Centralized authentication server for providing cross-domain resources via a rest-based tunnel

A method comprising:

• incorporating a communication interface and a Representational State Transfer (“REST”) tunneling module into an authentication server, the communication interface and the REST tunneling module configuring one or more computer processors of the authentication server to perform operations to allow a client device to obtain first information from a first service provider and second information from a second service provider without violating a single-domain policy, the first service provider being at a first domain and the second service provider being at a second domain, the operations comprising:
• receiving, at the authentication server, a request for the first information;
• based on the request for the first information specifying a URI for accessing the first information via a REST-based tunnel, establishing the REST-based tunnel and sending the request to the first service provider using the REST-based tunnel;
• receiving the first information from the first service provider;
• receiving, at the authentication server, a request for the second information;
• based on the second request for the second information specifying a second URI for accessing the second information via the REST-based tunnel, sending the request for the second information to the second service provider using the REST-based tunnel;
• receiving the second information from the second service provider;
• and
• providing the first information and the second information to the client device in communication with the authentication server, the first information and the second information being used in an application instantiated by the client device.

A non-transitory machine-readable storage medium having computer-executable instructions stored thereon that, when executed by one or more processors, cause the one or more processors to perform operations to allow a client device to obtain first information from a first service provider and second information from a second service provider, the first service provider being at a first domain and the second service provider being at a second domain, without violating a single-domain policy, the operations comprising:

• receiving, at the authentication server, a request for the first information;
• based on the request for the first information specifying a URI for accessing the first information via a REST-based tunnel, establishing the REST-based tunnel and sending the request to the first service provider using the REST-based tunnel;
• receiving the first information from the first service provider;
• receiving, at the authentication server, a request for the second information;
• based on the second request for the second information specifying a second URI for accessing the second information via the REST-based tunnel, sending the request for the second information to the second service provider using the REST-based tunnel;
• receiving the second information from the second service provider;
• and
• providing the first information and the second information to a client device in communication with the authentication server, the first information and the second information being used in an application instantiated by the client device.