Server device, service method, program, and non-transitory computer-readable information recording medium

A method of receiving access from multiple applications running on a terminal device, the method performed by a server device comprising,

• when a first access token that is an access token to one of the multiple applications is stored in a nonvolatile storage region of the terminal device receiving, from the one of the multiple applications, an access request specifying the first access token and when the first access token is not stored in the nonvolatile storage region, receiving, from the one of the multiple applications, a sign-in request specifying a user name a password;
• performing authentication with the user name and password specified in the sign-in request when the sign-in request transmitted by the one of the multiple applications running on the terminal device is received;
• based on determining that the authentication is successful, issuing the first access token to a transmission source application having transmitted the sign-in request, transmitting the issued first access token to the transmission source application, and approving access from the transmission source application;
• storing the issued first access token in association with a terminal identification code identifying the terminal device on which the transmission source application having transmitted the sign-in request runs with an addition of an expiration date, and postponing an expiration date to a second access token stored in association with the terminal identification code, the second access token being an access token different from the first access token;
• and
• approving access from a transmission source application having transmitted the access request and postponing the expiration dates to the first access token specified in the access request and the second access token stored in association with the terminal identification code of the terminal device on which the transmission source application runs when the access request transmitted by the one of the multiple applications running on the terminal device is received and the access token specified in the access request is stored in association with the terminal identification code and as being unexpired.

A non-transitory computer-readable information recording medium on which a program executed by a computer configured to receive access from multiple applications running on a terminal device is recorded, the program causing the computer to:

• when a first access token that is an access token to one of the multiple applications is stored in a nonvolatile storage region of the terminal device, receive, from the one of the multiple applications, an access request specifying the first access token and when the first access token is not stored in the nonvolatile storage region, receive, from the one of the multiple applications, a sign-in request specifying a user name and a password,
• perform authentication with the user name and password specified in the sign-in request when the sign-in request transmitted by the one of the multiple applications running on the terminal device is received;
• based on determining that the authentication is successful, issue the first access token to a transmission source application having transmitted the sign-in request, transmit the issued first access token to the transmission source application, and approve access from the transmission source application;
• store the issued first access token in association with a terminal identification code identifying the terminal device on which the transmission source application having transmitted the sign-in request runs, with an addition of an expiration date, and postpone an expiration date to a second access token stored in association with the terminal identification code, the second access token being an access token differrent from the first access token;
• and
• approve access from a transmission source application having transmitted the access request and postpone expiration dates to the first access token specified in the access request and the second access token stored in association with the terminal identification code of the terminal device on which the transmission source application runs when the access request transmitted by the one of the multiple applications running on the terminal device is received and the first access token specified in the access request is stored in association with the terminal identification code and as being unexpired.