Login method of integrated platform, front-end server and integrated system

Abstract

The invention discloses a login method of an integrated platform, a front-end server and an integrated system, and relates to the technical field of computers. A specific embodiment of the login method comprises the following steps: acquiring and verifying whether a user login request carries an effective first login token or not through a front-end parent site; logging in the front-end parent site under the condition that the request verification is passed; the front-end parent site distributes second login tokens to the front-end sub-sites, so that the front-end sub-sites log in according to the second login tokens; under the condition that the request verification is not passed, the user login request is redirected to the login authentication system, so that the login authentication system verifies the user identity; and under the condition that the identity verification is passed, the first login token is acquired through the front-end parent site, and the second login token is acquired through the front-end sub-site, so that the front-end sub-site logs in according to the second login token. According to the embodiment, the evaluation efficiency is improved, and the user experience is improved.

Description

Technical Field

[0001] The present invention relates to the field of computer technology, and in particular to a login method for an integrated platform, a front-end server and an integrated system. Background Art

[0002] In the process of system evaluation, multiple evaluation tool components are usually used. For example, in the evaluation of blockchain systems, different evaluation tool components are usually used for evaluation of multiple levels such as applications, contracts, and consensus mechanisms.

[0003] Different evaluation tool components have different front-end and back-end technical architectures and user login systems, which requires users to log in to multiple evaluation tool components required for the evaluation one by one according to the evaluation requirements when conducting system evaluation, which reduces system evaluation efficiency and user experience. Summary of the invention

[0004] In view of this, the embodiment of the present invention provides a login method, a front-end server and an integrated system for an integrated platform. The front-end subsites corresponding to multiple evaluation tool components and the front-end parent site corresponding to the integrated platform are integrated in the front-end server through an embedded framework, thereby integrating the front-ends of multiple evaluation tool components into the front-end server of the integrated platform. After obtaining the user login request through the front-end parent site, it can be verified whether the user login request carries a valid first login token. If the verification is successful, the front-end parent site can be logged in, and the corresponding second login tokens can be distributed to multiple front-end subsites, so that the front-end subsites can log in according to the second login token; if the user login request is not passed, the user identity can be verified through the login authentication system and then the first login token can be sent to the front-end parent site, so that the front-end parent site and the front-end subsite can also log in according to the first login token and the second login token respectively. Therefore, the user only needs to initiate a user login request once to log in to the front-end parent site and multiple front-end subsites simultaneously, without having to log in to different evaluation tool components one by one, thereby improving the evaluation efficiency and also helping to improve the user experience.

[0005] To achieve the above-mentioned purpose, according to one aspect of an embodiment of the present invention, a login method for an integrated platform is provided, which is applied to a front-end server of the integrated platform, wherein the front-end server includes a front-end parent site corresponding to the integrated platform and front-end sub-sites corresponding to a plurality of evaluation tool components, wherein the front-end parent site and the front-end sub-sites are integrated in the front-end server through an embedded frame; the method includes:

[0006] Obtain the user login request through the front-end parent site and verify whether the user login request carries a valid first login token;

[0007] If the user login request is verified, log in to the front-end parent site, and distribute the second login token corresponding to the first login token to multiple front-end sub-sites through the front-end parent site, so that each front-end sub-site logs in according to the second login token to log in to the evaluation tool component corresponding to the second front-end site;

[0008] If the user login request fails to be verified, redirect the user login request to the login authentication system so that the login authentication system verifies the user identity corresponding to the user login request;

[0009] When the user identity authentication is passed, the first login token is obtained through the front-end parent site, and the user logs in based on the first login token; and the second login token corresponding to the first login token is obtained through the front-end subsite, so that the front-end subsite logs in based on the second login token to log in to the evaluation tool component corresponding to the front-end subsite.

[0010] Optionally, the first login token is sent to the front-end parent site by the login authentication system after the user identity authentication is passed, and the second login token is generated by the front-end parent site according to the registration information of the front-end subsite and the first login token.

[0011] Optionally, the method further comprises: acquiring registration information of the integration platform and the plurality of evaluation tool components through the front-end main site, and sending the registration information to the login authentication system to register the front-end parent site and the front-end sub-site in the login authentication system;

[0012] Logging in according to the second login token includes: sending the second login token to the login authentication system through the front-end subsite, so that the login authentication system verifies the second login token according to the registration information; if the verification is successful, allowing the front-end subsite to log in.

[0013] Optionally, the method also includes: obtaining a user logout request through the front-end parent site, and sending the user logout request to a login authentication system, so that the login authentication system sets the first login token and / or second login token corresponding to the user logout request to a logout state; the front-end parent node and the front-end subnode log out according to the logout state.

[0014] Optionally, the second login token corresponding to the first login token is distributed to multiple front-end subsites respectively through the front-end parent site, including: obtaining a user permission list from the integration backend corresponding to the integration platform through the front-end parent site; determining the target front-end subsite corresponding to the user login request according to the user permission list; generating a second login token corresponding to the target front-end subsite, and sending the second login token to the target front-end subsite.

[0015] To achieve the above object, according to a second aspect of an embodiment of the present invention, there is provided a front-end server of an integrated platform, comprising: a front-end parent site corresponding to the integrated platform and front-end sub-sites corresponding to a plurality of evaluation tool components respectively;

[0016] The front-end parent site and the front-end sub-site are integrated in the front-end server through an embedded frame;

[0017] The front-end parent site is configured as follows: obtaining a user login request and verifying whether the user login request carries a valid first login token; logging in if the user login request is verified successfully; redirecting the user login request to a login authentication system if the user login request is not verified successfully, so that the login authentication system authenticates the user identity corresponding to the user login request; obtaining the first login token if the identity authentication is successful, and logging in according to the first login token;

[0018] The front-end subsite is configured to obtain a second login token corresponding to the first login token, and log in according to the second login token to log in to the evaluation tool component corresponding to the front-end subsite.

[0019] To achieve the above-mentioned purpose, according to the third aspect of an embodiment of the present invention, an integrated system is provided, comprising: a front-end server and a login authentication system provided in the above-mentioned second aspect; wherein the login authentication system is configured to: verify the user identity according to the user login request, and if the user identity authentication is passed, send a first login token to the front-end parent site in the front-end server; upon receiving a second login token sent by the front-end subsite in the front-end server, verify the second login token according to the registration information of the front-end subsite, and allow the front-end subsite to log in if the verification is passed.

[0020] Optionally, the integrated system further includes: an integrated backend corresponding to the front-end parent site, and an evaluation backend corresponding to the front-end subsite; wherein,

[0021] The integrated backend is configured as follows: according to the request of the front-end parent site, a user permission list is sent to the front-end parent site;

[0022] The evaluation backend is configured as follows: perform evaluation according to the evaluation request sent by the front-end subsite, and feed back the evaluation result to the front-end server.

[0023] To achieve the above-mentioned purpose, according to another aspect of an embodiment of the present invention, a server for a login integration platform is provided, the server comprising: a processor; a memory for storing processor executable instructions, wherein the processor is configured to execute the instructions to implement a login method of an embodiment of the present invention.

[0024] To achieve the above-mentioned purpose, according to another aspect of an embodiment of the present invention, a computer-readable storage medium is provided. When the instructions in the computer-readable storage medium are executed by the processor of the server of the login integration platform, the server of the login integration platform can execute a login method of an embodiment of the present invention.

[0025] One embodiment of the above invention has the following advantages or beneficial effects: the front-end subsites corresponding to multiple evaluation tool components and the front-end parent site corresponding to the integrated platform are integrated in the front-end server through the embedded framework, thereby integrating the front-ends of multiple evaluation tool components into the front-end server of the integrated platform. After obtaining the user login request through the front-end parent site, it can be verified whether the user login request carries a valid first login token. If the verification is successful, the front-end parent site can be logged in, and the corresponding second login tokens can be distributed to multiple front-end subsites, so that the front-end subsites can log in according to the second login token; if the user login request is not passed, the user identity can be verified through the login authentication system and then the first login token can be sent to the front-end parent site, so that the front-end parent site and the front-end subsite can also log in according to the first login token and the second login token respectively. Therefore, the user only needs to initiate a user login request once to log in to the front-end parent site and multiple front-end subsites simultaneously, without having to log in to different evaluation tool components one by one, thereby improving the evaluation efficiency and also helping to improve the user experience.

[0026] The further effects of the above-mentioned non-conventional optional manner will be described below in conjunction with the specific implementation manner. BRIEF DESCRIPTION OF THE DRAWINGS

[0027] The accompanying drawings are used to better understand the present invention and do not constitute an improper limitation of the present invention.

[0028] Figure 1 It is a schematic diagram of main modules of an integrated system provided by an embodiment of the present invention;

[0029] Figure 2 It is a flowchart of a login method for an integrated platform provided by an embodiment of the present invention;

[0030] Figure 3 It is a flowchart of another integrated platform login method provided by an embodiment of the present invention;

[0031] Figure 4 It is a flowchart of a logout method of an integrated platform provided by an embodiment of the present invention;

[0032] Figure 5 is an exemplary system architecture diagram to which embodiments of the present invention may be applied;

[0033] Figure 6It is a schematic diagram of the structure of a computer system of a terminal device or a server suitable for implementing an embodiment of the present invention. DETAILED DESCRIPTION

[0034] The following is a description of exemplary embodiments of the present invention in conjunction with the accompanying drawings, including various details of the embodiments of the present invention to facilitate understanding, which should be considered as merely exemplary. Therefore, it should be recognized by those of ordinary skill in the art that various changes and modifications may be made to the embodiments described herein without departing from the scope and spirit of the present invention. Similarly, for clarity and conciseness, the description of well-known functions and structures is omitted in the following description.

[0035] In order to make those skilled in the art better understand the present disclosure, the following is a detailed description of various embodiments of the present invention in conjunction with the accompanying drawings and specific implementation methods. It should be noted that the embodiments of the present invention and the technical features in the embodiments can be combined with each other without conflict.

[0036] The embodiment of the present invention provides a login method for an integrated platform, which can be applied to a front-end server of the integrated platform, such as Figure 1 As shown, the front-end server includes a front-end parent site corresponding to the integration platform and front-end sub-sites corresponding to multiple evaluation tool components, such as front-end sub-site a corresponding to evaluation tool component a and front-end sub-site b corresponding to evaluation tool component b. The front-end parent site and the front-end sub-site are integrated in the front-end server through an embedded frame. The login method may include the following: Figure 2 Steps shown:

[0037] Step S201: Obtain a user login request through the front-end parent site, and verify whether the user login request carries a valid first login token; if the user login request is successfully verified, execute step S202; if the user login request is not successfully verified, execute step S203.

[0038] Step S202: Log in to the front-end parent site, and distribute the second login token corresponding to the first login token to multiple front-end subsites through the front-end parent site, so that each front-end subsite logs in according to the second login token to log in to the evaluation tool component corresponding to the second front-end site.

[0039] Step S203: redirect the user login request to the login authentication system, so that the login authentication system verifies the user identity corresponding to the user login request; if the user identity authentication passes, execute step S204; if the user identity authentication fails, the login is rejected.

[0040] Step S204: obtain a first login token through the front-end parent site and log in according to the first login token; and obtain a second login token corresponding to the first login token through the front-end subsite, so that the front-end subsite logs in according to the second login token to log in to the evaluation tool component corresponding to the second front-end site.

[0041] In an embodiment of the present invention, the front-end pages of different evaluation tool components and the front-end pages of the integrated platform can be embedded in the front-end server of the integrated platform through an embedded frame (iframe), wherein the front-end of the integrated platform serves as the iframe parent site, and the front-end of the evaluation tool component is embedded in the parent site as an iframe child site, thereby realizing the front-end integration of the integrated platform and each evaluation tool component, that is, the front-end page of each evaluation tool component can be displayed through the front-end page of the integrated platform, thereby realizing the front-end display integration. In addition, the back-end sites corresponding to each evaluation tool component can be deployed in one domain or in different domains. For example, for evaluation tool components developed by different companies, their back-end sites (such as Figure 1 The evaluation backend a and the evaluation backend b) in the embodiment can be deployed in different enterprise clouds respectively. Therefore, the embodiment of the present invention integrates the frontends of various evaluation tool components without processing and integrating the backends of different technical architectures. This saves the construction cost of the integration platform on the one hand, and helps to avoid security and consistency issues caused by integrating the backends of multiple heterogeneous evaluation tools on the other hand.

[0042] In order to facilitate the verification of the login process, the integrated platform and each evaluation tool component can be registered in advance. In one embodiment of the present invention, the registration information of the integrated platform and multiple evaluation tool components can be obtained through the front-end parent site, and the registration information can be sent to the login authentication system to register the front-end parent site and the front-end subsite in the login authentication system. In another embodiment of the present invention, the administrator user can also directly enter the registration information of the integrated platform and each evaluation tool component in the front-end page of the login authentication system to register the integrated platform and multiple evaluation tool components in the login authentication system. Thus, after receiving the user login request, the login authentication system can verify the user identity according to the registration information, and then generate a corresponding login token according to the registration information after the verification is passed.

[0043] Among them, the registration information includes information such as application name, application domain name, application validity period, authentication method (such as single-point authentication method), access address, exit address and token status. Since the integrated platform and the evaluation tool components are registered in the login authentication system, the access address and exit address in the registration information can be the access address of the login authentication system, so when the login to the integrated platform fails or the integrated platform is exited, the front-end page of the integrated platform can be directly jumped to the page of the login authentication system. For example, if the front-end main site verifies that the user login request does not carry a valid first login token, it can jump to the page of the login authentication system according to the access address. The user can enter user information such as user name and user password on the page of the login authentication system, so that the login authentication system authenticates the user according to the user information, generates the first login token after the authentication is successful, and returns the first login token and user information to the front-end server, so that the user can log in to the front-end main site. In addition, the front-end server can also cache the user information and the first login token so that it can be verified according to the cached information when the user login request is received next time. Furthermore, the front-end parent site may communicate with a plurality of front-end sub-sites respectively to transfer the corresponding second login token and user information to the front-end sub-sites.

[0044] Exemplarily, during the user login process, the user can initiate a user login request to the front-end parent site through a browser. For example, if the user enters the access address of the integrated platform (such as www.a.com) in the browser, the user login request can be initiated to the front-end parent site. The front-end parent site can verify the current login request by verifying whether the user login request carries a valid first login token. Specifically, the front-end parent site verifies whether the user login request carries the first login token. If the user login request does not carry the first login token, the user login request is redirected to the login authentication system; if the user login request carries the first login token, it is necessary to further verify whether the first login token is valid. If the first login token carried in the user login request is invalid, the user login request is also redirected to the login authentication system. Exemplarily, if the user visits the integrated platform again within the token validity period, the user login request initiated by the user can carry a valid first login token. In this case, the front-end parent site can determine that the user login request is verified, and the user can successfully log in to the front-end server. Then the front-end parent site distributes the second login token to the front-end sub-sites respectively, so that the front-end sub-sites can log in to the corresponding evaluation tool components through the second login token. For another example, if a user logs in to the integrated platform for the first time, the user login request initiated by the user will not carry the first login token. In this case, the user login request can be redirected to the login authentication system. Then the user can fill in the user information such as the user name and password on the front-end page of the login authentication system, so that the login authentication system verifies the user's identity according to the user name and password. After the verification is passed, the first login token is generated, and the first login token and user information are returned to the front-end parent site, so that the user can log in to the front-end parent site.

[0045] It is understandable that if the login authentication system determines that the user identity has not been verified in step S203, the user login is rejected, thereby ensuring the security of the system. In addition, after the login authentication system determines that the user identity authentication has passed in step S203, the first login token can be sent to the front-end parent site through the login authentication system. After receiving the first login token, the front-end parent site can generate the second login tokens corresponding to each front-end subsite according to the registration information of the front-end subsite and the first login token, and then the front-end parent site distributes the second login token to the corresponding front-end subsite, so that the front-end subsite can obtain the corresponding second login token, thereby logging in to the evaluation tool component corresponding to the front-end subsite. In other words, in this case, the first login token is sent to the front-end parent site by the login authentication system after the user identity authentication passes, and the second login token is generated by the front-end parent site according to the registration information of the front-end subsite and the first login token. In addition, after the login authentication system determines that the user identity authentication has passed, the first login token can also be distributed directly to the front-end parent site and the second login token to the front-end subsite through the login authentication system. That is, the login authentication system can generate a corresponding second login token according to the registration information of the evaluation tool component, and distribute the second login token to the corresponding front-end subsite, so that the front-end subsite can use the second login token to log in. In other words, the second login token can also be sent directly to the front-end subsite by the login authentication system.

[0046] Among them, the first login token and the second login token can be the same or different. Exemplarily, the front-end parent site can distribute the first login token directly to each front-end subsite, in which case the first login token and the second login token are the same. Alternatively, the front-end parent site can generate second login tokens corresponding to different evaluation tool components according to the application name, application domain name, application type and other information corresponding to different evaluation tool components, and then distribute the second login tokens to the front-end subsites corresponding to the corresponding evaluation tool components. In this case, since the information corresponding to different evaluation tool components is not exactly the same, the first login token and the login token are different login tokens, that is, the second login token is obtained by modifying the first login token.

[0047] In one embodiment of the present invention, in order to further improve the security of the system, the front-end parent site can determine the front-end subsites that it can access based on the user's permissions to distribute the second login token accordingly. Specifically, after the front-end parent site verifies that the user login request carries a valid first login token or obtains the first login token from the login authentication system, it can obtain the user permission list from the integrated backend corresponding to the integrated platform; determine the target front-end subsite corresponding to the user login request based on the user permission list, then generate the second login token corresponding to the target front-end subsite, and send the second login token to the target front-end subsite.

[0048] For example, some evaluation tool components are only allowed to be accessed by administrators, while some evaluation tool components are allowed to be accessed by all users, that is, the evaluation tool components accessible to different users are different. The embodiment of the present invention can realize the single sign-on of the corresponding front-end subsites based on different user permissions to improve the security of the system. Among them, the user permission list includes multiple registered user information and the front-end subsites that they can access. The front-end subsites that can be accessed in the user permission list can be represented by the identification of the evaluation tool component or the identification of the front-end subsite. After the user logs in to the front-end parent site, the front-end parent site can obtain the user permission list from the integrated back-end corresponding to the integrated platform to determine the target front-end subsite that the user who logs in can access. Then, according to the application name, application domain name, application type and other information corresponding to the target front-end subsite and the first login token, generate the second login tokens corresponding to each target front-end subsite, and distribute each second login token to the target front-end subsite accordingly. Thus, the single sign-on of the corresponding front-end subsite is realized according to the user permissions of different users, which is conducive to hierarchical management of the system and is conducive to improving login security.

[0049] During the login process, the front-end subsite can send the second login token and user information to the login authentication system, and the login authentication system can verify the second login token according to the registration information, such as verifying whether the second login token corresponds to the front-end subsite, verifying whether the status of the second login token is valid, etc. If the verification is passed, the front-end subsite can realize login without username and password. Therefore, the user only needs to enter the username and password once to log in to the integrated platform and multiple evaluation tool components, which not only improves the user experience, but also helps to improve the evaluation efficiency.

[0050] It should be understood that after the user logs in for the first time, if the front-end server subsequently receives a user login request initiated by the same user, the front-end main site can communicate with the front-end subsite after verifying that the first login token is passed, so as to transmit the corresponding second login token and user information to the front-end subsite based on the cached user information and the first login token. The front-end subsite sends the second login token and user information to the login authentication system for verification. If the verification is passed, login without username and password can be achieved. In this process, the front-end subsite sends the second login token and user information to the login authentication system, so that the login authentication system verifies the second login token according to the registration information, and only determines that the login of the front-end subsite is successful if the verification is passed. Therefore, the login authentication system is used to verify again during the login process of the front-end subsite. On the one hand, the system security is improved, and on the other hand, the user is not aware of this process, which is also conducive to improving the user experience.

[0051] In addition, in addition to realizing single sign-on of different evaluation tool components, the embodiment of the present invention also provides a method for simultaneously logging out of multiple evaluation tool components that have been logged in. Specifically, in the embodiment of the present invention, a user logout request can be obtained through the front-end parent site, and the user logout request can be sent to the login authentication system, so that the login authentication system sets the first login token and / or the second login token corresponding to the user logout request to the logout state, and then the front-end parent site and the front-end subsite can log out according to the logout state of the token.

[0052] Among them, if the login authentication system only generates the first login token after the identity authentication is successful, and the front-end subsite distributes the second login token to each front-end subsite according to the first login token, then during the logout process, the login authentication system sets the state of the first login token to the logout state, and the front-end parent site can log out according to the logout state of the first login token. Then, the login authentication system can send a logout request to the front-end subsite according to the logout state of the first login token, and each front-end subsite determines that the corresponding second login token is invalid according to the logout state of the first login token, so that the front-end subsite also logs out. In addition, if the login authentication system generates the first login token corresponding to the front-end main site and the second login token corresponding to each front-end subsite after the identity authentication, then during the logout process, the login authentication system sets both the first login token and the second login token to the logout state. After the first login token is logged out, the front-end parent node is logged out; in addition, the login authentication system sends a logout request to the front-end subsite according to the logout state of the second login token, so that the front-end subsite can log out according to the logout state of the second login token. Therefore, the embodiment of the present invention realizes the login synchronization and logout synchronization of the integrated platform and multiple evaluation tool components without the need for users to initiate login requests and logout requests for the evaluation tool components one by one, which is not only beneficial to improving user experience, but also beneficial to improving evaluation efficiency.

[0053] In addition, based on the same technical concept as the login method of the integrated platform, the embodiment of the present invention also provides a front-end server of the integrated platform, and continues to refer to Figure 1 , which includes a front-end parent site corresponding to the integration platform and front-end sub-sites corresponding to multiple evaluation tool components; the front-end parent site and the front-end sub-sites are integrated in the front-end server through an embedded framework; wherein,

[0054] The front-end parent site is configured to: obtain a user login request, and verify whether the user login request carries a valid first login token; log in if the user login request is verified; and distribute second login tokens corresponding to the first login token to multiple front-end subsites respectively; if the user login request is not verified, redirect the user login request to a login authentication system, so that the login authentication system authenticates the user identity corresponding to the user login request; obtain the first login token if the identity authentication is passed, and log in according to the first login token;

[0055] The front-end subsite is configured to obtain a second login token corresponding to the first login token, and log in according to the second login token to log in to the evaluation tool component corresponding to the front-end subsite.

[0056] In one embodiment of the present invention, the front-end parent site is configured to: receive a first login token sent by the login authentication system after the user identity authentication is passed, and generate a second login token based on the registration information of the front-end sub-site and the first login token, and send the second login token to the front-end sub-site so that the front-end sub-site obtains the second login token.

[0057] In one embodiment of the present invention, the front-end parent site is configured to: obtain registration information of the integrated platform and the plurality of evaluation tool components, and send the registration information to the login authentication system to register the front-end parent site and the front-end subsite in the login authentication system;

[0058] The front-end subsite is configured to: send the second login token to the login authentication system, so that the login authentication system verifies the second login token according to the registration information; if the verification is successful, it is determined that the front-end subsite login is successful.

[0059] In one embodiment of the present invention, the front-end parent site is also configured to: obtain a user logout request, send the user logout request to a login authentication system, so that the login authentication system sets the first login token and / or the second login token corresponding to the user logout request to a logout state; log out according to the logout state; the front-end subsite is also configured to: log out according to the logout state.

[0060] In one embodiment of the present invention, the front-end parent site is configured as follows: obtaining a user permission list from an integrated back-end corresponding to the integrated platform; determining a target front-end subsite corresponding to the user login request based on the user permission list; generating a second login token corresponding to the target front-end subsite, and sending the second login token to the target front-end subsite.

[0061] In addition, the embodiment of the present invention further provides an integrated system, and further reference is made to Figure 1 The integrated system 100 includes a front-end server 101 and a login authentication system 102; wherein,

[0062] The login authentication system 102 is configured to: verify the user identity according to the user login request, and send a first login token to the front-end parent site in the front-end server 101 when the user identity authentication is passed; upon receiving the second login token sent by the front-end subsite in the front-end server 101, verify the second login token according to the registration information of the front-end subsite, and allow the front-end subsite to log in when the verification is passed.

[0063] In one embodiment of the present invention, the integration system 100 further includes: an integration backend 103 corresponding to the frontend parent site, and an evaluation backend 104 corresponding to the frontend subsite; wherein,

[0064] The integrated backend 103 is configured to: send a user authority list to the front-end parent site according to the request of the front-end parent site;

[0065] The evaluation backend 104 is configured to perform evaluation according to the evaluation request sent by the front-end subsite and feed back the evaluation result to the front-end server.

[0066] In this implementation, after the user logs in to the front-end parent site and the front-end subsite in the front-end server, he can access the integrated backend and the evaluation backend through different functional modules of the front-end page according to actual needs. For example, when the evaluation tool component is used to evaluate the blockchain system, it can initiate evaluation requests to the evaluation backends of different evaluation tool components according to the evaluation requirements of different levels of the blockchain system, so that the evaluation backend evaluates the dimensions corresponding to its evaluation tool component according to the evaluation request, and feeds back the evaluation results to the corresponding front-end subsite. The front-end subsite can directly display the evaluation results, or it can send the evaluation results to the integrated backend through the front-end main site, which will be uniformly processed by the integrated backend and then displayed on the front-end page.

[0067] The following takes the integration of multiple evaluation tool components of a blockchain system as an example to illustrate the login method provided by the embodiment of the present invention. In order to achieve single sign-on of multiple heterogeneous evaluation tool components of an evaluation blockchain system, the embodiment of the present invention provides the following: Figure 3 The login method shown is implemented based on an integrated system, which includes a login authentication system, a front-end server integrated with a front-end parent site and a front-end sub-site, and an integrated back-end corresponding to the front-end parent site and an evaluation back-end corresponding to the front-end sub-site. The front-end parent site and the front-end sub-site are integrated through an iframe, and the front-end sub-site corresponds to each evaluation tool component. The login method of the integrated system mainly includes the following steps:

[0068] Step S301: Obtain registration information by logging into the authentication system, and register the front-end parent site and the front-end sub-site according to the registration information.

[0069] During the registration process, users can enter registration information directly on the page of the login authentication system, or they can enter registration information through the page rendered by the front-end main site and send the registration information to the login authentication system through the front-end main site to realize the registration of the integrated platform and evaluation tool components in the login authentication system.

[0070] Step S302: Obtain the user login request through the front-end parent site and verify whether the user login request carries a valid first login token. If the verification is successful, execute step S303; if the verification is not successful, execute step S305.

[0071] Step S303: Log in to the front-end parent site.

[0072] Step S304: Obtain a user permission list from the integrated backend through the front-end parent site, determine the target front-end subsite corresponding to the user login request based on the user permission list, generate a second login token corresponding to the target front-end subsite based on the registration information of the target front-end subsite and the first login token, send the second login token to the target front-end subsite, and execute step S308.

[0073] Step S305: redirecting the user login request to the login authentication system.

[0074] Step S306: Obtain the user name and password through the page of the login authentication system, and verify the user name and password according to the registration information. If the verification is successful, execute step S307; if the verification fails, the login is rejected.

[0075] Step S307: Generate a first login token, and send the first login token and user information to the front-end server, so that the front-end main site executes steps S303 and S304.

[0076] Step S308: The front-end subsite sends the second login token and user information to the login authentication system.

[0077] Step S309: The login authentication system performs identity authentication on the second login token and the user information according to the registration information, and executes step S310 if the identity authentication is successful, otherwise executes step S311.

[0078] Step S310: Allow the front-end subsite to log in, and execute step S312.

[0079] Step S311: Reject the front-end subsite login.

[0080] Step S312: Send an evaluation request to the evaluation backend through the front-end subsite, so that the evaluation backend performs the evaluation and feeds back the evaluation result to the front-end server.

[0081] In addition, if Figure 4 As shown, the embodiment of the present invention provides a method for exiting the above integrated system, which mainly includes the following steps:

[0082] Step S401: Obtain a user logout request through the front-end parent site, and send the user logout request to the login authentication system.

[0083] Step S402: The login authentication system sets the first login token corresponding to the user logout request to a logout state.

[0084] Step S403: The front-end parent site logs out according to the logout status of the first login token.

[0085] Step S404: The login authentication system sends a logout request to the forward subsite according to the logout status of the first login token.

[0086] Step S405: The front-end subsite logs out according to the token logout status indicated by the logout request.

[0087] According to the above embodiment, the front-end subsites corresponding to the multiple evaluation tool components and the front-end parent site corresponding to the integrated platform are integrated in the front-end server through the embedded framework, thereby integrating the front-ends of the multiple evaluation tool components into the front-end server of the integrated platform. After obtaining the user login request through the front-end parent site, it can be verified whether the user login request carries a valid first login token. If the verification is successful, the front-end parent site can be logged in, and the corresponding second login tokens can be distributed to multiple front-end subsites, so that the front-end subsites can log in according to the second login token; if the user login request is not passed, the user identity can be verified through the login authentication system and then the first login token can be sent to the front-end parent site, so that the front-end parent site and the front-end subsite can also log in according to the first login token and the second login token respectively. Therefore, the user only needs to initiate a user login request once to log in to the front-end parent site and multiple front-end subsites simultaneously, without having to log in to different evaluation tool components one by one, thereby improving the evaluation efficiency and also helping to improve the user experience.

[0088] Figure 5 An exemplary system architecture 500 of an integrated platform login method or integrated system to which an embodiment of the present invention may be applied is shown.

[0089] like Figure 5As shown, the system architecture 500 may include terminal devices 501, 502, 503, a network 504, a front-end server 505, and back-end servers 506, 507. The network 504 is used to provide a medium for communication links between the terminal devices 501, 502, 503 and the front-end server 505 and the back-end servers 506, 507. The network 504 may include various connection types, such as wired, wireless communication links or optical fiber cables, etc. A user may use the terminal devices 501, 502, 503 to interact with the front-end server 505 through the network 504 to initiate a request, and the front-end server 505 may forward the request to the back-end servers 506, 507 through the network.

[0090] Various client applications may be installed on the terminal devices 501, 502, and 503, such as shopping applications, payment applications, instant messaging tools, social platform software, etc. The terminal devices 501, 502, and 503 may be various electronic devices with display screens and supporting web browsing, including but not limited to smart phones, tablet computers, laptop computers, and desktop computers, etc.

[0091] It should be understood that Figure 5 The number of terminal devices, networks and servers in the embodiment is only for illustration. Any number of terminal devices, networks and servers may be provided according to implementation requirements.

[0092] Reference below Figure 6 , which shows a schematic diagram of the structure of a computer system 600 of a terminal device suitable for implementing an embodiment of the present invention. Figure 6 The terminal device shown is only an example and should not bring any limitation to the functions and scope of use of the embodiments of the present invention.

[0093] like Figure 6 As shown, the computer system 600 includes a central processing unit (CPU) 601, which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM) 602 or a program loaded from a storage part 608 into a random access memory (RAM) 603. In the RAM 603, various programs and data required for the operation of the system 600 are also stored. The CPU 601, the ROM 602, and the RAM 603 are connected to each other via a bus 604. An input / output (I / O) interface 605 is also connected to the bus 604.

[0094] The following components are connected to the I / O interface 605: an input section 606 including a keyboard, a mouse, etc.; an output section 607 including a cathode ray tube (CRT), a liquid crystal display (LCD), etc., and a speaker, etc.; a storage section 608 including a hard disk, etc.; and a communication section 609 including a network interface card such as a LAN card, a modem, etc. The communication section 609 performs communication processing via a network such as the Internet. A drive 610 is also connected to the I / O interface 605 as needed. A removable medium 611, such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, etc., is installed on the drive 610 as needed, so that a computer program read therefrom is installed into the storage section 608 as needed.

[0095] In particular, according to the embodiments disclosed in the present invention, the process described above with reference to the flowchart can be implemented as a computer software program. For example, the embodiments disclosed in the present invention include a computer program product, which includes a computer program carried on a computer-readable medium, and the computer program includes a program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from the network through the communication part 609, and / or installed from the removable medium 611. When the computer program is executed by the central processing unit (CPU) 601, the above-mentioned functions defined in the system of the present invention are executed.

[0096] It should be noted that the computer-readable medium shown in the present invention may be a computer-readable signal medium or a computer-readable storage medium or any combination of the above two. The computer-readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In the present invention, a computer-readable storage medium may be any tangible medium containing or storing a program that can be used by or in combination with an instruction execution system, device or device. In the present invention, a computer-readable signal medium may include a data signal propagated in a baseband or as part of a carrier wave, which carries a computer-readable program code. This propagated data signal may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above. Computer-readable signal media may also be any computer-readable medium other than computer-readable storage media, which may send, propagate or transmit a program for use by or in conjunction with an instruction execution system, apparatus or device. The program code contained on the computer-readable medium may be transmitted using any appropriate medium, including but not limited to: wireless, wire, optical cable, RF, etc., or any suitable combination of the above.

[0097] The flow chart and block diagram in the accompanying drawings illustrate the possible architecture, function and operation of the system, method and computer program product according to various embodiments of the present invention. In this regard, each box in the flow chart or block diagram can represent a module, a program segment, or a part of a code, and the above-mentioned module, program segment, or a part of a code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in a different order from the order marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram or flow chart, and the combination of the boxes in the block diagram or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0098] The modules involved in the embodiments of the present invention may be implemented in software or hardware. The described system may also be set in a processor, for example, it may be described as: a processor includes a front-end parent site and a front-end sub-site. The names of these sites do not constitute a limitation on the system itself in some cases, for example, the front-end parent site may also be described as a "front-end site corresponding to the integrated platform".

[0099] As another aspect, the present invention also provides a computer-readable medium, which may be included in the device described in the above embodiment; or it may exist independently and not be assembled into the device. The above computer-readable medium carries one or more programs, and when the above one or more programs are executed by a device, the device includes: obtaining a user login request through the front-end parent site, and verifying whether the user login request carries a valid first login token; if the user login request is verified, log in to the front-end parent site, and distribute the second login token corresponding to the first login token to multiple front-end subsites through the front-end parent site, so that each front-end subsite logs in according to the second login token to log in to the evaluation tool component corresponding to the second front-end site; if the user login request is not verified, redirect the user login request to the login authentication system, so that the login authentication system verifies the user identity corresponding to the user login request; if the user identity verification is passed, obtain the first login token through the front-end parent site, obtain the second login token through the front-end subsite, so that the front-end subsite logs in according to the second login token to log in to the evaluation tool component corresponding to the front-end subsite.

[0100] According to the technical solution of the embodiment of the present invention, the front-end subsites corresponding to the multiple evaluation tool components and the front-end parent site corresponding to the integrated platform are integrated in the front-end server through the embedded framework, thereby integrating the front-ends of the multiple evaluation tool components into the front-end server of the integrated platform. After obtaining the user login request through the front-end parent site, it can be verified whether the user login request carries a valid first login token. If the verification is successful, the front-end parent site can be logged in, and the corresponding second login tokens can be distributed to multiple front-end subsites, so that the front-end subsites can log in according to the second login token; if the user login request is not passed, the user identity can be verified through the login authentication system and then the first login token can be sent to the front-end parent site, so that the front-end parent site and the front-end subsite can also log in according to the first login token and the second login token respectively. Therefore, the user only needs to initiate a user login request once to log in to the front-end parent site and multiple front-end subsites simultaneously, without having to log in to different evaluation tool components one by one, thereby improving the evaluation efficiency and also helping to improve the user experience.

[0101] The above specific implementations do not constitute a limitation on the protection scope of the present invention. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions may occur depending on design requirements and other factors. Any modification, equivalent substitution and improvement made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A method for logging into an integrated platform, characterized in that: A front-end server applied to an integrated platform, the front-end server comprising a front-end parent site corresponding to the integrated platform and front-end sub-sites corresponding to a plurality of evaluation tool components, the front-end parent site and the front-end sub-sites being integrated into the front-end server via an embedded framework; comprising: Obtaining a user login request through the front-end parent site, and verifying whether the user login request carries a valid first login token; If the user login request is verified, log in to the front-end parent site, and distribute second login tokens corresponding to the first login token to the multiple front-end sub-sites through the front-end parent site, so that each front-end sub-site logs in according to the second login token to log in to the evaluation tool component corresponding to the second front-end site; If the user login request fails to be verified, redirecting the user login request to a login authentication system so that the login authentication system verifies the user identity corresponding to the user login request; When the user identity authentication is passed, the first login token is obtained through the front-end parent site, and login is performed based on the first login token; and the second login token corresponding to the first login token is obtained through the front-end sub-site, so that the front-end sub-site logs in based on the second login token to log in to the evaluation tool component corresponding to the front-end sub-site.

2. The method according to claim 1, characterized in that The first login token is sent by the login authentication system to the front-end parent site after the user identity authentication is passed, and the second login token is generated by the front-end parent site according to the registration information of the front-end sub-site and the first login token.

3. The method according to claim 2, characterized in that Also includes: Acquire the registration information of the integrated platform and the plurality of evaluation tool components through the front-end main site, and send the registration information to the login authentication system to register the front-end parent site and the front-end sub-site in the login authentication system; The logging in according to the second login token includes: Sending the second login token to the login authentication system through the front-end subsite, so that the login authentication system verifies the second login token according to the registration information; If the verification is successful, the front-end subsite is allowed to log in.

4. The method according to claim 2, characterized in that: Also includes: Obtaining a user logout request through the front-end parent site, and sending the user logout request to the login authentication system, so that the login authentication system sets the first login token and / or the second login token corresponding to the user logout request to a logout state; The front-end parent node and the front-end sub-node log out according to the logout status.

5. The method according to claim 1, characterized in that The distributing the second login token corresponding to the first login token to the plurality of front-end sub-sites respectively through the front-end parent site includes: Obtaining a user authority list from the integration backend corresponding to the integration platform through the front-end parent site; Determine the target front-end subsite corresponding to the user login request according to the user authority list; A second login token corresponding to the target front-end subsite is generated, and the second login token is sent to the target front-end subsite.

6. A front-end server of an integrated platform, characterized in that: include: A front-end parent site corresponding to the integrated platform and front-end sub-sites corresponding to the plurality of evaluation tool components; The front-end parent site and the front-end sub-site are integrated into the front-end server through an embedded frame; wherein, The front-end parent site is configured to: obtain a user login request and verify whether the user login request carries a valid first login token; log in if the user login request is verified, and distribute second login tokens corresponding to the first login token to the multiple front-end subsites respectively; redirect the user login request to a login authentication system if the user login request is not verified, so that the login authentication system authenticates the user identity corresponding to the user login request; obtain the first login token if the identity authentication is passed, and log in according to the first login token; The front-end subsite is configured to obtain a second login token corresponding to the first login token, and log in according to the second login token to log in to the evaluation tool component corresponding to the front-end subsite.

7. An integrated system, characterized in that: include: The front-end server and login authentication system as described in claim 6; wherein, The login authentication system is configured to: verify the user identity according to the user login request, and send a first login token to the front-end parent site in the front-end server if the user identity authentication is passed; When receiving a second login token sent by a front-end subsite in the front-end server, the second login token is verified according to the registration information of the front-end subsite, and the front-end subsite is allowed to log in if the verification passes.

8. The integrated system according to claim 7, characterized in that: Also includes: An integration backend corresponding to the front-end parent site, and an evaluation backend corresponding to the front-end subsite; wherein, The integrated backend is configured to: send a user authority list to the front-end parent site according to a request of the front-end parent site; The evaluation backend is configured to perform evaluation according to the evaluation request sent by the front-end subsite, and feed back the evaluation result to the front-end server.

9. A server for logging into an integrated platform, characterized in that: include: processor; a memory for storing instructions executable by the processor; The processor is configured to execute the instructions to implement the login method as described in any one of claims 1-5.

10. A computer-readable storage medium, when the instructions in the computer-readable storage medium are executed by a processor of a server of a login integration platform, the server of the login integration platform can execute the login method according to any one of claims 1 to 5.

Images