CAS-based single-page and multi-page web application identity integrated authentication method

Abstract

The invention discloses a CAS-based single-page and multi-page web application identity integrated authentication method. The method comprises the following steps: rewriting a user identity authentication strategy for a CAS identity authentication service (CAS server), and flexibly configuring additional JWT token attributes for returned authentication user information. A single-page web application rear-end API server does not need to store a user login state again, authentication is achieved by calling a CAS identity authentication service API interface to check a JWT token, and integrated identity authentication can be carried out on a session-based multi-page web application and a JWT-based single-page web application at the same time. According to the invention, the integration coupling degree of the application system and the CAS identity authentication system can be reduced, the access cross-domain problem is solved, the single sign-on function is realized, it is ensured that the integrated identity authentication method can be carried out on the multi-page web application based on session and the single-page web application based on JWT at the same time, and the unified identity authentication of different types of application systems is smoothly realized.

Description

technical field [0001] The invention relates to the technical field of identity integration authentication, in particular to a CAS-based single-page and multi-page web application identity integration authentication method. Background technique [0002] In the process of enterprise informatization construction, multiple application systems have been developed for different businesses, and the types of application systems are also diversified, including both C / S architecture applications and B / S architecture applications. In order to prevent users from entering user information for identity authentication when accessing different systems, which will affect user experience, the concept of single sign-on identity authentication is proposed. All business application systems are authenticated uniformly through CAS, and users only need to log in once to access all mutually trusted systems, which not only improves the ease of use of the system, but also provides a basis for data in...

AI Technical Summary

Problems solved by technology

[0006] (1) It increases the development difficulty that the front and back ends must maintain the synchronization of user login status

[0007] (2) The front-end and back-end API server of a single-page web application may not be in the same domain, which will cause cross-domain access problems

[0009] (4) It is difficult to integrate session-based multi-page web applications and JWT-based single-page web applications at the same time.

Images