Abstract: Methods for hardening security between web services using protected forwarded access tokens are implemented via systems and devices. User applications receive user tokens with user information from an identity provider and provide the user tokens to first services with data requests. Each first service extracts and transforms a portion of a user token to validate a user token signature, and determines a target service for the data request. The first services acquire actor tokens from the identity provider that uniquely identify the first services using public keys, and then generate authentication tokens, signed with corresponding private keys, that encapsulate the actor tokens and the transformed user tokens. The signed authentication tokens are provided to target services which validate the authentication tokens as well as the encapsulated tokens and their respective signatures. Upon validation, requested data is retrieved and provided back for the user applications from the target services.

Abstract: Methods for hardening security between web services using protected forwarded access tokens are implemented via systems and devices. User applications receive user tokens with user information from an identity provider and provide the user tokens to first services with data requests. Each first service extracts and transforms a portion of a user token to validate a user token signature, and determines a target service for the data request. The first services acquire actor tokens from the identity provider that uniquely identify the first services using public keys, and then generate authentication tokens, signed with corresponding private keys, that encapsulate the actor tokens and the transformed user tokens. The signed authentication tokens are provided to target services which validate the authentication tokens as well as the encapsulated tokens and their respective signatures. Upon validation, requested data is retrieved and provided back for the user applications from the target services.

Abstract: The present invention extends to methods, systems, and computer program products for identifying impacted tests from statically collected data. In general, static dependency data, possibly augmented with some dynamic data, is used to find an appropriate set of impacted tests for code changes. In some embodiments, static dependency analysis is used to identify tests impacted by a code change. Heuristics can be used to assist with identifying an appropriate set of impacted tests to run for a code change. Dynamic data can be used to augment static dependency data to identify more optimal sets of impacted tests to run for a code change.

Abstract: A method for providing a query-based diagrammatic presentation of data includes generating a filter element that defines a set of groups and includes a set of declarative queries that define information to be included in the set of groups. The filter element is applied to a data source, which includes performing the set of declarative queries on the data source, thereby generating a set of query results for each of the groups. A diagram is generated that includes a set of shapes representing the set of groups, and a set of nodes nested within each of the shapes, wherein the nodes for each group are determined based on the query results for that group.

Abstract: The present invention extends to methods, systems, and computer program products for identifying impacted tests from statically collected data. In general, static dependency data, possibly augmented with some dynamic data, is used to find an appropriate set of impacted tests for code changes. In some embodiments, static dependency analysis is used to identify tests impacted by a code change. Heuristics can be used to assist with identifying an appropriate set of impacted tests to run for a code change. Dynamic data can be used to augment static dependency data to identify more optimal sets of impacted tests to run for a code change.

Abstract: A method for providing a query-based diagrammatic presentation of data includes generating a filter element that defines a set of groups and includes a set of declarative queries that define information to be included in the set of groups. The filter element is applied to a data source, which includes performing the set of declarative queries on the data source, thereby generating a set of query results for each of the groups. A diagram is generated that includes a set of shapes representing the set of groups, and a set of nodes nested within each of the shapes, wherein the nodes for each group are determined based on the query results for that group.

Abstract: A system and method for managing the recognition and processing of gestures. A system provides a mechanism to detect conflicts between gesture recognizers and resolve the conflicts. A runtime system receives notifications from gesture recognizers in the form of requests for resources or actions. A conflict detector determines whether a conflict with another gesture recognizer exists. If a conflict exists, a conflict resolver determines a resolution. This may include determining a winning gesture recognizer and deactivating the losing gesture recognizers. A design time system statically validates gesture recognizers based on static state machines corresponding to each gesture recognizer.