Interface calling authentication method and device, electronic equipment and readable storage medium

Abstract

The invention provides an interface calling authentication method and device, electronic equipment and a readable storage medium. The method comprises the steps of receiving a calling request sent by a micro-service calling party, wherein the calling request is used for requesting to call a target interface of a micro-service provider, and the calling request carries features of the micro-service calling party; verifying whether the features of the micro-service calling party are matched with preset accessible features, wherein the accessible features correspond to the target interface; and during matching, determining that the micro-service calling party has the permission of calling the target interface. Through the method, when a micro-service calling party wants to call any interface of a micro-service provider, the micro-service provider can compare own features of the micro-service calling party with accessible features corresponding to the interface so as to determine whether the micro-service calling party has the authority of calling a target interface. Therefore, the granularity of interface authentication is refined to each interface, and the security of interface calling between micro-service applications is greatly improved.

Description

technical field [0001] The invention relates to the technical field of data processing, in particular to an interface calling authentication method, device, electronic equipment and readable storage medium. Background technique [0002] When microservices call each other through the interface, in order to ensure the security of the call (meaning that the called interface needs some mechanism to verify whether the caller is credible), the caller usually needs to be authenticated. There are two kinds of authentication schemes in related technologies, one is based on token (token), such as Oauth (an open protocol that provides a safe, open and simple standard for authorization of user resources) or JWT (Json web token, which is a JSON-based open standard implemented to transmit declarations between network application environments), etc., this type of method uses the token as a key, and as long as the caller has a legal token, it is allowed to call the interface. If two Interf...

AI Technical Summary

Problems solved by technology

The parameters in the list are usually IP addresses, service names, etc. It can be seen from the parameters that this method is usually authentication between services. Assuming that a service IP address is set in the white list, it means that all services under this IP address Interfaces can be accessed, so there are still major security risks

Images