Invoking application programming interfaces across isolated parts of a web application
AssigneeMicrosoft Technology Licensing, LLC
InventorsJohn G. Nguyen, Srikanth Deshpande, Patrick C Miller
Life of this patent
Estimating the term…
Abstract
A secured method for isolated parts of a web application to invoke APIs across boundaries is described. A host web page receives a first object from a first inline frame of the host web page. The first object identifies a first Application Programming Interface (API). The host web page validates the first object against a predefined APIs for the host web page. Once the first object is validated, the host web page forwards the first object to a second inline frame of the host web page. The second inline frame parses the first object and translate the parsed first object to a second API corresponding to the second inline frame.
Claims18
A computer-implemented method, comprising:
- receiving, at a host web page, a first object from a first inline frame of the host web page, the first object identifying a first Application Programming Interface (API);
- validating, by the host web page, the first object against a predefined plurality of APIs for the host web page;
- and
- in response to validating the first object, forwarding the first object to a second inline frame of the host web page, the second inline frame configured to parse the first object and translate the parsed first object to a second API corresponding to the second inline frame,
- wherein the first inline frame comprises a web part item, the web part item comprising a server-side controlled application operating within the first inline frame, and
- wherein the second inline frame comprises a configuration pane of the host web page, the configuration pane configured to be rendered inside the second inline frame.
A computing apparatus, the computing apparatus comprising:
- a processor;
- and
- a memory storing instructions that, when executed by the processor, configure the apparatus to:
- receive, at a host web page, a first object from a first inline frame of the host web page, the first object identifying a first Application Programming Interface (API);
- validate, by the host web page, the first object against a predefined plurality of APIs for the host web page;
- and
- in response to validating the first object, forward the first object to a second inline frame of the host web page, the second inline frame configured to parse the first object and translate the parsed first object to a second API corresponding to the second inline frame,
- wherein the first inline frame comprises a web part item, the web part item comprising a server-side controlled application operate within the first inline frame, and
- wherein the second inline frame comprises a configuration pane of the host web page, the configuration pane configured to be rendered inside the second inline frame.
A non-transitory computer-readable storage medium, the computer-readable storage medium including instructions that when executed by a computer, cause the computer to:
- receive, at a host web page, a first object from a first inline frame of the host web page, the first object identifying a first Application Programming Interface (API);
- validate, by the host web page, the first object against a predefined plurality of APIs for the host web page;
- and
- in response to validating the first object, forward the first object to a second inline frame of the host web page, the second inline frame configured to parse the first object and translate the parsed first object to a second API corresponding to the second inline frame,
- wherein the first inline frame comprises a web part item, the web part item comprising a server-side controlled application operating within the first inline frame, and
- wherein the second inline frame comprises a configuration pane of the host web page, the configuration pane configured to be rendered inside the second inline frame.
Dependencies are inferred from the claim text.