Authentication method and device as well as storage medium

Abstract

The invention provides an authentication method and device as well as a storage medium. The method comprises the following steps: sending a service request to a gateway microservice by virtue of a client, wherein the service request comprises a token prestored by the client as well as service data; sending the service request to an authentication microservice by the gateway microservice, verifyingthe authentication microservice according to the token, sending a verification result to the gateway microservice, and sending the service request to a corresponding service microservice to perform aservice flow when the gateway microservice passes verification. The method provided by the invention takes authentication as an independent basic microservice, and other microservices under a microservice architecture respectively can call the authentication microservice to perform authentication, so that decoupling performance is good, and the authentication management problem under the microservice architecture is solved; only a client needs to prestore the token, and each microservice side does not need to store Session information, so that statelessness and extensibility are realized; anduser identity information is transmitted independent of Cookie, and a CSRF risk is avoided.

Description

technical field [0001] The present invention relates to the technical field of communication, and in particular to an authentication authentication method, device and storage medium. Background technique [0002] When more and more enterprises realize their core business based on the overall application architecture model, as the business develops, the amount of data and the system become more and more bloated, and the complexity increases, making it difficult to adapt to flexible and changeable business needs. In this context, Microservices Architecture emerged as the times require. It abandoned the traditional large-scale integrated design concept and changed it to a fine-grained, loosely coupled, and flexibly combined autonomous unit. This system design concept has gradually become The current mainstream business system architecture model. [0003] After the system is micro-serviced, most of the original monolithic applications are based on the session authentication mod...

AI Technical Summary

Problems solved by technology

Under the microservice architecture, the system will be split into several microservices / microapplications, and each microapplication needs to authenticate access, and each microapplication needs to specify the current access user and its permissions. Authorization method is not convenient for identity authentication and authentication management of microservice architecture

Images