Interface authentication method, device and equipment and computer readable storage medium

Abstract

The invention belongs to the technical field of security protection, and provides an interface authentication method, which comprises the following steps: when an interface authorization application is received, extracting an application ID and a key from the interface authorization application, the application ID being an enterprise ID or an application ID; performing authentication configurationon the enterprise ID or the application ID according to a preset configuration rule so as to grant the use permission of the application under the enterprise ID or the use permission of the application corresponding to the application ID; recording and storing configured authentication information so as to perform authentication verification on the request according to the authentication information when the request sent by the client is received; and when the authentication verification is passed, obtaining a user identity label, and allowing a client corresponding to the request to access the platform and / or call an interface of the platform. The invention further provides a device, equipment and a computer readable storage medium. The legality of the request is verified according to the configured authentication information, a normal response is given to a legal request, an illegal request is rejected, and therefore platform site resources are effectively protected.

Description

technical field [0001] The present invention relates to the technical field of security protection, in particular to an interface authentication method, device, equipment and computer-readable storage medium. Background technique [0002] With the continuous development of communication technology, various communication technology standards have been widely used. Existing system platforms generally need to call and obtain data through interfaces. However, if there is no authentication management for interfaces, users can Random access to the platform through the Internet and arbitrarily calling the interface will cause a large amount of platform resources to be occupied, affecting the maintenance, management and operation of the platform. Therefore, in project application engineering, when different third parties access the platform, authentication configuration is required. At the same time, the authorization forms of third parties are different, and the logic business that...

AI Technical Summary

Problems solved by technology

[0002]With the continuous development of communication technology, various communication technology standards have been widely used, and the existing system platforms generally need to be called and Obtain data, but if there is no authentication management for the interface, users can access the platform at will through the Internet and call the interface at will, which will cause a large amount of platform resources to be occupied, affecting the maintenance management and operation of the platform

Therefore, in project application engineering, when different third parties access the platform, authentication configuration is required. At the same time, the authorization forms of third parties are different, and the logic business that needs to be processed in the authentication process is complex and changeable, which is not conducive to management and easy Lead to data confusion or incompatibility, and there are certain security risks

Images