Authorization application verification method, device, equipment and storage medium

Abstract

The present invention proposes a permission application verification method. The permission application verification method includes: receiving a first token for applying for permission, the first token including user ID, permission call interface parameters and time stamp; User key; obtain a temporary verification key according to the user key and the authority calling interface parameter; generate a second verification key based on the user ID, the temporary verification key, the authority calling interface parameter and the timestamp Token: comparing whether the first token is consistent with the second token, if they are consistent, the authority application is verified and authorized according to the authority call interface parameters. The invention can achieve the purpose of improving the security of authority authorization between systems.

Description

technical field [0001] The invention relates to the technical field of cryptography / information encryption and decryption, and in particular, to a method, device, device and storage medium for verifying a permission application. Background technique [0002] For non-closed software systems, such as back-end systems and middle-end systems, in order to support the docking of other systems, the interaction between systems usually adopts the way that users log in to multiple systems to operate respectively, or the way that users make API calls between systems through authorization. . [0003] The way that users log in to multiple systems to operate separately requires human intervention. Users need to participate in the whole process of multi-system operation. When the system is called, they operate on multiple systems, which is cumbersome and takes up a lot of user time. Bad user experience. [0004] For users to make API calls between systems through authorization, the syste...

AI Technical Summary

Problems solved by technology

[0003] The way that users log in to multiple systems to operate separately requires human intervention. Users need to participate in the whole process of multi-system operation. When the system is called, they operate on multiple systems separately. The operation is cumbersome and takes up a lot of user time. poor user experience

[0004] The way for users to call APIs between systems through authorization is usually to apply for permissions. The system uses the user key stored in the system, the permissions to be applied for, the parameters of the API call, and the current time stamp to generate a token token and send it to the issuing authority. The system that issues permissions uses the same key to generate a token, and compares whether the received token is the same as the generated token. If they are the same, the verification passes. In this way, when the verification passes The permissions of the latter system are fully developed, but usually api calls do not require all permissions, there is a certain security risk, and the user key is the same in multiple systems, there is also a certain security risk

Images