System, method, and computer program for client authentication and authorization in oracle tuxedo using JSON web tokens
AssigneeAmdocs Development Limited
InventorViral Vashi
Life of this patent
Estimating the term…
Abstract
As described herein, a system, method, and computer program are provided for authenticating and authorizing Tuxedo clients using JSON web tokens. A Tuxedo server receives a service call that includes a plurality of JSON web tokens from a Tuxedo client. The Tuxedo server validates the plurality of JSON web tokens to authenticate and authorize the Tuxedo client. The Tuxedo server provides to the Tuxedo client a response to the service call based on a result of the validating.
Claims19
A non-transitory computer-readable media storing computer instructions which when executed by one or more processors of a device cause the device to:
- receive, by a server that operate as a middleware platform to manage distributed transaction processing in a distributed computing environment comprised of a plurality of client devices, a service call from one of the client devices, wherein the service call is comprised of a plurality of JavaScript Object Notation (JSON) web tokens that include:
- an identifier token held by the client device, and
- an access token that has been provided to the client device by an identity provider (IDP);
- validate the plurality of JSON web tokens, directly by the server, to authenticate and authorize the client device;
- and
- provide to the client device a response to the service call, by the server, based on a result of the validating.
A method, comprising:
- at a computer system:
- receiving, by a server that operate as a middleware platform to manage distributed transaction processing in a distributed computing environment comprised of a plurality of client devices, a service call from one of the client devices, wherein the service call is comprised of a plurality of JavaScript Object Notation (JSON) web tokens that include:
- an identifier token held by the client device, and
- an access token that has been provided to the client device by an identity provider (IDP);
- validating the plurality of JSON web tokens, directly by the server, to authenticate and authorize the client device;
- and
- providing to the client device a response to the service call, by the server, based on a result of the validating.
A system, comprising:
- a non-transitory memory storing instructions;
- and
- one or more processors in communication with the non-transitory memory that execute the instructions to:
- receive, by a server that operate as a middleware platform to manage distributed transaction processing in a distributed computing environment comprised of a plurality of client devices, a service call from one of the client devices, wherein the service call is comprised of a plurality of JavaScript Object Notation (JSON) web tokens that include:
- an identifier token held by the client device, and
- an access token that has been provided to the client device by an identity provider (IDP);
- validate the plurality of JSON web tokens, directly by the server, to authenticate and authorize the client device;
- and
- provide to the client device a response to the service call, by the server, based on a result of the validating.
Dependencies are inferred from the claim text.