Seamless authorization flow for SaaS applications

A computer system comprising:

• one or more processors;
• and
• one or more computer-readable media having stored thereon instructions that are executable by the one or more processors to configure the computer system to authorizing an entity to access data in a publication and subscription service, including instructions that are executable to configure the computer system to perform at least the following:
• at least one processor at the service, manage a subscription for receiving publishes notifications from the service, for a subscriber entity, the subscription being managed for the subscriber entity to receive published notifications of events for data from a sub-system by the service receiving events from the sub-system and publishing the events to the subscriber entity according to the subscription;
• at the service, determine that the subscriber entity is in an authorization state indicating that the subscriber entity is required to reauthorize to the service, to reauthorize the subscription, to continue receiving notifications of events for the data using the subscription, wherein the authorization state is an anticipatory reauthorization state indicating that an authorization for the subscriber entity will be invalid within some predetermined time;
• and
• as a result of determining that the subscriber entity is in an authorization state indicating that the subscriber entity is required to reauthorize to the service, to reauthorize the subscription, to continue receiving notifications of events for the data, publish a reauthorization notification, such that the reauthorization notification is published before the authorization of the subscriber entity becomes invalid, using the subscription, to the subscriber entity to reauthorize the subscription.

A method of authorizing an app to access data in a service, the method comprising:

• at an app, requesting a subscription to receive published notifications from a publication and subscription service, for the app, to notifications of events for data, the subscription being managed for a subscriber entity to receive published notifications of events for data from a sub-system by the service receiving events from the sub-system and publishing the events to the subscriber entity according to the subscription;
• as a result receiving one or more notifications of events for data;
• receiving from the service, a published subscription message including a reauthorization notification indicating that the app is in an authorization state indicating that the app is required to reauthorize to the service to continue receiving notifications of events for the data, wherein the authorization state is an anticipatory reauthorization state indicating that an authorization for the subscriber entity will be invalid within some predetermined time such that the reauthorization notification is received before the authorization of the subscriber entity becomes invalid;
• causing a refreshed token to be provided to the service to reauthorize the subscription;
• and
• as a result, receiving additional notifications of events for data for the subscription.