Micro service unified authentication method and gateway

Abstract

The embodiment of the invention discloses a micro service unified authentication method. The micro service unified authentication method is used to implement micro service authentication for multipleservice types, and has the characteristics of flexible configuration and no intrusion into a micro service business module, thus improving the flexibility of micro service authentication. The micro service unified authentication method includes the steps: a gateway receives a micro service authentication request sent by a client, and extracts an URI uniform resource identifier from the authentication request; the gateway sends the URI to gateway management micro service, and the gateway management micro service is used to store a mapping table between the URI and a micro service interface type, a micro service address, a micro service authentication type, and an authentication credential parameter; the gateway receives the corresponding micro service interface type, micro service address,micro service authentication type, and authentication credential parameter sent by the gateway management micro service, and extracts the corresponding authentication credential parameter from the authentication request; and the gateway sends the URI and the corresponding authentication credential parameter to the authentication service for authentication, and receives the corresponding authentication result.

Description

technical field [0001] The invention relates to the technical field of microservices, in particular to a unified authentication method for microservices. Background technique [0002] In the era of mobile Internet, business is becoming more and more complex. Taking Cloud House as an example, the business can be divided into instant messaging, corporate organizational structure, circle of colleagues, etc. by field. The data volume of each business module is huge. The use of a single application cannot meet the requirements of isolation, horizontal expansion, flexible upgrades, and multi-team collaborative development. Therefore, Cloud House adopts the industry-recognized micro-service technology architecture, and there are hundreds of micro-services divided. Each of hundreds of microservices may support requests from multiple sources such as PC web, PC desktop, mobile client, and open platforms. In the early stage of Cloud House development, in order to speed up, microser...

AI Technical Summary

Problems solved by technology

[0007] (1) Kong, based on configuration files, is not flexible enough; based on C and Lua, it is difficult to expand and develop; it requires high development costs to get through with the existing Java microservice governance system; the built-in Http Basic authentication cannot No existing user system opened

[0008] (2) Spring Cloud Zuul itself does not provide any authentication function, and needs to be integrated with other authentication components, which will lead to a larger and larger project size and is not flexible enough; Spring Cloud Zuul only supports Http microservices and cannot communicate with RPC microservices

After the integration of Spring Cloud Zuul and OAuth2, the business microservice still needs to call the authentication service to authenticate the access token (accessToken), which is too intrusive to the business microservice

Images