Method, device and system for implementing authorization of third-party application based on open platform

Abstract

The invention discloses a method, a device and a system for implementing the authorization of a third-party application based on an open platform. The method comprises the following steps of: receiving an authorization request initiated by the third-party application, and determining that the received authorization request does not carry third-party application access token information; determining that an access token for single sign-on (SSO) client application mapping is stored in a client, and displaying user information corresponding to the stored access token; receiving user information which is selected from the displayed user information by a user, mapping the user information into the access token, analyzing the authorization request, and acquiring a third-party application identifier; packaging the mapped access token and the acquired third-party application identifier into an agent authorization request, and outputting the agent authorization request to the open platform; and receiving an agent authorization request response returned by the open platform, and outputting the third-party application access token information carried in the agent authorization request response to the third-party application. By the invention, application authorization efficiency can be improved.

Description

technical field [0001] The invention relates to computer communication technology, in particular to a method, device and system for realizing third-party application authorization based on an open platform. Background technique [0002] The open platform exposes the application programming interface (API) or function (function) through the software system, and encapsulates the service into a series of data interfaces that are easy to recognize by the computer, that is, the open application programming interface (Open API), which is called by the third-party application, so that the external The third-party application program can increase the function of the software system or use the resources of the software system through OpenAPI. [0003] With the rise of the mobile Internet and open platforms, it is increasingly common for multiple applications based on the same open platform to be installed on the same client. For example, in the current enterprise application environ...

AI Technical Summary

Problems solved by technology

[0018] It can be seen from the above that the existing methods for realizing third-party application authorization based on an open platform require the user to input corresponding The user name and password information make it cumbersome for the user to implement the application authorization operation. It takes a long time to obtain the application authorization and the application authorization efficiency is low; further, the application must perform the authorization operation through the system browser. If the browser is closed, the cookie cannot be shared, so that the user name and password information are still required to log in again; moreover, the cookie information has a life cycle, that is, it has an expiration time limit. If the cookie expires, the user will need to re-enter the user name and password information to log in ; In addition, the life cycle of the cookie is not controlled by the application, and the application cannot automatically refresh the cookie

Images