Cloud database resource processing method and device, electronic equipment, and storage medium

Abstract

The application discloses a cloud database resource processing method and device, electronic equipment and a storage medium, wherein the method comprises: obtaining authentication information of a user and authenticating the authentication information of the user; if the authentication is passed, obtaining a project to which the user has a right from a background database and feeding back to the user, responding to a project selection operation of the user, querying cloud resource information of a target project belonging to a target database type selected by the user from the background database; feeding back the queried cloud resource information to the user; responding to a cloud resource selection operation of the user, obtaining an address corresponding to a target cloud resource selected by the user and cloud account information to which the target cloud resource belongs; sending an authorization request to an authorization server by taking the cloud account information to which the target cloud resource belongs as a parameter item, so as to trigger the authorization server to request and return a security token; splicing the address corresponding to the target cloud resource and the security token to obtain a password-free login address and feed back to the user.

Description

Technical Field

[0001] This application relates to the field of database operation and maintenance technology, and in particular to a method and apparatus for processing cloud database resources, electronic equipment, and storage medium. Background Technology

[0002] With the development of cloud technology and hybrid cloud, it has become common for the same project to use different types and environments of cloud databases. While the use of multi-cloud and multi-type databases enhances the robustness of the project, it also increases the difficulty of managing cloud resources.

[0003] Because cloud databases of different types and environments typically belong to different cloud vendors, and the database servers of different cloud vendors do not support each other sufficiently, it is necessary to create corresponding sub-accounts for the services provided by each cloud vendor. Therefore, in multi-cloud scenarios, a large number of sub-accounts need to be created. During the operation and maintenance of cloud databases, administrators need to constantly switch accounts to log in in order to use and manage databases in different environments and services from different vendors.

[0004] Because a large number of sub-accounts need to be created, not only do these sub-accounts need to be associated, but accounts also need to be constantly switched during operation and maintenance to access different cloud resources. Therefore, it is clear that managing cloud resources based on existing technologies is too cumbersome and relatively inefficient. Summary of the Invention

[0005] In view of the shortcomings of the prior art, this application provides a method and apparatus for processing cloud database resources, an electronic device, and a storage medium, so as to solve the problem that the management of cloud database resources based on the prior art is too cumbersome.

[0006] To achieve the above objectives, this application provides the following technical solution:

[0007] The first aspect of this application provides a method for processing cloud database resources, including:

[0008] Obtain the user's authentication information and authenticate the user's authentication information;

[0009] If the user's authentication information passes the authentication, the system retrieves the items that the user has permission to access from the backend database and sends them back to the user.

[0010] In response to the user's project selection operation, the cloud resource information of the target project belonging to the target database type is retrieved from the backend database; wherein, the target project and the target database type are the project and database type selected by the user, respectively;

[0011] The retrieved cloud resource information will be fed back to the user.

[0012] In response to the user's cloud resource selection operation, obtain the address corresponding to the target cloud resource selected by the user and the cloud account information to which the target cloud resource belongs;

[0013] The cloud account information to which the target cloud resource belongs is used as a parameter to authorize the server to send an authorization request, thereby triggering the authorization server to request the return of a security token;

[0014] The address corresponding to the target cloud resource is concatenated with the security token to obtain a passwordless login address, which is then sent to the user. The passwordless login address is used to access the service corresponding to the target cloud resource without a password.

[0015] Optionally, in the cloud database resource processing method provided above, the target cloud resource includes a target database service and a target database instance, and obtaining the address corresponding to the target cloud resource selected by the user and the cloud account information to which the target cloud resource belongs includes:

[0016] Send an access request to the cloud resource server where the target database service is located, attempting to access the target database service;

[0017] Obtain the redirect address returned by the cloud resource server;

[0018] Retrieve the cloud account information to which the target database instance belongs from the backend database;

[0019] The step of concatenating the address corresponding to the target cloud resource with the security token to obtain the passwordless login address includes:

[0020] The redirected address is concatenated with the security token to obtain the passwordless login address.

[0021] Optionally, in the cloud database resource processing method provided above, the authentication of the user's authentication information includes:

[0022] Check whether the user's authentication information meets the format requirements;

[0023] If the user's authentication information is found to meet the format requirements, then the user's authentication information is judged to be correct based on the user information stored in the background database.

[0024] If the user's authentication information is determined to be correct, then the user's authentication information is deemed to have passed authentication.

[0025] Optionally, the cloud database resource processing method provided above also includes:

[0026] Obtain the target vendor's cloud master account information;

[0027] Use the decrypted cloud master account information to construct a database service access connection corresponding to the target vendor;

[0028] By using the database service access connection corresponding to the target vendor, the database service of the target vendor is invoked to obtain a list of database instances of the database to be synchronized by the target vendor;

[0029] Write the information from the database instance list into the database.

[0030] A second aspect of this application provides a cloud database resource processing apparatus, comprising:

[0031] The authentication information acquisition unit is used to acquire the user's authentication information;

[0032] The authentication unit is used to authenticate the user's authentication information.

[0033] The project query unit is used to retrieve the projects that the user has permission to access from the backend database if the user's authentication information passes the authentication, and then return the results to the user.

[0034] The resource query unit is used to respond to the user's project selection operation and query the cloud resource information of the target project belonging to the target database type from the background database; wherein, the target project and the target database type are the project and database type selected by the user, respectively.

[0035] A resource feedback unit is used to feed back the queried cloud resource information to the user.

[0036] The resource information acquisition unit is used to respond to the user's cloud resource selection operation and acquire the address corresponding to the target cloud resource selected by the user and the cloud account information to which the target cloud resource belongs.

[0037] The authorization request unit is used to send an authorization request to the authorization server with the cloud account information to which the target cloud resource belongs as a parameter item, so as to trigger the authorization server to request the return of a security token;

[0038] The concatenation unit is used to concatenate the address corresponding to the target cloud resource with the security token to obtain a passwordless login address, and then send it back to the user; wherein, the passwordless login address is used to access the service corresponding to the target cloud resource without a password.

[0039] Optionally, in the cloud database resource processing apparatus provided above, the target cloud resource includes a target database service and a target database instance, and the resource information acquisition unit includes:

[0040] The access unit is used to send an access request to the cloud resource server where the target database service is located, attempting to access the target database service.

[0041] The address acquisition unit is used to acquire the redirection address returned by the cloud resource server;

[0042] The account information query unit is used to query the cloud account information to which the target database instance belongs from the background database;

[0043] When the splicing unit performs the step of splicing the address corresponding to the target cloud resource with the security token to obtain the passwordless login address, it is used for:

[0044] The redirected address is concatenated with the security token to obtain the passwordless login address.

[0045] Optionally, in the cloud database resource processing apparatus provided above, the authentication unit includes:

[0046] A format verification unit is used to detect whether the user's authentication information conforms to the format requirements;

[0047] The judgment unit is used to determine whether the user's authentication information is correct based on the user information stored in the background database if the user's authentication information is detected to meet the format requirements.

[0048] The determining unit is configured to determine that the user's authentication information has passed authentication if it is determined that the user's authentication information is correct.

[0049] Optionally, the cloud database resource processing device provided above further includes:

[0050] The main account information acquisition unit is used to acquire the cloud main account information of the target vendor;

[0051] A construction unit is used to construct a database service access connection corresponding to the target vendor using the decrypted cloud master account information.

[0052] The calling unit is used to access the database service corresponding to the target vendor by using the database service access connection, and to call the database service of the target vendor to obtain the database instance list of the database to be synchronized by the target vendor;

[0053] The processing unit is used to write the information in the database instance list into the database.

[0054] A third aspect of this application provides an electronic device, comprising:

[0055] Memory and processor;

[0056] The memory is used to store programs;

[0057] The processor is used to execute the program, which, when executed, is specifically used to implement the cloud database resource processing method as described in any of the above.

[0058] A fourth aspect of this application provides a computer storage medium for storing a computer program, which, when executed, implements the cloud database resource processing method as described in any of the preceding claims.

[0059] This application provides a method for processing cloud database resources. It obtains and authenticates user authentication information. If the user's authentication information passes authentication, the method retrieves the items the user is authorized to access from the backend database and presents them to the user for selection. Responding to the user's item selection, the method queries the backend database for cloud resource information belonging to the target database type selected by the user and presents this information to the user. Then, responding to the user's cloud resource selection, the method obtains the address of the target cloud resource and the cloud account information to which the target cloud resource belongs. Using the cloud account information as a parameter, the method sends an authorization request to the authorization server to trigger a request for a security token. The method then concatenates the address of the target cloud resource with the security token to obtain a passwordless login address, which is presented to the user. The user can then directly access the service corresponding to the target cloud resource without a password. This allows for a single login to select any type of database cloud resource and obtain a passwordless login address for access, making cloud resource management more convenient. Attached Figure Description

[0060] To more clearly illustrate the technical solutions in the embodiments of this application or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only embodiments of this application. For those skilled in the art, other drawings can be obtained based on the provided drawings without creative effort.

[0061] Figure 1 This is a schematic diagram illustrating the operation of the cloud database operation and maintenance platform provided in the embodiments of this application;

[0062] Figure 2 A flowchart illustrating a method for processing cloud database resources provided in this application embodiment;

[0063] Figure 3 A flowchart for authenticating user authentication information is provided as an embodiment of this application;

[0064] Figure 4 A flowchart illustrating a method for obtaining the address corresponding to a target cloud resource and the cloud account information to which the target cloud resource belongs, provided in an embodiment of this application;

[0065] Figure 5 A flowchart illustrating a method for synchronizing database resources provided in this application embodiment;

[0066] Figure 6 A schematic diagram of the structure of a cloud database resource processing device provided in an embodiment of this application;

[0067] Figure 7 This is a schematic diagram of the structure of a resource information acquisition unit provided in an embodiment of this application;

[0068] Figure 8 This is a schematic diagram of the structure of an authentication unit provided in an embodiment of this application;

[0069] Figure 9 This is a schematic diagram of the structure of an electronic device provided in an embodiment of this application. Detailed Implementation

[0070] The technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, and not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.

[0071] In this application, relational terms such as "first" and "second" are used merely to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Furthermore, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes said element.

[0072] This application provides a method for processing cloud database resources, which can solve the problem that the management of cloud database resources based on existing technologies is too cumbersome.

[0073] Optionally, in order to implement the cloud database resource processing method provided in this application, this application embodiment provides a cloud database operation and maintenance platform, specifically including a front-end and a back-end.

[0074] Among them, such as Figure 1 As shown, the backend includes a platform server, a backend database, a cloud authorization server, and a cloud resource server.

[0075] The front-end is used to respond to user operations, interact with the platform server, and finally obtain the passwordless login address to access the cloud resource server.

[0076] Specifically, such as Figure 1 As shown, the front-end sends a login request to the platform server for authentication. Upon successful authentication, it receives user project permissions from the platform server, which the user can then select. Next, it sends the user's selected project and database type to the platform server to obtain corresponding cloud resources for the user to choose from. Subsequently, it sends the user-selected cloud resources to the platform server to obtain the passwordless login address for the corresponding cloud resource server. Finally, it uses the passwordless login address to access the corresponding cloud resource server and obtain the selected cloud resource.

[0077] The platform server is mainly used to respond to requests and information sent by the front end. It interacts with the backend database, cloud authorization server, and cloud resource server to return corresponding information to the front end.

[0078] Specifically, as in Figure 1 As shown, login requests are authenticated using user information stored in the backend database. Upon successful authentication, subsequent user project permissions are retrieved from the backend database and fed back to the frontend. When the frontend selects a project and database type, the corresponding source resource from the backend server is retrieved and fed back to the frontend. When the frontend receives a user-selected cloud resource, the corresponding cloud resource server is accessed to obtain its redirection address. Then, the cloud account information for that cloud resource server is retrieved from the backend database and used as a parameter to send a request to the cloud authorization server to obtain a security token. Finally, the redirection address and the security token are concatenated to obtain the passwordless login address, which is then fed back to the frontend.

[0079] The backend database is primarily used to store information needed during maintenance, such as user information and cloud account information. Optionally, MySQL can be used as the specific database.

[0080] The cloud authorization server is mainly used to return the corresponding historical security token when it receives an authorization request from the platform server.

[0081] Cloud resource servers are used to provide cloud resources, and users can access cloud resources on the cloud resource server through a passwordless login address via the front end.

[0082] Based on the cloud database operation and maintenance platform provided above, this application embodiment provides a method for processing cloud database resources, applied to the platform server. For example... Figure 2 As shown in the figure, an embodiment of this application provides a method for processing cloud database resources, including the following steps:

[0083] S201. Obtain the user's authentication information and authenticate the user's authentication information.

[0084] Specifically, the authentication information may include the user's account and password.

[0085] Specifically, when a user registers, their account and password can be saved to the backend database. Therefore, when a user needs to log in to the operations and maintenance platform, they enter the corresponding authentication information. At this time, the platform server obtains the user's authentication information and uses the account and password of each user stored in the backend database to authenticate the currently obtained user's authentication information.

[0086] Optionally, in the embodiments of this application, one method for authenticating user authentication information is as follows: Figure 3 As shown, it includes:

[0087] S301. Check whether the user's authentication information meets the format requirements.

[0088] In this embodiment of the application, in order to avoid unnecessary workload, the format of the user's authentication information is first checked to see if it meets the format requirements. Step S302 is only executed when the user's authentication information is found to meet the format requirements.

[0089] Optionally, if the user's authentication information is detected to be inconsistent with the format requirements, a prompt message indicating a format problem can be sent to the user through the front end.

[0090] S302. Based on the user information stored in the backend database, determine whether the user's authentication information is correct.

[0091] Specifically, the system queries the backend database for information that matches the user's authentication information. If information matching the user's authentication information is found, the user's authentication information is determined to be correct, and step S303 is executed. If no information matching the user's authentication information is found, the user's authentication information is determined to be incorrect.

[0092] S303. Verify that the user's authentication information has been authenticated.

[0093] S202. Determine whether the user's authentication information has passed the authentication process.

[0094] If it is determined that the user's authentication information has passed the authentication, then step S203 is executed.

[0095] S203. Retrieve the items that the user has permission to access from the backend database and provide feedback to the user.

[0096] Specifically, the system retrieves information about the various projects that the user has permission to access from the backend database, and then feeds this information back to the frontend, providing it to the user for selection through the frontend user interface.

[0097] S204. In response to the user's project selection operation, retrieve the cloud resource information of the target project belonging to the target database type from the backend database.

[0098] The target project and the target database type are the project and database type selected by the user, respectively.

[0099] It's important to note that along with providing projects for users to choose from, the system also offers corresponding selectable database types. Once the user selects a project and database type, the selected project is designated as the target project, and the selected database type is designated as the target database type. Then, the system queries the resource table for the target database type from the backend database and identifies the cloud resource information belonging to project A from that table. For example, if the user selects project A and a relational database, the system returns the cloud resource information for the relational database of project A.

[0100] S205. Feedback the retrieved cloud resource information to the user.

[0101] Specifically, the retrieved cloud resource information is fed back to the front end, which then presents the cloud resource information to the user through the user interface for selection.

[0102] S206. Respond to the user's cloud resource selection operation, and obtain the address corresponding to the target cloud resource selected by the user and the cloud account information to which the target cloud resource belongs.

[0103] Among them, the address corresponding to the target cloud resource is the address of the target resource in the cloud resource server.

[0104] Based on prior records, obtain the address of the target cloud resource betting, and query the cloud account information of the target cloud resource from the background database.

[0105] Optionally, the cloud account information can be an AccessKey ID and an AccessKey Secret.

[0106] Optionally, in another embodiment of this application, the target cloud resource includes a target database service and a target database instance. In this embodiment, the specific implementation of step S206 is as follows: Figure 4 As shown, it includes:

[0107] S401. Send an access request to the cloud resource server where the target database service is located to attempt to access the target database service.

[0108] It should be noted that, in this embodiment of the application, the cloud resources selected by the user include database services and database instances.

[0109] Since the address of the target database service saved may not be its current address on the cloud resource server, it is necessary to access the target database server on the cloud resource server through the view. At this time, the cloud resource server will return a redirect address (url).

[0110] S402. Obtain the redirect address returned by the cloud resource server.

[0111] S403. Retrieve the cloud account information to which the target database instance belongs from the backend database.

[0112] It should be noted that, since the address corresponding to the target cloud resource obtained in this embodiment is a redirect address, step S208 in this embodiment is as follows:

[0113] The redirected address is concatenated with the security token to obtain the passwordless login address.

[0114] S207. Send an authorization request to the authorization server with the cloud account information to which the target cloud resource belongs as a parameter, so as to trigger the authorization server to request the return of a security token.

[0115] Optionally, the cloud account information stored in the backend database can be encrypted to ensure its security. Therefore, after obtaining the cloud account information, it needs to be decrypted first, and then the decrypted cloud account information is used as a parameter to initiate an authorization request to the cloud authorization server. At this time, the login service in the authorization server will return a temporary security token.

[0116] S208. Concatenate the address corresponding to the target cloud resource with the security token to obtain the passwordless login address and send it back to the user.

[0117] The passwordless login address is used to access the services corresponding to the target cloud resources without a password.

[0118] Since a security token has already been obtained, the address obtained by concatenating the security token with the address corresponding to the target cloud resource contains the security token. Therefore, access can be made without a password using this address. After obtaining the passwordless login address, it is sent to the front end for the user to access directly to the target cloud resource.

[0119] Optionally, in another embodiment of this application, a method for synchronizing database resources may be further included, specifically as follows: Figure 5 As shown, it includes the following steps:

[0120] S501. Obtain the target vendor's cloud master account information.

[0121] Optionally, a scheduled task can be used to synchronize database resources to the platform's backend database daily, enabling the entry and updating of cloud resource information. Specifically, a scheduled task can be initiated, which will then launch multiple threads to synchronize resources. Each cloud vendor's database type corresponds to one thread, with each cloud vendor designated as the target vendor, and the corresponding thread executing this method.

[0122] Specifically, obtain the cloud master account information for the target scenario, which may include AccessKey ID and AccessKey Secret.

[0123] S502. Use the decrypted cloud master account information to construct a database service access connection corresponding to the target vendor.

[0124] Specifically, since cloud master account information is usually stored encrypted, it needs to be decrypted, and then the decrypted cloud master account information is used to construct the corresponding database service access connection. For example, if accessing an RDS database, the corresponding RDS SDK client is constructed.

[0125] S503. Access the database service corresponding to the target vendor by calling the database service of the target vendor to obtain the database instance list of the database to be synchronized by the target vendor.

[0126] Specifically, the system invokes the target vendor's database service and retrieves a list of database instances to be synchronized. This list includes instance information, project details, and the corresponding cloud account identifier.

[0127] S504. Write the information from the database instance list into the database.

[0128] Specifically, depending on how the cloud instance is assigned to a resource group, the project to which the instance belongs will be determined, and the information will be stored under the corresponding project.

[0129] This application provides a method for processing cloud database resources. It obtains and authenticates user authentication information. If the user's authentication information passes authentication, the method retrieves the items the user has permission to access from the backend database and presents them to the user for selection. Responding to the user's item selection operation, the method queries the backend database for cloud resource information belonging to the target database type selected by the user and presents this information to the user. Then, responding to the user's cloud resource selection operation, the method obtains the address of the target cloud resource selected by the user and the cloud account information to which the target cloud resource belongs. Using the cloud account information as a parameter, the method sends an authorization request to the authorization server to trigger a request for a security token. The method then concatenates the address of the target cloud resource with the security token to obtain a passwordless login address, which is presented to the user. The user can then directly access the service corresponding to the target cloud resource without a password. This allows for a single login to select any type of database cloud resource and obtain a passwordless login address for access, making cloud resource management more convenient.

[0130] Another embodiment of this application provides a cloud database resource processing apparatus, such as... Figure 6 As shown, it includes:

[0131] The authentication information acquisition unit 601 is used to acquire the user's authentication information.

[0132] The authentication unit 602 is used to authenticate the user's authentication information.

[0133] Project query unit 603 is used to retrieve the projects that the user has permission to access from the backend database if the user's authentication information passes the authentication, and then return the results to the user.

[0134] Resource query unit 604 is used to respond to the user's project selection operation and query the cloud resource information of the target project belonging to the target database type from the background database.

[0135] Among them, the target project and the target database type are the project and database type selected by the user, respectively.

[0136] Resource feedback unit 605 is used to provide the user with the queried cloud resource information.

[0137] The resource information acquisition unit 606 is used to respond to the user's cloud resource selection operation and acquire the address corresponding to the target cloud resource selected by the user and the cloud account information to which the target cloud resource belongs.

[0138] The authorization request unit 607 is used to send an authorization request to the authorization server with the cloud account information to which the target cloud resource belongs as a parameter, so as to trigger the authorization server to request the return of a security token.

[0139] The splicing unit 608 is used to splice the address corresponding to the target cloud resource with the security token to obtain a passwordless login address, which is then sent back to the user. This passwordless login address is used for passwordless access to the services corresponding to the target cloud resource.

[0140] Optionally, in another embodiment of the cloud database resource processing apparatus provided in this application, the target cloud resource includes a target database service and a target database instance. The resource information acquisition unit in the embodiments of this application, such as... Figure 7 As shown, it includes:

[0141] Access unit 701 is used to send an access request to the cloud resource server where the target database service is located, attempting to access the target database service.

[0142] Address acquisition unit 702 is used to acquire the redirection address returned by the cloud resource server.

[0143] The account information query unit 703 is used to query the cloud account information to which the target database instance belongs from the backend database.

[0144] In this embodiment, when the splicing unit splices the address corresponding to the target cloud resource with the security token to obtain the passwordless login address, it is used for:

[0145] The redirect address is concatenated with the security token to obtain the passwordless login address.

[0146] Optionally, in another embodiment of the cloud database resource processing apparatus provided in this application, the authentication unit, such as... Figure 8 As shown, it includes:

[0147] The format verification unit 801 is used to check whether the user's authentication information meets the format requirements.

[0148] The judgment unit 802 is used to determine whether the user's authentication information is correct based on the user information stored in the background database if the user's authentication information is detected to meet the format requirements.

[0149] The determining unit 803 is used to determine that the user's authentication information has passed authentication if it is determined that the user's authentication information is correct.

[0150] Optionally, in another embodiment of the cloud database resource processing apparatus provided in this application, the apparatus further includes:

[0151] The main account information acquisition unit is used to obtain the cloud main account information of the target vendor.

[0152] The building unit is used to construct a database service access connection for the target vendor using the decrypted cloud master account information.

[0153] The invocation unit is used to access the database service corresponding to the target vendor, invoke the target vendor's database service, and obtain a list of database instances of the target vendor's database to be synchronized.

[0154] The processing unit is used to write information from the database instance list into the database.

[0155] It should be noted that the specific working process of each unit provided in the above embodiments of this application can be referred to the corresponding steps in the above method embodiments, and will not be repeated here.

[0156] Another embodiment of this application provides an electronic device, such as... Figure 9 As shown, it includes:

[0157] Memory 901 and processor 902.

[0158] The memory 901 is used to store the program.

[0159] The processor 902 is used to execute the program stored in the memory 901, and when the program is executed, it is specifically used to implement the cloud database resource processing method provided in any of the above embodiments.

[0160] Another embodiment of this application provides a computer storage medium for storing a computer program, which, when executed, implements the cloud database resource processing method provided in any of the above embodiments.

[0161] Computer storage media, including both permanent and non-permanent, removable and non-removable media, can store information using any method or technology. Information can be computer-readable instructions, data structures, program modules, or other data. Examples of computer storage media include, but are not limited to, phase-change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technologies, CD-ROM, digital versatile optical disc (DVD) or other optical storage, magnetic tape, magnetic magnetic disk storage or other magnetic storage devices, or any other non-transferable medium that can be used to store information accessible by a computing device. As defined herein, computer-readable media does not include transient computer-readable media, such as modulated data signals and carrier waves.

[0162] Those skilled in the art will further recognize that the units and algorithm steps of the various examples described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of both. To clearly illustrate the interchangeability of hardware and software, the components and steps of the various examples have been generally described in terms of functionality in the foregoing description. Whether these functions are implemented in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.

[0163] The above description of the disclosed embodiments enables those skilled in the art to make or use this application. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of this application. Therefore, this application is not to be limited to the embodiments shown herein, but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A method for processing cloud database resources, characterized in that, include: Obtain the user's authentication information and authenticate the user's authentication information; If the user's authentication information passes the authentication, the system retrieves the items that the user has permission to access from the backend database and sends them back to the user. In response to the user's project selection operation, the cloud resource information of the target project belonging to the target database type is retrieved from the backend database; wherein, the target project and the target database type are the project and database type selected by the user, respectively. The retrieved cloud resource information will be fed back to the user. In response to the user's cloud resource selection operation, the system obtains the target cloud resource selected by the user; the target cloud resource includes a target database service and a target database instance; it sends an access request to the cloud resource server where the target database service is located to attempt to access the target database service; it obtains the redirect address returned by the cloud resource server; and it queries the cloud account information to which the target database instance belongs from the background database. Send an authorization request to the authorization server using the cloud account information to which the target database instance belongs as a parameter, so as to trigger the authorization server to request the return of a security token; The redirection address is concatenated with the security token to obtain a passwordless login address, which is then sent to the user. The passwordless login address is used to access the service corresponding to the target cloud resource without a password.

2. The method according to claim 1, characterized in that, The authentication of the user's authentication information includes: Check whether the user's authentication information meets the format requirements; If the user's authentication information is found to meet the format requirements, then the user's authentication information is judged to be correct based on the user information stored in the background database. If the user's authentication information is determined to be correct, then the user's authentication information is deemed to have passed authentication.

3. The method according to claim 1, characterized in that, Also includes: Obtain the target vendor's cloud master account information; Use the decrypted cloud master account information to construct a database service access connection corresponding to the target vendor; By using the database service access connection corresponding to the target vendor, the database service of the target vendor is invoked to obtain a list of database instances of the database to be synchronized by the target vendor; Write the information from the database instance list into the database.

4. A cloud database resource processing device, characterized in that, include: The authentication information acquisition unit is used to acquire the user's authentication information; The authentication unit is used to authenticate the user's authentication information. The project query unit is used to retrieve the projects that the user has permission to access from the background database and return them to the user if the user's authentication information passes the authentication. The resource query unit is used to respond to the user's project selection operation and query the cloud resource information of the target project belonging to the target database type from the background database; wherein, the target project and the target database type are the project and database type selected by the user, respectively. A resource feedback unit is used to feed back the queried cloud resource information to the user. The resource information acquisition unit includes: an access unit, an address acquisition unit, and an account information query unit; The access unit is used to respond to the user's cloud resource selection operation, obtain the target cloud resource selected by the user; the target cloud resource includes a target database service and a target database instance; and send an access request to the cloud resource server where the target database service is located to attempt to access the target database service. The address acquisition unit is used to acquire the redirection address returned by the cloud resource server; The account information query unit is used to query the cloud account information to which the target database instance belongs from the background database; The authorization request unit is used to send an authorization request to the authorization server with the cloud account information to which the target database instance belongs as a parameter, so as to trigger the authorization server to request the return of a security token; The concatenation unit is used to concatenate the redirection address with the security token to obtain a passwordless login address, and then send it back to the user; wherein, the passwordless login address is used to access the service corresponding to the target cloud resource without a password.

5. The apparatus according to claim 4, characterized in that, The authentication unit includes: A format verification unit is used to detect whether the user's authentication information conforms to the format requirements; The judgment unit is used to determine whether the user's authentication information is correct based on the user information stored in the background database if the user's authentication information is detected to meet the format requirements. The determining unit is configured to determine that the user's authentication information has passed authentication if it is determined that the user's authentication information is correct.

6. The apparatus according to claim 4, characterized in that, Also includes: The main account information acquisition unit is used to acquire the cloud main account information of the target vendor; A construction unit is used to construct a database service access connection corresponding to the target vendor using the decrypted cloud master account information. The calling unit is used to access the database service corresponding to the target vendor by using the database service access connection, and to call the database service of the target vendor to obtain the database instance list of the database to be synchronized by the target vendor; The processing unit is used to write the information in the database instance list into the database.

7. An electronic device, characterized in that, include: Memory and processor; The memory is used to store programs; The processor is used to execute the program, which, when executed, is specifically used to implement the cloud database resource processing method as described in any one of claims 1 to 3.

8. A computer storage medium, characterized in that, Used to store computer programs, which, when executed, are used to implement the cloud database resource processing method as described in any one of claims 1 to 3.

Images