Secret store for OAuth offline tokens

A method comprising:

• receiving, by a token store, an authentication request from a user, wherein the user is redirected from a first page on an application to a specific path on the token store by the application;
• authenticating, by the token store, the authentication request through a hardware authentication server, wherein the hardware authentication server receives the authentication request from the token store and authenticates the user based on the authentication request, and produces one of a positive authentication result and a negative authentication result upon receiving the authentication request;
• requesting, by the token store, an offline token from the hardware authentication server, wherein the authentication server sends the offline token to the token store upon receiving an offline token request;
• receiving, by the token store, the offline token from the hardware authentication server;
• generating, by the token store, a random key-secret pair, wherein the key-secret pair includes a key and a secret;
• storing, by the token store, the offline token and the key-secret pair in a database;
• and
• sending, by the token store, an authentication result of the user to the first page on the application, wherein the application receives the authentication result and requests the key-secret pair from the token store, and wherein an agent is configured using the received key-secret pair such that the agent is adapted to add the key-secret pair to a communication request and send the communication request to the application for processing.

A non-transitory machine readable medium storing code, which when executed by a processor causes a token store to:

• receive an authentication request from a user, wherein the user is redirected from a first page to a specific path on the token store by an application;
• authenticate the user's authentication request through a hardware authentication server, wherein the hardware authentication server receives the authentication request from the token store and authenticates the user based on the authentication request, and produces one of a positive authentication result and a negative authentication result;
• responsive to receiving a positive authentication result, request an offline token from the hardware authentication server, wherein the authentication server sends the offline token to the token store upon receiving an offline token request;
• responsive to receiving the offline token from the hardware authentication server, generate a random key-secret pair, wherein the key-secret pair includes a key and a secret;
• store the offline token and the key-secret pair in a database;
• and
• send an authentication result of the user to the first page on the application, wherein the application receives the authentication result and requests the key-secret pair from the token store, and wherein an agent is configured using the received key-secret pair such that the agent is adapted to add the key-secret pair to a communication request and send the communication request to the application for processing.