Validating a user session

A system comprising:

• first and second client devices;
• an extending service comprising a frontend software agent and a backend server;
• first and second software systems,
• wherein the second software system comprises the backend server of the extending service, wherein the frontend software agent is executable on the first client device, wherein the frontend software agent is configured to extend a functionality of the first software system when executed over the first software system;
• wherein the first and second client devices are registered to at least one of the first or second software systems, wherein the second software system has no access to code of the first software system;
• wherein the frontend software agent is configured to determine that a login session enabled the first client device to log a user of the first client device into a first user account of the user in the first software system, whereby the login session establishes a user session between the first client device and the first software system;
• wherein the system is configured to automatically verify the user session between the first client device and the first software system, in response to said determine, by:
• establishing, by the frontend software agent, a proxy communication channel between the first client device and the first software system, the proxy communication channel is configured to automatically proxy encrypted communications between the first client device and the first software system via the second client device and via the second software system;
• proxying, by the frontend software agent, a verification request from the first client device to the first software system via the proxy communication channel, said proxying comprises sending the verification request via the second client device and via the second software system to the first software system;
• and
• obtaining, by the second software system, a verification response from the first software system via the proxy communication channel, wherein the verification response comprises verification user data from the first software system;
• locally storing, by the second software system, a copy of the verification response before forwarding the verification response to the first client device;
• obtaining, by the second software system, decryption data from the first client device;
• based on the decryption data, decrypting, by the second software system, the verification response, thereby extracting the verification user data from the verification response;
• and
• ensuring that the user session is authentic, by the second software system, based on the verification user data;
• and
• wherein the extending service is configured to determine whether to automatically log the first client device into a second user account of the user in the second software system based on said verification of the user session, wherein said automatically log the first client device into the second user account does not require any user intervention.

An extending service comprising a backend server and a frontend software agent, the frontend software agent is configured to be executed over a first software system and to extend a functionality of the first software system, the extending service configured to:

• determine that a login session enabled a first client device to log a user of the first client device into a first user account of the user in the first software system, whereby the login session establishes a user session between the first client device and the first software system;
• based on said determining, automatically verifying the user session between the first client device and the first software system, wherein said automatically verifying comprises ensuring that the user session is authentic, wherein said automatically verifying comprises:
• establishing a proxy communication channel between the first client device and the first software system, the proxy communication channel is configured to automatically proxy communications between the first client device and the first software system via a second client device and via the backend server, wherein the first and second client devices are registered to the backend server;
• proxying a verification request from the first client device to the first software system via the backend server;
• proxying a verification response from the first software system to the first client device via the backend server, wherein the verification response comprises verification user data from the first software system;
• storing a copy of the verification response at the backend server;
• obtaining decryption data from the first client device at the backend server;
• based on the decryption data, decrypting the verification response at the backend server, thereby extracting the verification user data from the verification response;
• and
• verifying the user session at the backend server based on the verification user data;
• and
• based on said automatically verifying, determining whether to automatically log the first client device into a second user account of the user in the backend server, wherein said automatically log the first client device into the second user account does not require any user intervention.