Systems and methods for push notification based application authentication and authorization

A method, comprising:

• registering an application running on a computing/mobile device with a third-party push notification service, which generates and provides a device token to the application;
• accepting the device token and generating a first verification token by a remote service upon receiving the device token;
• generating and providing a push notification to the application via the third-party push notification service, wherein the push notification includes the first verification token;
• receiving the first verification token from the push notification and constructing a second verification token from the first verification token;
• accepting and providing credentials to access the application to the remote service together with the second verification token;
• accepting and verifying the second verification token and the credentials by the remote service;
• providing an access token to the application for subsequent access to the remote service by the application if the second verification token and the credentials are verified to be valid.

A machine readable medium having software instructions stored thereon that when executed cause a system to:

• register an application running on a computing/mobile device with a third-party push notification service, which generates and provides a device token to the application;
• accept the device token and generate a first verification token by a remote service upon receiving the device token;
• generate and provide a push notification to the application via the third-party push notification service, wherein the push notification includes the first verification token;
• receive the first verification token from the push notification and construct a second verification token from the first verification token;
• accept and provide credentials to access the application to the remote service together with the second verification token;
• accept and second verify the verification token and the credentials by the remote service;
• provide an access token to the application for subsequent access to the remote service by the application if the second verification token and the credentials are verified to be valid.