Authorization Server Re-authorization Window
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In authority delegation systems using OAuth 2.0, users cannot perform re-authorization operations when physically distant from the system, as the user terminal and client are not closely linked, making it difficult to correct previous authorization operations due to loose linkage and limited display and operation capabilities on small terminals like smartphones.
Innovation Solution
An authorization server system that temporarily stores authorization check results, allowing re-authorization within a specified deadline, enabling users to perform re-authorization operations independently of client requests and operations, even when physically distant, by managing access token issuance based on stored authorization check results.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the authorization procedure is initiated by user operation in conventional OAuth 2.0, then the user can control the authorization process, but the user cannot perform re-authorization when physically distant from the system
Solution Approach 1:
The authorization server temporarily stores the authorization check result for a predetermined time period before issuing the access token. This preliminary storage allows the user to perform re-authorization operations within the time window, resolving the contradiction by enabling corrective actions while maintaining user control.
Solution Approach 2:
The system dynamically adjusts the authorization process by allowing multiple authorization check requests within a time period. The authorization server manages the temporal state of authorization results, transitioning from a static single-operation model to a dynamic multi-operation model that adapts to user needs.
2Ease of operation
If the authorization check request is transmitted to the user terminal, then the user can provide authorization input, but the loose linkage between user terminal and client makes correction difficult
Solution Approach 1:
The authorization server provides feedback by temporarily storing authorization check results and allowing re-authorization requests within a time period. This feedback mechanism enables users to correct incorrect authorization inputs while maintaining the ability to perform initial authorization operations easily.
3Productivity
If the access token is issued immediately after authorization check, then system efficiency is improved, but user control for correction is lost
Solution Approach 1:
The authorization server performs a preliminary storage of the authorization check result before final access token issuance. This preliminary action creates a time window for potential re-authorization without permanently delaying the system, balancing efficiency with user control.
Solution Approach 2:
The system implements a dynamic time-based state where the authorization result is held temporarily rather than immediately converted to an access token. This dynamic approach allows the system to maintain efficiency while providing a controlled window for user corrections.
Data Source
AI summary
After receiving an authorization result from a user, an authorization server sets a deadline for re-authorization, performs wait processing until the deadline, and thereafter issues an access token.