Unified authentication and authorization scheme

Abstract

The invention discloses a unified authentication and authorization scheme, which is composed of an authorization module, a resource module and a client sdk, wherein the authorization module is mainlyresponsible for client verification, user information authentication and issuing of a JWT token after successful authentication; the resource module is mainly responsible for managing open resources by the server; the client sdk cooperates with the server authorization module to complete an authentication and authorization process, obtains the JWT token issued by the server, obtains the user information, and can obtain the specified open resources of the server through the JWT token. A barrier between systems developed based on Java in an enterprise can be broken through, unified management and control of basic information such as user authority are achieved, and the operation management cost of the enterprise is reduced. The access of each subsystem and the access of an external system are finely controlled through a unified authentication and authorization center, so that the credibility of the access system is ensured; basic information sources such as user authority are consistent,communication of all systems in an enterprise can be achieved, and the use cost of staff is reduced.

Description

technical field [0001] The invention relates to a unified authentication and authorization scheme, which belongs to the field of information technology. Background technique [0002] With the development of Internet applications, more and more application systems are deployed on servers in different regions. The geographic locations of these systems are independent, but they are connected together through the network. With the continuous expansion of the scale, it has brought more and more pressure to the managers. [0003] Common application system login and authentication methods are usually that each system has its own independent authentication module and authority data, so when there are too many systems, each system needs to be authenticated by the corresponding system once. This authentication method leads to Frequent login operations are inconvenient for users, and the efficiency of multi-system login is very low. At the same time, the heterogeneity of data leads t...

AI Technical Summary

Problems solved by technology

[0003] Common application system login and authentication methods are usually that each system has its own independent authentication module and authority data, so when there are too many systems, each system needs to be authenticated by the corresponding system once. This authentication method leads to Frequent login operations are inconvenient for users, and the efficiency of multi-system login is very low

At the same time, the heterogeneity of data leads to the incommunication of personnel information, and the change of user information requires simultaneous maintenance of multiple systems, which greatly increases maintenance costs.

Images