Forcing re-authentication of users for accessing online services

A computing device, comprising:

• a processor;
• and
• a memory including instructions that, when executed with the processor, cause the computing device to perform the acts comprising:
• receiving, at a communication service provider, a request to determine a current status of access rights of a user to access an online service provided by a third-party online service provider based on one or more conditions associated with an account of the user at the communication service provider, wherein the request is received from the third-party online service provider of the online service upon a determination that some predetermined amount of time has passed since a latest request to determine access rights was submitted, and wherein a user device of the user is granted access to the online service of the third-party online service provider via a session token that is generated by the third-party online service provider and stored by the communication service provider with the account of the user at the communication service provider, the session token comprising a string of random characters and being associated with a set of communications between the user device and the third-party online service provider of the online service;
• determining, at the communication service provider, based on the one or more conditions associated with the account of the user at the communication service provider, the current status of access rights of the user to access the online service provided by the third-party online service provider;
• and
• based on determining the current status of access rights of the user to access the online service provided by the third-party online service provider, determining whether to generate and output, to the user device, an instruction to modify the session token associated with the third-party online service provider.

A computer-implemented method comprising:

• receiving, at a communication service provider, a request to determine a current status of access rights of a user to access an online service provided by a third-party online service provider based on one or more conditions associated with an account of the user at the communication service provider, wherein the request is received from the third-party online service provider of the online service upon a determination that some predetermined amount of time has passed since a latest request to determine access rights was submitted, and wherein a user device of the user is granted access to the online service of the third-party online service provider via a session token that is generated by the third-party online service provider and stored by the communication service provider with the account of the user at the communication service provider, the session token comprising a string of random characters and being associated with a set of communications between the user device and the third-party online service provider of the online service;
• determining, at the communication service provider, based on the one or more conditions associated with the account of the user at the communication service provider, that the user is authorized to access the online service provided by the third-party online service provider;
• and
• based on determining that the user is authorized to access the online service provided by the third-party online service provider, determining, at a communication service provider, to bypass outputting, to the user device, an instruction to modify the session token associated with the third-party online service provider.