Micro-service authentication method and system

Abstract

The invention discloses a micro-service authentication method and system. The system comprises an authentication center and a gateway. The method comprises the following steps: when an authenticationcenter receives a request, the authentication center generates a token according to login user information, adds the token to the request and forwards the request to a gateway; the gateway analyzes the token in the request by extracting the token in the request, reserves the token in the request after analyzing that the user information is valid, and forwards the request to a first micro-service,and the first micro-service responds to the request. According to the method disclosed in the invention, the token containing the user information is generated by using the certificate center and sentto the request; the request is forwarded to the gateway; all micro-service requests are intercepted by the gateway for user authentication analysis, only the request passing authentication can be forwarded normally, that the micro-service can be subjected to safe identity authentication is ensured, and interaction between the server and the client is reduced; the method has the advantages that when a new micro-service is accessed, the later modification workload is small, and network resource consumption is low.

Description

technical field [0001] The present invention relates to the technical field of microservices, in particular to a microservice authentication method and system. Background technique [0002] With the rise of the microservice architecture, identity authentication and authentication in traditional monolithic application scenarios are facing more and more challenges. Under the monolithic application system, the application is a whole. Generally, permission verification is performed for all requests. The request generally passes through a permission interceptor to verify the permission. When logging in, the user information is cached in the session, and subsequent access The user information is obtained from the cache. Under the micro-service architecture, an application will be split into several micro-applications, and each micro-application needs to authenticate access, and each micro-application needs to specify the current access user and its permissions. [0003] At prese...

AI Technical Summary

Problems solved by technology

[0005] The disadvantage of this solution is that each user-oriented service must interact with the authentication service, which will generate a lot of very trivial and expensive traffic and repeated work. When more and more micro-applications are connected, the disadvantages are more obvious, which is not conducive to system refactoring

[0007] The disadvantage of this solution is: shared storage requires a certain protection mechanism, so it needs to be accessed through a secure link, and the implementation of this solution is quite complex

Images