The invention discloses a request
authentication method. The method comprises the steps of obtaining preset token information contained in a request when the request initiated by a target
client is received; obtaining an
encryption key in a configuration file, and decrypting and decoding the preset token information according to the
encryption key, thereby obtaining signature information; judgingwhether the signature information is the same as preset
target signature information or not; authenticating the request successfully if the signature information is the same as the preset
target signature information; and authenticating the request unsuccessfully if the signature information is different from the preset
target signature information. According to the
authentication method, the
authentication is carried out through utilization of the preset token information of the
client, and the information does not need to be stored by a
server. The problem that each time when the request isinitiated, session storage request
information needs to be established at the
server, when more and more clients initiate the requests, the cost of the memory of the
server is continuously increased,and an authentication process also can be congested is avoided.