Service identity propagation between applications and reusable services
A request from a User for a Service is received by an Application. An Open Authorization (OAUTH) Client of the Service is requested from a Service Instance of the Service. A copy OAUTH Client of the Service specific to the User is provided based on a clone OAUTH Client associated with the Service Instance. A Token is obtained to access the Service by providing the copy OAUTH Client to a User Account and Authorization (UAA) entity. Access to the Service is obtained by providing the Token.
1. A computer-implemented method, comprising:
receiving, by one or more processors, at a computer Application, a request for a Service from a User;
requesting, by the one or more processors and from a Service Instance created by a first Service Broker of the Service, a Master Open Authorization (OAUTH) Client of the Service;
receiving, by the one or more processors and from the Service Instance, a copy OAUTH Client based on a clone of the Master OAUTH Client, the clone being associated with the Service Instance, the copy OAUTH Client being specific to the User;
providing the copy OAUTH Client to a User Account and Authorization (UAA) entity to obtain a service-specific Token, wherein the UAA entity generates the Token in response to authenticating the User based on the copy OAUTH Client; and
obtaining, by the one or more processors, access to the Service by providing the service-specific Token.
2. The computer-implemented method of claim 1 , wherein the clone is specific to the Service Instance.
3. The computer-implemented method of claim 1 , wherein the clone is provided according to a UAA Service Instance created by a UAA service broker.
4. The computer-implemented method of claim 3 , wherein the UAA Service Instance is used by the first Service Broker specifically to create the clone for the Service Instance of the Service.
5. The computer-implemented method of claim 1 , wherein the clone is specific to the Application.
6. The computer-implemented method of claim 1 , wherein the Service Instance is created specifically for the Application.
7. A non-transitory, computer-readable medium storing one or more instructions executable by a computer system to perform operations comprising:
receiving, at a computer Application, a request for a Service from a User;
requesting from a Service Instance created by a first Service Broker of the Service, a Master Open Authorization (OAUTH) Client of the Service;
receiving from the Service Instance, a copy OAUTH Client based on a clone of the Master OAUTH Client, the clone being associated with the Service Instance, the copy OAUTH Client being specific to the User;
providing the copy OAUTH Client to a User Account and Authorization (UAA) entity to obtain a service-specific Token, wherein the UAA entity generates the Token in response to authenticating the User based on the copy OAUTH Client; and
obtaining, access to the Service by providing the service-specific Token.
8. The non-transitory, computer readable medium of claim 7 , wherein the clone is specific to the Service Instance.
9. The non-transitory, computer readable medium of claim 7 , wherein the clone is provided according to a UAA Service Instance created by a UAA service broker.
10. The non-transitory, computer readable medium of claim 9 , wherein the UAA Service Instance is used by the first Service Broker specifically to create the clone for the Service Instance of the Service.
11. The non-transitory, computer readable medium of claim 7 , wherein the clone is specific to the Application.
12. The non-transitory, computer readable medium of claim 7 , wherein the Service Instance is created specifically for the Application.
13. A computer-implemented system, comprising:
one or more computers; and
one or more computer memory devices interoperably coupled with the one or more computers and having tangible, non-transitory, machine-readable media storing one or more instructions that, when executed by the one or more computers, perform one or more operations comprising:
receiving, at a computer Application, a request for a Service from a User;
requesting from a Service Instance created by a first Service Broker of the Service, a Master Open Authorization (OAUTH) Client of the Service;
receiving from the Service Instance, a copy OAUTH Client based on a clone of the Master OAUTH Client, the clone being associated with the Service Instance, the copy OAUTH Client being specific to the User;
providing the copy OAUTH Client to a User Account and Authorization (UAA) entity to obtain a service-specific Token, wherein the UAA entity generates the Token in response to authenticating the User based on the copy OAUTH Client; and
obtaining, access to the Service by providing the service-specific Token.
14. The computer-implemented system of claim 13 , wherein the clone is specific to the Service Instance.
15. The computer-implemented system of claim 13 , wherein the clone is provided according to a UAA Service Instance created by a UAA service broker.
16. The computer-implemented system of claim 15 , wherein the UAA Service Instance is used by the first Service Broker specifically to create the clone for the Service Instance of the Service.
17. The computer-implemented system of claim 13 , wherein:
the clone is specific to the Application; and
the Service Instance is created specifically for the Application.