Micro-service access method, device and equipment and storage medium

Abstract

The invention relates to the technical field of information security, and discloses a micro-service access method, device and equipment and a storage medium, which are used for improving the micro-service access accuracy. The micro-service access method comprises the following steps: intercepting a micro-service access request through a preset micro-service gateway to obtain an access request address and a target user token; if the expiration time is less than or equal to the current time, sending an authority acquisition request to the target authority management service according to the new user token to obtain a target user authority list; if the expiration moment is greater than the current moment, obtaining a tenant identification value and cached permission list data according to the target user token; if the access request address does not exist in the cached permission list data, generating warning information; if the access request address exists in the cached permission list data, accessing the target system microservice based on the tenant identification value and the access request address. In addition, the invention also relates to a blockchain technology, and the access request address can be stored in the blockchain node.

Description

technical field [0001] The present invention relates to the field of gateway control of information security technology, in particular to a microservice access method, device, equipment and storage medium. Background technique [0002] In the existing monolithic application, authentication, application interface API, and menu authority control generally use a public jar package, and microservices that require authority control introduce authority packages and adapt based on it; or individually for each App development corresponding authority management module. [0003] Existing permission control schemes seriously intrude microservices. Generally, it is necessary to create a corresponding permission-related table in the microservice, store permission-related data in the local database, and then adapt the local database to the interface in the jar package. At the same time, due to the lack of unified management of permissions, when a system has multiple sub-microservices, pe...

AI Technical Summary

Problems solved by technology

[0003] Existing permission control schemes seriously invade microservices. Generally, it is necessary to create a corresponding permission-related table in the microservice, store permission-related data in the local database, and then adapt the local database to the interface in the jar package.

At the same time, due to the lack of unified management of permissions, when a system has multiple sub-microservices, permission data synchronization between each sub-microservice is required, which may easily cause inconsistency in permission data

And each sub-service needs to execute permission verification rules, and each sub-microservice needs to invest a lot of development and testing when accessing permissions, resulting in low efficiency of permission verification of microservice clusters and low accuracy of microservice access

Images