Application programming interface access method and system, server and clients

Abstract

The invention provides an application programming interface access method and system, a server and clients. When the method is applied to the server, the method includes the following steps: acquiringregistration information sent by at least one external client; generating an access key corresponding to each piece of registration information according to the registration information, storing eachaccess key, and sending the access keys to the corresponding clients; receiving an access request sent by a target client; parsing the access request to obtain a first message authentication code, arandom character string and target registration information corresponding to the target client; searching a target key corresponding to the target registration information from each stored access key,and generating a second message authentication code according to the target key and the random character string; and determining whether the first message authentication code is the same as the second message authentication code, and if so, issuing an access authority corresponding to an application programming interface to the target client. According to the scheme, the security of API access can be improved.

Description

technical field [0001] The present invention relates to the field of computer technology, in particular to an application programming interface access method, system, server and client. Background technique [0002] REST is a software architectural style for distributed hypermedia systems, commonly used in widely popular protocols and standards such as HTTP, URI, XML, and HTML. REST Application Programming Interface (Application Programming Interface, API) is currently a relatively mature set of API design theory for Internet applications. [0003] When designing a REST-style Web Service API, the API platform is usually directly exposed to the public network. When users access the API, their access information is transmitted through the public network, which makes the access information easy to be stolen during the transmission process. The thief can The access information is used to access the API, resulting in low access security of the API. Contents of the invention ...

AI Technical Summary

Problems solved by technology

[0003] When designing a REST-style Web Service API, the API platform is usually directly exposed to the public network. When users access the API, their access information is transmitted through the public network, which makes the access information easy to be stolen during the transmission process. The thief can Use this access information to access the API, resulting in low API access security

Images