Microservice access method, device, equipment and storage medium

Abstract

The invention relates to the technical field of information security, and discloses a microservice access method, device, equipment and storage medium, which are used to improve the accuracy of microservice access. The microservice access method includes: intercepting the microservice access request through the preset microservice gateway, and obtaining the access request address and the target user token; if the expiration time is less than or equal to the current time, send the new user token to the target authority management service Permission acquisition request to obtain the target user permission list; if the expiration time is greater than the current time, obtain the tenant ID value and cached permission list data according to the target user token; if there is no access request address in the cached permission list data, generate a warning Information; if there is an access request address in the cached permission list data, access the target system microservice based on the tenant ID value and the access request address. In addition, the present invention also relates to block chain technology, and the access request address can be stored in block chain nodes.

Description

technical field [0001] The present invention relates to the field of gateway control of information security technology, in particular to a microservice access method, device, equipment and storage medium. Background technique [0002] In the existing monolithic application, authentication, application interface API, and menu authority control generally use a public jar package, and microservices that require authority control introduce authority packages and adapt based on it; or individually for each App development corresponding authority management module. [0003] Existing permission control schemes seriously intrude microservices. Generally, it is necessary to create a corresponding permission-related table in the microservice, store permission-related data in the local database, and then adapt the local database to the interface in the jar package. At the same time, due to the lack of unified management of permissions, when a system has multiple sub-microservices, pe...

AI Technical Summary

Problems solved by technology

[0003] Existing permission control schemes seriously invade microservices. Generally, it is necessary to create a corresponding permission-related table in the microservice, store permission-related data in the local database, and then adapt the local database to the interface in the jar package.

At the same time, due to the lack of unified management of permissions, when a system has multiple sub-microservices, permission data synchronization between each sub-microservice is required, which may easily cause inconsistency in permission data

And each sub-service needs to execute permission verification rules, and each sub-microservice needs to invest a lot of development and testing when accessing permissions, resulting in low efficiency of permission verification of microservice clusters and low accuracy of microservice access

Images