Service authentication method, device, equipment and system and storage medium

Abstract

The embodiment of the invention discloses a service authentication method, device, equipment and system and a storage medium. The method comprises the following steps that: a server responsible for processing the target micro-service is arranged in a micro-service cluster; after a first request used when a target micro-service calls a target micro-service is obtained, the first request is authenticated according to a first authentication configuration rule, and after a second request used when a source micro-service calls the target micro-service is obtained, the second request is authenticated according to a second authentication configuration rule. The first authentication configuration rule and the second authentication configuration rule are generated based on a target authentication configuration entry, and the target authentication configuration entry is configured based on a global configuration framework decoupled from the micro-service cluster and is an authentication configuration entry related to the target micro-service. According to the method, the calling relationship among the micro-services in the micro-service cluster can be clearer, and the consistency with the global function of the micro-service cluster is ensured.

Description

technical field [0001] The present application relates to the technical field of the Internet, and in particular to a service authentication method, device, equipment, system and storage medium. Background technique [0002] In the microservice network architecture, service authentication, as a common security control measure, plays an extremely important role in the process of verifying external requests and verifying the calling authority between microservices. Through service authentication, it is possible to verify whether external requests are Able to access the inside of the microservice cluster and verify whether the calling requester has permission to access the target microservice. [0003] At present, the commonly used service authentication method in the microservice network architecture is based on the authentication gateway set outside the microservice cluster and the Open Authorization (OAuth2) authentication service set inside the microservice cluster. [000...

AI Technical Summary

Problems solved by technology

[0004] The inventors of the present application found that the existing service authentication method has the following disadvantages: after the request obtains the token through the authentication gateway, whether it can reach the target microservice it wants to access depends entirely on the business code of each microservice , and the business codes of each microservice are independent of each other. In many cases, the call relationship determined by the business codes of each microservice in the microservice cluster is often very messy, and there may be many global functions related to the microservice cluster. Inconsistent calling relationship

Images