The invention discloses a method for realizing single sign-on on on the basis of an existing WEB application

Abstract

The invention discloses a method for realizing single sign-on based on an existing WEB application, and relates to the technical field of information verification. The method is characterized in thata network configuration file of an application system based on an existing WEB application is in front of other filters; adding a keylock filter into the solution obtained in the previous step; The method comprises the following steps of: filtering is operated after a keylock filter; a transfer filter is added before other filters; the transfer filter filters all requests; meanwhile, the key security context of the key filter is obtained, and the key security context of the key filter is obtained; and the access _ token is refreshed by using the reference _ token in the key security context, the access _ token is called when calling the underlying virtualization platform, and completing login by using the access _ token.

Description

technical field [0001] The invention discloses a method for realizing single sign-on on the basis of existing WEB applications, and relates to the technical field of information verification. Background technique [0002] With the deepening of informatization applications, a single WEB application cannot meet the needs gradually, so a large application system needs to integrate multiple WEB applications, but when multi-system integration, each application system has its own set of login procedures, users need to Logging in multiple times seriously affects the user experience. Large-scale application systems need to integrate multiple WEB applications, but when multiple systems are integrated, each application system has its own set of login procedures, and users need to log in multiple times when using it, which seriously affects user experience. At the same time, the application system needs to call the underlying virtualization environment The interface of openstack curre...

AI Technical Summary

Problems solved by technology

[0002] With the deepening of informatization applications, a single WEB application cannot meet the needs gradually, so a large application system needs to integrate multiple WEB applications, but when multi-system integration, each application system has its own set of login procedures, users need to Multiple logins seriously affect user experience

Large-scale application systems need to integrate multiple WEB applications, but when multiple systems are integrated, each application system has its own set of login procedures, and users need to log in multiple times when using it, which seriously affects user experience. At the same time, the application system needs to call the underlying virtualization environment The interface of openstack currently uses the user name and password of the openstack tenant stored in the database to perform identity authentication when calling the interface, which can easily cause all users of the application system to manage openstack resources through the same openstack tenant, and tenant isolation cannot be achieved. In terms of security There is a loophole

Images