Patent ID: 9571495
Date: 2017-02-14
CPC Classifications: H04L

Claim:
1. A computer-implemented method for authorizing web service requests, comprising: receiving, by a web services authorization computer from a client computer, a web service request comprising an authorization header and business code; passing, by a CXF bus of the web services authorization computer, the web services request to an authentication interceptor component of the web services authorization computer to authenticate a Security Assertion Markup Language (SAML) token included in the authorization header; receiving, by the CXF bus from the authentication interceptor component, an authentication indication and constructing a security context based on attributes of the SAML token; passing, by the CXF bus, the security context to an authorization interceptor component of the web services authorization computer to interact with a policy information point (PIP) and a policy decision point (PDP); receiving, by the CXF bus from the authorization interceptor component, a permit response indicating authorization of authorizing the web services request and transmitting, by the web services authorization computer, the requested web service to the client computer, wherein authenticating the SAML token comprises: verifying, by the authentication interceptor component, the signature of the SAML token; determining, by the authentication interceptor component, that the SAML token was not tampered with; determining, by the authentication interceptor component, that the SAML token was signed by a trusted Identity Provider; and determining, by the authentication interceptor component, that the SAML token has not expired.