Methods and apparatus to authenticate computing devices
Systems, apparatus, articles of manufacture, and methods are disclosed to authenticate computing devices. An example apparatus includes interface circuitry, machine readable instructions, and programmable circuitry to at least one of instantiate or execute the machine readable instructions to access, via an application providing an online resource, a message requesting access to the online resource, the message including a device Internet Protocol (IP) address corresponding to a computing device transmitting the message, extract a log of IP addresses from a token generated by an authentication server, compare the device IP address to the log of IP addresses, and when the device IP address matches at least one of the IP addresses in the log, transmit the token to the application providing the online resource, the token authorizing the computing device to access the online resource.
1 . An apparatus comprising:
interface circuitry;
machine readable instructions; and
programmable circuitry to at least one of instantiate or execute the machine readable instructions to:
access, via an application providing an online resource, a message requesting access to the online resource, the message including a device Internet Protocol (IP) address corresponding to a computing device transmitting the message;
extract a log of IP addresses from a token generated by an authentication server, wherein the log of IP addresses extracted from the token includes a first reference IP address and a second reference IP address greater than the first IP address and is defined using a Classless Inter-Domain Routing (CIDR) notation;
compare the device IP address to the log of IP addresses; and
transmit the token to the application providing the online resource when the device IP address matches at least one of the IP addresses in the log and the device IP address is greater than the first reference IP address and less than the second reference IP address, the token authorizing the computing device to access the online resource.
2 . The apparatus of claim 1 , wherein the token is to expire after a first time, and wherein the programmable circuitry is to compare the device IP address to the log of IP addresses at a second time subsequent to the first time.
3 . The apparatus of claim 1 , wherein the programmable circuitry is to limit the computing device from accessing the online resource when the device IP address does not match at least one of the IP addresses in the log.
4 . The apparatus of claim 1 , wherein the message is a Hypertext Transfer Protocol (HTTP) request and the application is a web browser.
5 . The apparatus of claim 1 , wherein the token is an Open Authorization (OAuth) access token.
6 . The apparatus of claim 5 , wherein the OAuth access token is generated by the authentication server in response to receipt of at least one credential from a user of the computing device.
7 . The apparatus of claim 5 , wherein the OAuth access token includes claims, at least one of the claims including the log of IP addresses.
8 . A non-transitory machine readable storage medium comprising instructions to cause programmable circuitry to at least:
access, via an application providing an online resource, a message requesting access to the online resource, the message including a device Internet Protocol (IP) address corresponding to a computing device transmitting the message;
extract a log of IP addresses from a token generated by an authentication server, wherein the log of IP addresses extracted from the token includes a first reference IP address and a second reference IP address greater than the first IP address and is defined using a Classless Inter-Domain Routing (CIDR) notation;
compare the device IP address to the log of IP addresses; and
transmit the token to the application providing the online resource when the device IP address matches at least one of the IP addresses in the log and the device IP address is greater than the first reference IP address and less than the second reference IP address, the token authorizing the computing device to access the online resource.
9 . The non-transitory machine readable storage medium of claim 8 , wherein the token is to expire after a first time, and wherein the instructions are to cause the programmable circuitry to compare the device IP address to the log of IP addresses at a second time subsequent to the first time.
10 . The non-transitory machine readable storage medium of claim 8 , wherein the instructions are to cause the programmable circuitry to limit the computing device from accessing the online resource when the device IP address does not match at least one of the IP addresses in the log.
11 . The non-transitory machine readable storage medium of claim 8 , wherein the token is an Open Authorization (OAuth) access token.
12 . The non-transitory machine readable storage medium of claim 11 , wherein the OAuth access token includes claims, at least one of the claims including the log of IP addresses.
13 . A method comprising:
accessing, by executing an instruction with programmable circuitry, via an application providing an online resource, a message requesting access to the online resource, the message including a device Internet Protocol (IP) address corresponding to a computing device transmitting the message;
extracting, by executing an instruction with the programmable circuitry, a log of IP addresses from a token generated by an authentication server, wherein the log of IP addresses extracted from the token includes a first reference IP address and a second reference IP address greater than the first IP address and is defined using a Classless Inter-Domain Routing (CIDR) notation;
comparing, by executing an instruction with the programmable circuitry, the device IP address to the log of IP addresses; and
transmitting, by executing an instruction with the programmable circuitry, the token to the application providing the online resource when the device IP address matches at least one of the IP addresses in the log and the device IP address is greater than the first reference IP address and less than the second reference IP address, the token authorizing the computing device to access the online resource.
14 . The method of claim 13 , further including limiting, by executing an instruction with the programmable circuitry, the computing device from accessing the online resource when the device IP address does not match at least one of the IP addresses in the log.
15 . The method of claim 13 , wherein the token is an Open Authorization (OAuth) access token.