Back to results
US 2010/0146291 A1Published application
Secure framework for invoking server-side apis using ajax
AssigneeOracle International Corporation
InventorAnanthalakshmi Anbuselvan
Life of this patent
Estimating the term…
Loading patent…
Loading patent…
AssigneeOracle International Corporation
InventorAnanthalakshmi Anbuselvan
Estimating the term…
Techniques for securely invoking a server-side API from client-side Web application code using AJAX. In one set of embodiments, a request to invoke a server-side API is received from a client-side component of a Web application, where the request is sent asynchronously using AJAX. One or more security handlers are then invoked to process the request in a manner that mitigates various security attacks. In one embodiment, a security handler is invoked to defend against a plurality of different types of Web application/AJAX security attacks. In another embodiment, authentication and authorization security handlers are invoked to authenticate a user of the Web application that originated the request and determine whether the user is authorized to call the server-side API. In yet another embodiment, configuration is implemented at the data storage tier to enforce user-access and data security on data that is retrieved/stored as a result of invoking the server-side API.
A method for securely invoking a server-side Application Programming Interface (API), the method comprising:
A server system comprising:
A machine-readable medium for a computer system, the machine-readable medium having stored thereon program code for securely invoking a server-side Application Programming Interface (API), the program code comprising:
Dependencies are inferred from the claim text.