Reauthentication to a web service without disruption

In a computing environment, a method authenticating and/or re-authenticating internet application sessions, the method comprising:

• download client side code that when executed by one or more processors implements one or more client side modules including at least one module with message interception functionality;
• execute the client side code to implement the one or more client side modules;
• send a request to a internet application server;
• in response to the request, receive a message from the internet application server indicating that the request is not authorized;
• intercepting the message from the internet application server indicating that the request is not authorized at the one or more client side modules;
• the one or more client side modules, as a result of the message indicating that the request is not authorized, sending a request for authentication in a required format for authentication;
• and
• the one or more client side modules automatically authenticating the user without losing user state associated the request to the internet application server by using one or more locally available authentication artifacts.

In a computing environment, one or more computer readable media comprising computer executable instructions that when executed by one or more processors cause the following to be performed:

• downloading client side code that when executed by one or more processors implements one or more client side modules including at least one module with message interception functionality;
• executing the client side code to implement the one or more client side modules;
• sending a request to a internet application server;
• in response to the request, receive a message from the internet application server indicating that the request is not authorized as a result of an authentication artifact expiring;
• intercepting the message from the internet application server indicating that the request is not authorized at the one or more client side modules;
• the one or more client side modules, as a result of the message indicating that the request is not authorized, sending a request to and identity provider for authentication in a required format for authentication using an authentication protocol used by the identity provider;
• opening a new window for receiving user input to authenticate the user without losing user state associated with the request to the internet application server by preserving a window storing user entered user state and not redirecting from the window storing user entered user state when the new window is opened;
• authenticating the user using the new window;
• and
• after authenticating the user using the new window, sending the user state from the window storing user entered user state.