Claims:WE CLAIM
1. A method of providing access to a user in a customizable web application framework, the method comprising:
generating, by a network device, an application key based on a Unique Identifier (UID) associated with a project and a remote location of the user for a session;
determining, by the network device, whether a user request received post user authentication is an Asynchronous JavaScript and XML (AJAX) POST request;
comparing, by the network device, a token received with the user request with the application key for the session to determine a match, when the user request is an AJAX POST request; and
continuing, by the network device, the session to serve requested data to the user when the token matches with the application key.
2. The method of claim 1 further comprising sending an AJAX POST request to authenticate login information of the user, the login information comprising a user ID and a password.
3. The method of claim 2 further comprising generating a session ID in response to authenticating login information of the user.
4. The method of claim 3 further comprising checking availability of the user ID and the session ID in the user request.
5. The method of claim 4 further comprising discontinuing the session when at least one of the user ID and the session ID is unavailable.
6. The method of claim 1, wherein generating the application key comprises performing double hashing on the UID and the remote location of the user, the remote location comprising Internet Protocol (IP) address of the user.
7. The method of claim 1 further comprising discontinuing the session when the user request is not an AJAX POST request.
8. The method of claim 1 further comprising discontinuing the session when the token does not match with the application key.
9. The method of claim 1 further comprising redirecting the user to a login webpage when the token does not match with the application key.
10. A system for providing access to a user in a customizable web application framework, the system comprising:
at least one processors; and
a computer-readable medium storing instructions that, when executed by the at least one processor, cause the at least one processor to perform operations comprising:
generating an application key based on a Unique Identifier (UID) associated with a project and a remote location of the user for a session;
determining whether a user request received post user authentication is an Asynchronous JavaScript and XML (AJAX) POST request;
comparing a token received with the user request with the application key for the session to determine a match, when the user request is an AJAX POST request; and
continuing the session to serve requested data to the user when the token matches with the application key.
11. The system of claim 10, wherein the operations further comprise sending an AJAX POST request to authenticate login information of the user, the login information comprising a user ID and a password.
12. The system of claim 11, wherein the operations further comprising generating a session ID in response to authenticating login information of the user.
13. The system of claim 12, wherein the operations further comprise checking availability of the user ID and the session ID in the user request.
14. The system of claim 13, wherein the operations further comprise discontinuing the session when at least one of the user ID and the session ID is unavailable.
15. The system of claim 10, wherein the operation of generating the application key comprises the operation of performing double hashing on the UID and the remote location of the user, the remote location comprising Internet Protocol (IP) address of the user.
16. The system of claim 10, wherein the operations further comprise discontinuing the session when the user request is not an AJAX POST request.
17. The system of claim 10, wherein the operations further comprise discontinuing the session when the token does not match with the application key.

18. The system of claim 10, wherein the operations further comprise redirecting the user to a login webpage when the token does not match with the application key.

Dated this 12th day of March, 2016
Swetha SN
Of K&S Partners
Agent for the Applicant
, Description:TECHNICAL FIELD
This disclosure relates generally to web application frameworks and more particularly to methods and systems for developing user customizable web application frameworks.