公开(公告)号：US20230018767A1

公开(公告)日：2023-01-19

申请号：US17376386

申请日：2021-07-15

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： Satyendra Singh ,  Ganesh Valluru Ramakrishnappa ,  Tathagata Roy ,  Ravinder Reddy Bommineni ,  Sharan Chaitanya Potturu

IPC: H04L29/06

Abstract: Example implementations relate to the processing of refresh token requests at an API gateway. The API gateway determines a first time associated with receipt of the refresh token request and a second time associated with the generation of a current access token. The current access token and a refresh token in the refresh token request are provided by the API gateway to the client device for accessing a backend service. The API gateway determines whether a difference between the first time and the second time is within a pre-defined threshold duration. When the difference between the first time and the second time is within the pre-defined threshold, the API gateway denies the refresh token request for generating the new access token and transmits the current access token back to the client device.

公开(公告)号：US11930038B2

公开(公告)日：2024-03-12

申请号：US17376386

申请日：2021-07-15

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： Satyendra Singh ,  Ganesh Valluru Ramakrishnappa ,  Tathagata Roy ,  Ravinder Reddy Bommineni ,  Sharan Chaitanya Potturu

IPC: H04L9/40

CPC classification number: H04L63/1458 ,  H04L2463/142

Abstract: Example implementations relate to the processing of refresh token requests at an API gateway. The API gateway determines a first time associated with receipt of the refresh token request and a second time associated with the generation of a current access token. The current access token and a refresh token in the refresh token request are provided by the API gateway to the client device for accessing a backend service. The API gateway determines whether a difference between the first time and the second time is within a pre-defined threshold duration. When the difference between the first time and the second time is within the pre-defined threshold, the API gateway denies the refresh token request for generating the new access token and transmits the current access token back to the client device.