Authentication method and system based on JWT

Abstract

The invention discloses an authentication method and system based on JWT. The method comprises the steps that a front-end application sends a login request carrying account password information to anauthentication service through a service gateway; the authentication service performs account and password verification on the account and password information according to the verification mode corresponding to the account and password information adaptation pair and the specific authentication interface of the visitor service; the authentication service creates a bill and returns the bill to thefront-end application when the visitor service returns verification passing information; the front-end application carries a bill to send a service access request to the service gateway; the servicegateway verifies the bill, refreshes the bill after successful verification, carries the refreshed bill to access the business service, and returns business data returned by the business service and the refreshed bill to the front-end application. According to the method, the defects that in the prior art, authentication control between the front end and the rear end through a session sharing mechanism is unreliable and complex, and the requirement for gradual expansion of business services cannot be well met can be overcome.

Description

technical field [0001] The present invention relates to the field of front-end and back-end communication, in particular to a JWT-based authentication method and system. Background technique [0002] In the past single application system, the front-end request to the back-end was generally controlled through the session sharing mechanism. When the business services gradually expanded, once the shared storage was down, the front-end application could not be accessed, and each user After logging in, the authentication information needs to be stored in the shared storage, and it even needs to be stored for a long time. In this case, there is a problem of serious resource consumption. In addition, shared storage requires a certain protection mechanism, so it needs to be accessed through a secure link. The implementation of this scenario solution is quite complex. SUMMARY OF THE INVENTION [0003] The technical problem to be solved by the present invention is to provide a JWT-...

AI Technical Summary

Problems solved by technology

[0002] In the past single application system, when the front-end requests to the back-end, the authentication control is generally performed through the session sharing mechanism. When business services gradually expand and increase, once the shared storage goes down, the front-end application cannot be accessed, and each user After logging in, it is necessary to store its authentication information in the shared storage, even for a long time. In this case, there is a serious problem of resource consumption.

In addition, shared storage requires a certain protection mechanism, so it needs to be accessed through a secure link. The implementation of this scenario solution is quite complex

Images