Cross domain in-browser proxy

Patent metadata

Field	Value
Publication number	US-9503501-B2
Application number	US-201314025400-A
Country	US
Kind code	B2
Filing date	Sep 12, 2013
Priority date	Sep 17, 2012
Publication date	Nov 22, 2016
Grant date	Nov 22, 2016

Abstract

An in-browser proxy enables an application in a frame to make a cross domain request. The proxy executes within the browser, which has a first domain. The browser provides a frame in which a client application executes, which has a second domain. The request from the client application is a request for data access to the external domain. The proxy identifies a registration of the client application, and forwards the request to the external domain. The proxy receives a response to the request and provides the response back to the client application within the frame.

First claim

What is claimed is:

1. A method performed by a system having at least a processor and a memory therein, wherein the method comprises:
executing a browser at the system, wherein the system operates within a first domain;
hosting a frame within the browser executing at the system, the frame executing an application within a second domain associated with an on-demand host server remote from the system;
executing a proxy within the browser, the proxy being associated with both the first and the second domains;
receiving, at the proxy executing within the browser, a request from the application executing within the frame of the browser, the request seeking access to data or resources of the system operating within the first domain and outside of the second domain of the application associated with the on-demand host server;
wherein the application includes configured access to components hosted by the on-demand host server and which are accessible via the application executing within the second domain directly form within its domain and further wherein the application includes configured access to compounds hosted by the system operating within the first domain, wherein access to the components hosted by the system in the first domain are accessible through the proxy;
identifying a registration of the application with the proxy;
generating a new request in the first domain within which the system operates in response to identifying the registration of the application with the proxy;
receiving a response to the new request; and
providing the response to the application executing within second domain associated with the on-demand host server within the frame.

2. The method of claim 1 :
wherein the request is comprises a request for data or resources hosted by the system in the first domain, external from the second domain within which the application operates;
wherein the new request comprises a new request for the data or resources hosted by the system in the first domain, the new request being generated within the first domain;
wherein the response to the new request comprises a response providing the data or resources hosted by the system in the first domain as requested by the new request; and
wherein providing the response to the application comprises providing the data or resources hosted by the system in the first domain to the application executing within the second domain associated with the on-demand host server.

3. The method of claim 1 :
wherein the frame comprises a client frame; and
wherein identifying registration of the application with the proxy comprises a parent frame of the client frame registering for asynchronous requests from client frame from the application within the client frame by providing an identifier or handle to be monitored by the client frame, the identifier or handle being stored by the client frame.

4. The method of claim 3 , further comprising:
the client frame registering for asynchronous requests from the parent frame, wherein the client frame provides a second identifier or handle to be monitored by the parent frame, the second identifier or handle being stored by the parent frame.

5. The method of claim 1 :
wherein the request comprises an XML (extensible markup language) HTTP (hypertext transport protocol) request (XHR); and
wherein the frame comprises an inline frame (iFrame).

6. The method of claim 1 , wherein identifying the registration of the application further comprises checking authentication information for the application, and authorizing the application in the external domain in accordance with the authentication of the application with the proxy.

7. The method of claim 1 , further comprising the proxy holding a callback for the application, and wherein providing the response to the application comprises making a call on the callback of the application.

8. Non-transitory computer readable storage media having instructions stored thereupon that, when executed by a processor of a system, the instructions cause the system to perform operations including:
executing a browser at the system, wherein the system operates within a first domain;
hosting a frame within the browser executing at the system, the frame executing an application within a second domain associated with an on-demand host server remote from the system;
executing a proxy within the browser, the proxy being associated with both the first and the second domains;
receiving, at the proxy executing within the browser, a request from the application executing within the frame of the browser, the request seeking access to data or resources of the system operating within the first domain and outside of the second domain of the application associated with the on-demand host server;
wherein the application includes configured access to components hosted by the on-demand host server and which are accessible via the application executing within the second domain directly form within its domain and further wherein the application includes configured access to components hosted by the system operating within the first domain, wherein access to components hosted by the system in the first domain are accessible through the proxy;
identifying a registration of the application with the proxy;
generating a new request in the first domain within which the system operates in response to identifying the registration of the application with the proxy;
receiving a response to the new request; and
providing the response to the application executing within second domain associated with the on-demand host server within the frame.

9. The non-transitory computer readable storage media of claim 8 , wherein the external domain is an on demand database system.

10. The non-transitory computer readable storage media of claim 8 :
wherein identifying registration of the application with the proxy comprises a patent frame of the client frame registering for asynchronous requests from client frame from the application within the client frame by providing an identifier or handle to be monitored by the client frame, the identifier or handle being stored by the client frame; and
wherein the method further comprises the client frame registering for asynchronous requests from associated with the parent frame, wherein the client frame provides a second identifier or handle to be monitored by the parent frame, the second identifier or handle being stored by the parent frame.

11. The non-transitory computer readable storage media of claim 8 , wherein the frame comprises an inline frame (iFrame).

12. The non-transitory computer readable storage media of claim 8 , wherein the request comprises an XML (extensible markup language) HTTP (hypertext transport protocol) request (XHR).

13. The non-transitory computer readable storage media of claim 8 , wherein the content for identifying the registration of the application further comprises content for checking authentication information for the application, and authorizing the application in the external domain in accordance with the authentication of the application with the proxy.

14. The non-transitory computer readable storage media of claim 8 , further comprising content for the proxy holding a callback for the application, and wherein the content for providing the response to the application comprises content for making a call on the callback of the application.

15. A system comprising:
a processor;
a memory to perform instructions;
the processor of the system to execute a browser;
network interface hardware to connect the system with a first domain, the system to op

Assignees

• Salesforce Com Inc

Inventors

• Toussaint Alex
• Jolley Chris
• Hurst Jay
• Pepper Stephen L
• Hotchkiss Kari L
• Roy Saptarshi

Classifications

• H04L67/02 Primary

  based on web technology, e.g. hypertext transfer protocol [HTTP] · CPC title

• G06F17/30861

  Physics · mapped topic

• H04L67/2814

  Electricity · mapped topic

• H04L67/563

  Data redirection of data network streams · CPC title

• G06F16/95

  Retrieval from the web · CPC title