Secure web application delivery platform
A network service, program product and method that manages secure web application delivery. A service is disclosed that includes an interface configured to receive a request for a secure web application from a plug-in integrated into a web browser on a client computing device, wherein the request further includes a user credential token. Also included is a token processor that evaluates the user credential token and determines an associated customer domain server provided by a back-end service and a transport service that establishes a secure channel with the customer domain server, and forwards the request to the associated customer domain server and receives back a text-based data package. Once generated, the text-based data package is forwarded to the plug-in in response to the request.
1. A network service, comprising:
an interface configured to receive a request for a secure web application from a plug-in integrated into a web browser on a client computing device, wherein the request further includes a user credential token;
a token processor that evaluates the user credential token and selects a customer domain server corresponding to the user credential token from a set of customer domain servers provided by a back-end service; and
a transport service that establishes a secure channel with the selected customer domain server, forwards the request to the selected customer domain server, and receives back a text-based data package from the selected customer domain service;
wherein the text-based data package is forwarded to the plug-in in response to the request.
2. The network service of claim 1 , wherein the text-based data package includes HTML (Hypertext markup language), a DOM (document object model) and JavaScript that can be utilized by the web browser to render the secure web application.
3. The network service of claim 1 , wherein the DOM includes styles associated with a DOM tree.
4. The network service of claim 1 , further comprising a list of secure web applications that cause the plug-in to redirect requests.
5. The network service of claim 1 , wherein the interface is further configured to receive an HTTP request from the plug-in for a subsequent interaction with the secure web application, wherein the HTTP request includes the user credential token.
6. The network service of claim 5 , wherein the transport service forwards the HTTP request to the selected customer domain server and receives back an updated text-based package from the selected customer domain server.
7. The network service of claim 6 , wherein the updated text-based package back is forwarded back to the plug-in.
8. A computer program product stored on a non-transitory computer readable medium, which when executed by a processor implements a network service, the program product comprising:
program code configured to receive a request for a secure web application from a plug-in integrated into a web browser on a client computing device, wherein the request further includes a user credential token;
program code that evaluates the user credential token and selects a customer domain server corresponding to the user credential token from a set of customer domain servers provided by a back-end service; and
program code that establishes a secure channel with the selected customer domain server, forwards the request to the selected customer domain server, and receives back a text-based data package from the selected customer domain server;
wherein the text-based data package is forwarded to the plug-in in response to the request.
9. The computer program product of claim 8 , further comprising a list of secure web applications that cause the plug-in to redirect requests.
10. The computer program product of claim 8 , wherein the text-based data package includes HTML (Hypertext markup language), a DOM ( document object model) and JavaScript that can be utilized by the web browser to render the secure web application.
11. The computer program product of claim 10 , wherein the DOM includes styles associated with a DOM tree.
12. The computer program product of claim 8 , further comprising program code configured to receive an HTTP request from the plug-in for a subsequent interaction with the secure web application, wherein the HTTP request includes the user credential token.
13. The computer program product of claim 12 , further comprising program code configured to forward the HTTP request to the selected customer domain server and receive back an updated text-based package from the selected customer domain server.
14. The computer program product of claim 13 , wherein the updated text- based package is forwarded back to the plug-in.
15. A computerized method of utilizing a network service, comprising:
receiving a request for a secure web application from a plug-in integrated into a web browser on a client computing device;
receiving a user credential token with the request;
evaluating the user credential token to select a customer domain server corresponding to the user credential token from a set of customer domain servers provided by a back-end service;
establishing a secure channel with the selected customer domain server and forwarding the request to the selected customer domain server;
receiving back a text-based data package from the selected customer domain server; and
forwarding the text-based data package to the plug-in in response to the request.
16. The computerized method of claim 15 , wherein the text-based data package includes HTML (Hypertext markup language), a DOM (document object model) and JavaScript that can be utilized by the web browser to render the secure web application.
17. The computerized method of claim 16 , wherein the DOM includes styles associated with a DOM tree.
18. The computerized method of claim 15 , further comprising receiving an HTTP request from the plug-in for a subsequent interaction with the secure web application, wherein the HTTP request includes the user credential token.
19. The computerized method of claim 18 , further comprising forwarding the HTTP request to the selected customer domain server and receiving back an updated text-based package from the selected customer domain server.
20. The computerized method of claim 19 , further comprising forwarding the updated text-based package back to the plug-in.