Application service calling method, device and system

Abstract

The invention provides an application service calling method, device and system. The application service introduces and integrates an Adapter provided by a unified authentication center, and executesthe following steps: when an application request including a request parameter and a ciphertext thereof is sent from the outside, sending the request parameter and the ciphertext thereof to the unified authentication center for signature verification, and performing request processing according to a Token returned by the unified authentication center when the verification is passed; when an application request including the request parameter and the Token is sent from the outside, carrying out request processing according to the request parameter and indicating the Token when the Token is verified to be valid; and when the request parameter relates to access to the internal resource, returning the corresponding resource to the outside according to the user information in the Token, and when the request parameter relates to call of another application service, sending an application request comprising the request parameter and the Token to the application service. According to the scheme, safe calling of the application service can be realized under the public network http protocol.

Description

technical field [0001] The present invention relates to the field of computer technology, in particular to an application service calling method, device and system. Background technique [0002] With the rise and widespread use of application services, or microservices, microservice applications, the security of application service interfaces has received more and more attention. The currently more commonly used method is to use Token. Token is usually a string signed by the unified certification authority and contains user information. [0003] At present, the client can use the token to call the application service interface to send a request, and the application service can obtain the token from it after receiving the request. Then, verify whether the Token is issued by the unified certification center and has not expired. If the verification is passed, the application service can parse out the user information and process the corresponding request. [0004] However, ...

AI Technical Summary

Problems solved by technology

[0004] However, when using the http protocol on the public network, because the http protocol supports plaintext transmission, Token is easy to be intercepted, so there is a great security risk

Images