A service authentication method, device, equipment, system and storage medium

Abstract

The embodiment of the present application discloses a service authentication method, device, device, system and storage medium, wherein the method includes: the server in the microservice cluster responsible for processing the target microservice can invoke the target microservice after obtaining the target microservice After the first request used when calling the target microservice, the first request is authenticated according to the first authentication configuration rule, and after the second request used when the source microservice calls the target microservice is obtained, the second 2. Request for authentication. Both the first authentication configuration rule and the second authentication configuration rule are generated based on the target authentication configuration entry, which is configured based on the global configuration framework decoupled from the microservice cluster and is consistent with the target Authentication configuration items related to microservices. This method can make the call relationship between microservices in the microservice cluster clearer, and ensure that it is consistent with the realization of the global function of the microservice cluster.

Description

technical field [0001] The present application relates to the technical field of the Internet, and in particular to a service authentication method, device, equipment, system and storage medium. Background technique [0002] In the microservice network architecture, service authentication, as a common security control measure, plays an extremely important role in the process of verifying external requests and verifying the calling authority between microservices. Through service authentication, it is possible to verify whether external requests are Able to access the inside of the microservice cluster and verify whether the calling requester has permission to access the target microservice. [0003] At present, the commonly used service authentication method in the microservice network architecture is based on the authentication gateway set outside the microservice cluster and the Open Authorization (OAuth2) authentication service set inside the microservice cluster. [000...

AI Technical Summary

Problems solved by technology

[0004] The inventors of the present application found that the existing service authentication method has the following disadvantages: after the request obtains the token through the authentication gateway, whether it can reach the target microservice it wants to access depends entirely on the business code of each microservice , and the business codes of each microservice are independent of each other. In many cases, the call relationship determined by the business codes of each microservice in the microservice cluster is often very messy, and there may be many global functions related to the microservice cluster. Inconsistent calling relationship

Images