Authentication security model for a content management system

A non-transitory computer readable medium comprising instructions, the instructions, when executed by a computing system, cause the computing system to:

• obtain, by a content management system, credentials for an external user account of a third-party source that is external to the content management system, wherein the credentials are required to display third-party content embedded into a content item stored on the content management system, the credentials stored in association with the content item;
• receive, from a client device, a request to receive the content item that is associated with a first domain of the content management system;
• receive, from the client device, a request for third-party code based on a portion of the content item, the third-party code associated with a second domain of the content management system;
• provide the client device with the third-party code associated with the second domain of the content management system, wherein the third-party code references data associated with the third-party content;
• receive, from the client device, a client request for the data associated with the third-party content embedded into the content item, the data stored at the third-party source;
• send, to the third-party source, a proxy-request for the data associated with the external user account, wherein the proxy-request comprises the credentials;
• receive, from the third-party source, the data associated with the third-party content embedded into the content item based on confirmation of the credentials of the external user account;
• and
• forward, to the client device, the data for the embedded content to be displayed with the content item.

A system comprising:

• one or more processors;
• and
• a non-transitory computer-readable medium storing instructions that, when executed by the one or more processors, cause the one or more processors to:
• obtain, by a content management system, credentials for an external user account of a third-party source that is external to the content management system, wherein the credentials are required to display third-party content embedded into a content item are stored on the content management system;
• receive, from a client device, a request to receive the content item that is associated with a first domain of the content management system;
• receive, from the client device, a request for third-party code based on a portion of the content item, the third-party code associated with a second domain of the content management system;
• provide the client device with the third-party code associated with the second domain of the content management system, wherein the third-party code references data associated with the third-party content;
• receive, from the client device, a client request for the data associated with the third-party content embedded into the content item, the data stored at the third-party source;
• send, to the third-party source, a proxy-request for the data associated with the external user account, wherein the proxy-request comprises the credentials;
• receive, from the third-party source, the data associated with the third-party content embedded into the content item based on confirmation of the credentials of the external user account;
• and
• send, to the client device, the data for the embedded content to be displayed with the content item.