a user in a spatial 3D environment. The systems and methods can include receiving a request from an application executing on a mixed reality display system to authorize the user with a web service, displaying to the user an authorization window configured to accept user input associated with authorization by the web service and to prevent the application or other applications from receiving the user input, communicating the user input to the web service, receiving an access token from the web service, in which the access token is indicative of successful authorization by the web service, and communicating the access token to the application for authorization of the user. The authorization window can be a modal window displayed in an immersive mode by the mixed reality display system.
1. A display system for displaying virtual content in a three-dimensional (3D) spatial environment, the display system comprising:
a head-mounted display configured to present the virtual content to an eye of a user of the display system; and
circuitry in communication with the head-mounted display, the circuitry configured to:
execute an application configured to present application-specific virtual content to the user;
receive an authorization request from the application to authorize the user with a service;
execute, by the head-mounted display, an authorization service configured to:
determine a network address associated with the authorization service;
cause the head-mounted display to transition from presenting the application-specific virtual content to presenting a modal authorization window associated with the network address, wherein the modal authorization window is configured to accept user input including authentication credentials, and wherein the transitioning includes:
presenting the application-specific virtual content inside a shrinking circle, and
after the circle has shrunk to a predetermined size, expanding the circle to present the modal authorization window within the circle, wherein, while the modal authorization window is presented, the application and access to all other applications in the 3D spatial environment are disabled from receiving any user input;
responsive to a successful authorization of the user based at least partly on the authentication credentials, generate a response status code;
communicate the response status code to the service;
receive, from the service, an access token indicative of the successful authorization; and
communicate the access token to the application; and
terminate the authorization service.
2. The display system of claim 1 , wherein the application comprises at least one of an immersive application or a landscape application.
3. The display system of claim 1 , wherein the circuitry is further configured to: responsive to the successful authorization of the user, cause the head-mounted display to transition from presenting the modal authorization window to presenting the application-specific virtual content, and enable the application is to receive user input.
4. The display system of claim 3 , wherein transitioning from presenting the modal authorization window to presenting the application-specific virtual content includes expanding the circle to present the application-specific virtual content within the circle.
5. The display system of claim 1 , wherein the modal authorization window is executed in an immersive mode such that all the virtual content displayed to the user comes from the authorization service.
6. The display system of claim 1 , wherein the circuitry is further configured to: responsive to the successful authorization of the user, enable access to the at least one of the other applications.
7. The display system of claim 1 , wherein the authorization service is further configured to provide the response status code to the service in response to a second authorization request from a second application.
8. The display system of claim 1 , wherein the virtual content outside the circle is presented as a monochrome background during the transitioning.
9. The display system of claim 1 , wherein the service is a web service.
10. The display system of claim 9 , wherein the web service is a third-party web service accessed remotely from the display system.
11. The display system of claim 1 , wherein the head-mounted display is configured to display the modal authorization window in a lazy headlock setting.
12. The display system of claim 1 , wherein the head-mounted display is configured to display the modal authorization window at a position that moves in response to a head movement of the user.
13. The display system of claim 1 , wherein the authorization service is executed as a child of the application.
14. A method for authorizing a user of a head-mounted display configured to display virtual content in a three-dimensional (3D) spatial environment, the method comprising: executing an application configured to present application-specific virtual content to the user;
receiving an authorization request from the application to authorize the user with a service;
executing an authorization service configured to:
determine a network address associated with the authorization service;
cause the head-mounted display to transition from presenting the application-specific virtual content to presenting a modal authorization window associated with the network address, wherein the modal authorization window is configured to accept user input including authentication credentials, and wherein the transitioning includes:
presenting the application-specific virtual content inside a shrinking circle, and
after the circle has shrunk to a predetermined size, expanding the circle to present the modal authorization window within the circle, wherein, while the modal authorization window is presented, the application and access to all other applications in the 3D spatial environment are disabled from receiving any user input;
responsive to a successful authorization of the user based at least partly on the authentication credentials, generate a response status code;
communicate the response status code to the service;
receive, from the service, an access token indicative of the successful authorization; and
communicate the access token to the application; and terminating the authorization service.
15. The method of claim 14 , wherein the application comprises at least one of an immersive application or a landscape application.
16. The method of claim 14 , further comprising:
responsive to the successful authorization of the user, cause the head-mounted display to transition from presenting the modal authorization window to presenting the application-specific virtual content, and enable the application is to receive user input.
17. The method of claim 16 , wherein transitioning from presenting the modal authorization window to presenting the application-specific virtual content includes expanding the circle to present the application-specific virtual content within the circle.
18. The method of claim 14 , wherein the virtual content outside the circle is presented as a monochrome background during the transitioning.
19. The method of claim 14 , wherein the head-mounted display is configured to display the modal authorization window in a lazy headlock setting.
20. The method of claim 14 , wherein the head-mounted display is configured to display the modal authorization window at a position that moves in response to a head movement of the user.