A login method of an integrated platform, a front-end server and an integrated system
By integrating a unified login method for evaluation tool components into the front-end server, the problem of users having to log in to multiple evaluation tool components one by one is solved, achieving efficient system evaluation and a superior user experience.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- THE PEOPLES BANK OF CHINA DIGITAL CURRENCY INST
- Filing Date
- 2024-10-18
- Publication Date
- 2026-07-21
AI Technical Summary
During the system evaluation process, users need to log in to different front-ends of multiple evaluation tool components one by one, resulting in low system evaluation efficiency and poor user experience.
By integrating multiple evaluation tool components into a front-end subsite and a front-end parent site in the front-end server, unified login is achieved using an embedded framework. The front-end parent site verifies the first login token in the user's login request and distributes a second login token to the subsite, or generates a token for login after verifying the user's identity through the login authentication system.
Users can access multiple evaluation tool components simultaneously with a single login, improving system evaluation efficiency and user experience, and avoiding the tedious process of logging in one by one.
Smart Images

Figure CN119316215B_ABST
Abstract
Description
Technical Field
[0001] This invention relates to the field of computer technology, and in particular to a login method, front-end server, and integrated system for an integrated platform. Background Technology
[0002] In the process of system evaluation, a variety of evaluation tools and components are usually used. For example, in the evaluation of blockchain systems, different evaluation tools and components are usually used for evaluating multiple levels such as applications, contracts, and consensus mechanisms.
[0003] Different evaluation tool components have different front-end and back-end technical architectures and user login systems. This means that when users conduct system evaluations, they need to log in to multiple evaluation tool components required for the current evaluation one by one according to the evaluation requirements. This reduces the efficiency of system evaluation and the user experience. Summary of the Invention
[0004] In view of this, embodiments of the present invention provide a login method, a front-end server, and an integration system for an integrated platform. By embedding a framework, the front-end subsites corresponding to multiple evaluation tool components and the corresponding front-end parent site of the integration platform are integrated into the front-end server of the integration platform. After receiving a user login request through the front-end parent site, it can verify whether the user login request carries a valid first login token. If the verification is successful, the user can log in to the front-end parent site and distribute corresponding second login tokens to multiple front-end subsites, enabling the subsites to log in based on the second login token. If the user login request fails, the user's identity can be verified through the login authentication system, and then the first login token can be sent to the front-end parent site, allowing both the front-end parent site and the front-end subsites to log in based on the first and second login tokens, respectively. Thus, the user only needs to initiate a single login request to simultaneously log in to the front-end parent site and multiple front-end subsites, eliminating the need to log in to different evaluation tool components individually, thereby improving evaluation efficiency and enhancing user experience.
[0005] To achieve the above objectives, according to one aspect of the present invention, a login method for an integrated platform is provided, applied to a front-end server of the integrated platform. The front-end server includes a front-end parent site corresponding to the integrated platform and front-end subsites corresponding to multiple evaluation tool components, wherein the front-end parent site and the front-end subsites are integrated in the front-end server through an embedded framework; including:
[0006] Obtain the user login request through the parent front-end site and verify whether the user login request carries a valid first login token;
[0007] If the user login request is verified, the user logs into the parent front-end site and distributes a second login token corresponding to the first login token to multiple front-end sub-sites. This allows each front-end sub-site to log in using the second login token to access the assessment tool component corresponding to the second front-end site.
[0008] If the user login request fails to be verified, the user login request will be redirected to the login authentication system, so that the login authentication system can verify the user identity corresponding to the user login request.
[0009] If the user authentication is successful, a first login token is obtained from the parent front-end site, and the user logs in based on the first login token; and a second login token corresponding to the first login token is obtained from the front-end subsite, so that the front-end subsite logs in based on the second login token to log in to the assessment tool component corresponding to the front-end subsite.
[0010] Optionally, the first login token is sent to the front-end parent site by the login authentication system after the user's identity verification is successful, and the second login token is generated by the front-end parent site based on the registration information of the front-end subsite and the first login token.
[0011] Optionally, the method further includes: obtaining the registration information of the integration platform and multiple evaluation tool components through the front-end main site, and sending the registration information to the login authentication system to register the front-end parent site and the front-end subsite in the login authentication system;
[0012] Login based on the second login token includes: sending the second login token to the login authentication system via the front-end subsite, so that the login authentication system verifies the second login token based on the registration information; and allowing login via the front-end subsite if the verification is successful.
[0013] Optionally, the method further includes: obtaining the user's logout request through the front-end parent site, sending the user's logout request to the login authentication system, so that the login authentication system sets the first login token and / or the second login token corresponding to the user's logout request to the logout state; the front-end parent node and the front-end sub-node exit the login according to the logout state.
[0014] Optionally, the second login token corresponding to the first login token is distributed to multiple front-end sub-sites through the front-end parent site, including: obtaining a user permission list from the integration backend corresponding to the integration platform through the front-end parent site; determining the target front-end sub-site corresponding to the user login request based on the user permission list; generating a second login token corresponding to the target front-end sub-site; and sending the second login token to the target front-end sub-site.
[0015] To achieve the above objectives, according to a second aspect of the present invention, a front-end server for an integrated platform is provided, comprising: a front-end parent site corresponding to the integrated platform and front-end subsites corresponding to multiple evaluation tool components respectively;
[0016] The parent front-end site and the sub-sites are integrated into the front-end server via an embedded framework; among them,
[0017] The front-end parent site is configured as follows: obtain the user login request and verify whether the user login request carries a valid first login token; log in if the user login request is verified; if the user login request is not verified, redirect the user login request to the login authentication system so that the login authentication system can verify the user identity corresponding to the user login request; if the identity verification is successful, obtain the first login token and log in based on the first login token.
[0018] The front-end subsite is configured to: obtain a second login token corresponding to the first login token, and log in based on the second login token to log in to the assessment tool component corresponding to the front-end subsite.
[0019] To achieve the above objectives, according to a third aspect of the present invention, an integrated system is provided, comprising: a front-end server and a login authentication system provided in the second aspect; wherein the login authentication system is configured to: verify the identity of a user based on a user login request; if the user authentication is successful, send a first login token to a front-end parent site in the front-end server; and upon receiving a second login token sent by a front-end subsite in the front-end server, verify the second login token based on the registration information of the front-end subsite, and if the verification is successful, allow the front-end subsite to log in.
[0020] Optionally, the integrated system also includes: an integration backend corresponding to the frontend parent site, and an evaluation backend corresponding to the frontend subsites; wherein,
[0021] The integrated backend configuration is as follows: based on the request from the frontend parent site, send the user permission list to the frontend parent site;
[0022] The evaluation backend is configured to perform evaluations based on evaluation requests sent by the frontend subsites and then send the evaluation results back to the frontend server.
[0023] To achieve the above objectives, according to another aspect of the present invention, a server for a login integration platform is provided, the server comprising: a processor; and a memory for storing processor-executable instructions, wherein the processor is configured to execute the instructions to implement a login method according to an embodiment of the present invention.
[0024] To achieve the above objectives, according to another aspect of the present invention, a computer-readable storage medium is provided, which, when the instructions in the computer-readable storage medium are executed by the processor of a server of a login integration platform, enables the server of the login integration platform to execute a login method according to an embodiment of the present invention.
[0025] One embodiment of the above invention has the following advantages or beneficial effects: By integrating multiple evaluation tool components' corresponding front-end subsites and the integration platform's corresponding front-end parent site into the front-end server via an embedded framework, the front-ends of multiple evaluation tool components are integrated into the integration platform's front-end server. After obtaining a user login request through the front-end parent site, it can verify whether the user login request carries a valid first login token. If the verification is successful, the user can log in to the front-end parent site and distribute corresponding second login tokens to multiple front-end subsites, enabling the front-end subsites to log in based on the second login token. If the user login request fails, the login authentication system can verify the user's identity and send the first login token to the front-end parent site, allowing both the front-end parent site and the front-end subsites to log in based on the first and second login tokens, respectively. Therefore, the user only needs to initiate a single login request to simultaneously log in to the front-end parent site and multiple front-end subsites, without needing to log in to different evaluation tool components individually, thus improving evaluation efficiency and enhancing user experience.
[0026] The further effects of the aforementioned unconventional alternative methods will be explained below in conjunction with specific implementation methods. Attached Figure Description
[0027] The accompanying drawings are provided to better understand the invention and are not intended to unduly limit the scope of the invention. Wherein:
[0028] Figure 1 This is a schematic diagram of the main modules of an integrated system provided in an embodiment of the present invention;
[0029] Figure 2 This is a flowchart illustrating a login method for an integrated platform provided in an embodiment of the present invention;
[0030] Figure 3 This is a flowchart illustrating another login method for an integrated platform provided in an embodiment of the present invention;
[0031] Figure 4 This is a flowchart illustrating a logout method for an integrated platform provided in an embodiment of the present invention;
[0032] Figure 5 This is an exemplary system architecture diagram in which embodiments of the present invention can be applied;
[0033] Figure 6This is a schematic diagram of the structure of a computer system suitable for implementing terminal devices or servers of the present invention. Detailed Implementation
[0034] The following description, in conjunction with the accompanying drawings, illustrates exemplary embodiments of the present invention, including various details to aid understanding. These details should be considered merely exemplary. Therefore, those skilled in the art will recognize that various changes and modifications can be made to the embodiments described herein without departing from the scope and spirit of the invention. Similarly, for clarity and brevity, descriptions of well-known functions and structures are omitted in the following description.
[0035] To enable those skilled in the art to better understand this disclosure, the various embodiments of the present invention will be described in detail below with reference to the accompanying drawings and specific implementation methods. It should be noted that, unless otherwise specified, the embodiments of the present invention and the technical features thereof can be combined with each other.
[0036] This invention provides a login method for an integrated platform, which can be applied to the front-end server of the integrated platform, such as... Figure 1 As shown, the front-end server includes a parent front-end site corresponding to the integration platform and multiple front-end subsites corresponding to various evaluation tool components, such as front-end subsite a corresponding to evaluation tool component a and front-end subsite b corresponding to evaluation tool component b. The parent front-end site and the front-end subsites are integrated into the front-end server through an embedded framework. The login method may include, for example... Figure 2 The steps shown are as follows:
[0037] Step S201: Obtain the user login request through the front-end parent site and verify whether the user login request carries a valid first login token; if the user login request is verified, proceed to step S202, and if the user login request is not verified, proceed to step S203.
[0038] Step S202: Log in to the parent front-end site, and distribute the second login token corresponding to the first login token to multiple front-end sub-sites through the parent front-end site, so that each front-end sub-site can log in according to the second login token to log in to the assessment tool component corresponding to the second front-end site.
[0039] Step S203: Redirect the user login request to the login authentication system, so that the login authentication system verifies the user identity corresponding to the user login request; if the user authentication is successful, proceed to step S204; if the user authentication fails, refuse login.
[0040] Step S204: Obtain a first login token from the parent front-end site and log in using the first login token; and obtain a second login token corresponding to the first login token from the sub-site front-end site, so that the sub-site front-end site logs in using the second login token to log in to the assessment tool component corresponding to the second front-end site.
[0041] In this embodiment of the invention, the front-end pages of different evaluation tool components and the front-end page of the integration platform can be embedded in the front-end server of the integration platform through an iframe. The front-end of the integration platform acts as the parent site of the iframe, and the front-end of the evaluation tool components acts as the child site embedded in the parent site. This achieves front-end integration between the integration platform and the various evaluation tool components, meaning that the front-end pages of each evaluation tool component can be displayed through the front-end page of the integration platform, thus achieving unified front-end display. Furthermore, the back-end sites corresponding to each evaluation tool component can be deployed in one domain or in different domains. For example, for evaluation tool components developed by different companies, their back-end sites (such as...) Figure 1 The evaluation backends a and b) can be deployed in different enterprise clouds. Therefore, this embodiment of the invention integrates the front-ends of various evaluation tool components without needing to process and integrate back-ends with different technical architectures. This saves on the construction cost of the integration platform and also helps avoid security and consistency issues caused by integrating the back-ends of multiple heterogeneous evaluation tools.
[0042] To facilitate login verification, the integration platform and various evaluation tool components can be pre-registered. In one embodiment of the invention, the registration information of the integration platform and multiple evaluation tool components can be obtained through the front-end parent site and sent to the login authentication system for registration of the front-end parent site and front-end subsites. In another embodiment of the invention, administrator users can also directly enter the registration information of the integration platform and various evaluation tool components on the front-end page of the login authentication system for registration of the integration platform and multiple evaluation tool components in the login authentication system. Thus, upon receiving a user login request, the login authentication system can verify the user's identity based on the registration information, and generate a corresponding login token based on the registration information after successful verification.
[0043] The registration information includes the application name, application domain name, application validity period, authentication method (such as single sign-on), access address, logout address, and token status. Since both the integration platform and the evaluation tool components register with the login authentication system, the access address and logout address in the registration information can be the access address of the login authentication system. Therefore, if logging into or logging out of the integration platform fails, the user can be directly redirected to the login authentication system page from the integration platform's front-end page. For example, if the main front-end site verifies that the user's login request does not include a valid first login token, it can redirect to the login authentication system page based on the access address. The user can then enter their username and password on the login authentication system page, allowing the system to authenticate the user. Upon successful authentication, a first login token is generated and returned along with the user information to the front-end server, enabling the user to log in to the main front-end site. Furthermore, the front-end server can cache the user information and the first login token for verification upon receiving the next login request. Furthermore, the parent site can communicate with multiple subsites to transmit the corresponding second login token and user information to the subsites.
[0044] For example, during the user login process, the user can initiate a login request to the front-end parent site through a browser. For instance, the user can initiate a login request to the front-end parent site by entering the access address of the integration platform (such as www.a.com) in the browser. The front-end parent site can verify the login request by checking whether it carries a valid first login token. Specifically, the front-end parent site verifies whether the user login request carries a first login token. If the user login request does not carry a first login token, it redirects the user login request to the login authentication system. If the user login request carries a first login token, it further verifies whether the first login token is valid. If the first login token carried in the user login request is invalid, it also needs to redirect the user login request to the login authentication system. For example, if the user accesses the integration platform again within the token's validity period, the user login request they initiate can carry a valid first login token. In this case, the front-end parent site can determine that the user login request has been verified, and the user can successfully log in to the front-end server. Then, the front-end parent site distributes second login tokens to the front-end sub-sites, allowing the front-end sub-sites to log in to the corresponding evaluation tool components using the second login tokens. For example, if a user is logging into the integration platform for the first time, their login request will not include a first login token. In this case, the login request can be redirected to the login authentication system. The user can then fill in their username and password on the front-end page of the login authentication system. The login authentication system will then verify the user's identity based on the username and password. Once verification is successful, a first login token will be generated, and the first login token and user information will be returned to the parent front-end site, allowing the user to log in to the parent front-end site.
[0045] Understandably, if the login authentication system determines in step S203 that the user's identity has not been verified, it will refuse the user's login, thereby ensuring system security. Furthermore, after the login authentication system confirms successful user authentication in step S203, it can send a first login token to the front-end parent site. Upon receiving the first login token, the front-end parent site can generate a second login token corresponding to each front-end sub-site based on the registration information of the sub-sites and the first login token. The front-end parent site then distributes the second login tokens to the corresponding front-end sub-sites, allowing them to obtain the corresponding second login token and log in to the assessment tool component corresponding to that sub-site. In other words, in this case, the first login token is sent to the front-end parent site by the login authentication system after successful user authentication, and the second login token is generated by the front-end parent site based on the registration information of the sub-sites and the first login token. Additionally, after confirming successful user authentication, the login authentication system can also directly distribute the first login token to the front-end parent site and the second login token to the front-end sub-sites. In other words, the login authentication system can generate a corresponding second login token based on the registration information of the evaluation tool component, and distribute the second login token to the corresponding front-end sub-site, allowing the front-end sub-site to log in using the second login token. That is to say, the second login token can also be directly sent to the front-end sub-site by the login authentication system.
[0046] The first login token and the second login token can be the same or different. For example, the parent front-end site can directly distribute the first login token to each front-end sub-site; in this case, the first and second login tokens are the same. Alternatively, the parent front-end site can generate second login tokens for different evaluation tool components based on information such as the application name, application domain, and application type, and then distribute the second login tokens to the corresponding front-end sub-sites. In this case, since the information corresponding to different evaluation tool components is not entirely the same, the first login token and the second login token are different; that is, the second login token is obtained by modifying the first login token.
[0047] In one embodiment of the present invention, to further improve system security, the front-end parent site can determine the front-end sub-sites it can access based on user permissions, and distribute a second login token accordingly. Specifically, after the front-end parent site verifies that the user login request carries a valid first login token or obtains the first login token from the login authentication system, it can obtain a user permission list from the integration backend corresponding to the integration platform; determine the target front-end sub-site corresponding to the user login request based on the user permission list, then generate a second login token corresponding to the target front-end sub-site, and send the second login token to the target front-end sub-site.
[0048] For example, some assessment tool components only allow administrator access, while others allow all users; that is, different users can access different assessment tool components. This embodiment of the invention can implement single sign-on for corresponding front-end subsites based on different user permissions, thereby improving system security. The user permission list includes information on multiple registered users and their accessible front-end subsites. Accessible front-end subsites in the user permission list can be represented by the identifier of the assessment tool component or the identifier of the front-end subsite itself. After a user logs into the parent front-end site, the parent front-end site can obtain the user permission list from the integration back-end of the integration platform to determine the target front-end subsites accessible to the logged-in user. Then, based on the application name, application domain name, application type, and other information corresponding to the target front-end subsite, as well as the first login token, it generates a second login token corresponding to each target front-end subsite and distributes each second login token to the target front-end subsite accordingly. This implementation of single sign-on for corresponding front-end subsites based on different user permissions facilitates hierarchical system management and improves login security.
[0049] During the login process, the front-end subsite can send a second login token and user information to the login authentication system. The login authentication system can then verify the second login token based on the registration information, such as verifying whether the second login token corresponds to the front-end subsite and whether the second login token is valid. If the verification is successful, the front-end subsite can achieve login without a username and password. Therefore, users only need to enter their username and password once to log in to the integration platform and multiple evaluation tool components, which not only improves the user experience but also helps to improve evaluation efficiency.
[0050] It should be understood that after a user's initial login, if the front-end server subsequently receives another login request from the same user, the main front-end site, after verifying the first login token, can communicate with the front-end sub-sites. Based on the cached user information and the first login token, it can then transmit the corresponding second login token and user information to the front-end sub-sites. The front-end sub-sites then send the second login token and user information to the login authentication system for verification. If the verification is successful, login without a username and password is achieved. During this process, the front-end sub-site sends the second login token and user information to the login authentication system, which verifies the second login token based on the registration information. Only if the verification is successful is the login to the front-end sub-site confirmed as successful. Therefore, verifying again through the login authentication system during the login process at the front-end sub-site improves system security and, because the user is unaware of this process, also enhances the user experience.
[0051] In addition to enabling single sign-on for different evaluation tool components, this embodiment of the invention also provides a method for multiple logged-in evaluation tool components to simultaneously log out. Specifically, in this embodiment, a user logout request can be obtained through a front-end parent site and sent to a login authentication system. The login authentication system then sets the first login token and / or the second login token corresponding to the user logout request to a logout state. The front-end parent site and the front-end subsite can then log out based on the logout state of the tokens.
[0052] In one scenario, if the login authentication system generates only a first login token after successful authentication, and the front-end sub-site distributes second login tokens to each other based on this first token, then during the logout process, the login authentication system sets the status of the first login token to logout, allowing the front-end parent site to exit based on the logout status of the first login token. Then, the login authentication system can send logout requests to the front-end sub-sites based on the logout status of the first login token. Each front-end sub-site determines that the corresponding second login token is invalid based on the logout status of the first login token, and thus also exits the login process. Alternatively, if the login authentication system generates a first login token for the front-end main site and second login tokens for each front-end sub-site after authentication, then during the logout process, the login authentication system sets both the first and second login tokens to logout. After the first login token is logged out, the front-end parent node exits the login process; additionally, the login authentication system sends logout requests to the front-end sub-sites based on the logout status of the second login token, allowing each front-end sub-site to exit the login process based on the logout status of the second login token. Therefore, this embodiment of the invention realizes login synchronization and logout synchronization between the integrated platform and multiple evaluation tool components, without requiring users to initiate login and logout requests for each evaluation tool component individually. This not only improves user experience but also enhances evaluation efficiency.
[0053] Furthermore, based on the same technical concept as the login method of the integrated platform, this embodiment of the invention also provides a front-end server for the integrated platform, which will be discussed further below. Figure 1 It includes the parent front-end site corresponding to the integration platform and the front-end subsites corresponding to multiple evaluation tool components; the parent front-end site and the front-end subsites are integrated into the front-end server through an embedded framework; among them,
[0054] The front-end parent site is configured as follows: It receives user login requests and verifies whether the user login request carries a valid first login token; if the user login request is verified, it logs in; and distributes second login tokens corresponding to the first login token to multiple front-end subsites; if the user login request fails verification, it redirects the user login request to the login authentication system, allowing the login authentication system to verify the user's identity corresponding to the login request; if the identity verification is successful, it obtains the first login token and logs in based on the first login token.
[0055] The front-end subsite is configured to: obtain a second login token corresponding to the first login token, and log in based on the second login token to log in to the assessment tool component corresponding to the front-end subsite.
[0056] In one embodiment of the present invention, the front-end parent site is configured to: receive a first login token sent by the login authentication system after the user's identity verification is successful, generate a second login token based on the registration information of the front-end subsite and the first login token, and send the second login token to the front-end subsite so that the front-end subsite can obtain the second login token.
[0057] In one embodiment of the present invention, the front-end parent site is configured to: obtain the registration information of the integration platform and multiple evaluation tool components, and send the registration information to the login authentication system, so as to register the front-end parent site and the front-end subsite in the login authentication system;
[0058] The front-end subsite is configured to send a second login token to the login authentication system, which then verifies the second login token based on the registration information. If the verification is successful, the front-end subsite is confirmed to have logged in successfully.
[0059] In one embodiment of the present invention, the front-end parent site is further configured to: obtain a user logout request, send the user logout request to the login authentication system, so that the login authentication system sets the first login token and / or the second login token corresponding to the user logout request to the logout state; and exit the login according to the logout state; the front-end subsite is further configured to: exit the login according to the logout state.
[0060] In one embodiment of the present invention, the front-end parent site is configured to: obtain a user permission list from the integration backend corresponding to the integration platform; determine the target front-end subsite corresponding to the user login request based on the user permission list; generate a second login token corresponding to the target front-end subsite; and send the second login token to the target front-end subsite.
[0061] In addition, embodiments of the present invention also provide an integrated system, which will be referred to further. Figure 1 The integrated system 100 includes a front-end server 101 and a login authentication system 102; wherein,
[0062] The login authentication system 102 is configured to: verify the user's identity based on the user's login request; if the user's identity verification is successful, send a first login token to the front-end parent site in the front-end server 101; if it receives a second login token sent by the front-end sub-site in the front-end server 101, verify the second login token based on the registration information of the front-end sub-site; if the verification is successful, allow the front-end sub-site to log in.
[0063] In one embodiment of the present invention, the integrated system 100 further includes: an integration backend 103 corresponding to the frontend parent site, and an evaluation backend 104 corresponding to the frontend subsites; wherein,
[0064] The integrated backend 103 is configured to send a list of user permissions to the frontend parent site based on the request from the frontend parent site.
[0065] The evaluation backend 104 is configured to perform evaluations based on evaluation requests sent by the frontend subsites and then send the evaluation results back to the frontend server.
[0066] In this implementation, after logging into the parent front-end site and sub-sites on the front-end server, users can access the integration backend and evaluation backend through different functional modules on the front-end page according to their actual needs. For example, when an evaluation tool component is used to evaluate a blockchain system, evaluation requests can be sent to the evaluation backends of different evaluation tool components according to the evaluation requirements of different levels of the blockchain system. The evaluation backends then evaluate the corresponding dimensions of their evaluation tool components based on the evaluation requests and feed the evaluation results back to the corresponding front-end sub-sites. The front-end sub-sites can directly display the evaluation results, or they can send the results to the integration backend through the main front-end site for unified processing before displaying them on the front-end page.
[0067] The following example illustrates the login method provided in this embodiment of the invention by integrating multiple evaluation tool components of a blockchain system. To achieve single sign-on for multiple heterogeneous evaluation tool components of a blockchain system, this embodiment of the invention provides the following... Figure 3 The login method shown is based on an integrated system. This system includes a login authentication system, a front-end server integrating a parent front-end site and front-end sub-sites, an integration back-end corresponding to the parent front-end site, and an evaluation back-end corresponding to the front-end sub-sites. The parent front-end site and front-end sub-sites are integrated via iframes, and each front-end sub-site corresponds to a specific evaluation tool component. The login method of this integrated system mainly includes the following steps:
[0068] Step S301: Obtain registration information through the login authentication system, and register the front-end parent site and front-end subsite according to the registration information.
[0069] During the registration process, users can either enter their registration information directly on the login authentication system page or through the page rendered by the front-end main site. The registration information is then sent to the login authentication system through the front-end main site to enable the integration platform and evaluation tool components to register in the login authentication system.
[0070] Step S302: Obtain the user login request from the parent frontend site and verify whether the user login request carries a valid first login token. If the verification passes, proceed to step S303; if the verification fails, proceed to step S305.
[0071] Step S303: Log in to the parent front-end site.
[0072] Step S304: Obtain the user permission list from the integration backend through the frontend parent site, determine the target frontend subsite corresponding to the user login request based on the user permission list, generate a second login token corresponding to the target frontend subsite based on the registration information and the first login token of the target frontend subsite, send the second login token to the target frontend subsite, and execute step S308.
[0073] Step S305: Redirect the user login request to the login authentication system.
[0074] Step S306: Obtain the username and password through the login authentication system page, and verify the username and password according to the registration information. If the verification is successful, proceed to step S307; otherwise, refuse login.
[0075] Step S307: Generate a first login token and send the first login token and user information to the front-end server, so that the front-end main site executes steps S303 and S304.
[0076] Step S308: The front-end subsite sends the second login token and user information to the login authentication system.
[0077] Step S309: The login authentication system verifies the second login token and user information based on the registration information. If the authentication is successful, proceed to step S310; otherwise, proceed to step S311.
[0078] Step S310: Allow front-end subsite login and proceed to step S312.
[0079] Step S311: Deny front-end subsite login.
[0080] Step S312: Send an evaluation request to the evaluation backend through the front-end subsite, so that the evaluation backend can perform the evaluation and feed back the evaluation results to the front-end server.
[0081] In addition, such as Figure 4 As shown, this embodiment of the invention provides a method for exiting the above-mentioned integrated system, which mainly includes the following steps:
[0082] Step S401: Obtain the user's logout request through the front-end parent site and send the user's logout request to the login authentication system.
[0083] Step S402: The login authentication system sets the first login token corresponding to the user's logout request to the logout state.
[0084] Step S403: The front-end parent site logs out based on the logout status of the first login token.
[0085] Step S404: The login authentication system sends a logout request to the front sub-site based on the logout status of the first login token.
[0086] Step S405: The front-end subsite logs out of the login state indicated by the logout request.
[0087] According to the above embodiment, multiple evaluation tool components' corresponding front-end subsites and the integration platform's corresponding front-end parent site are integrated into the front-end server via an embedded framework. This integrates the front-ends of multiple evaluation tool components into the integration platform's front-end server. After receiving a user login request through the front-end parent site, it verifies whether the request carries a valid first login token. If the verification is successful, the user can log in to the front-end parent site and distribute corresponding second login tokens to multiple front-end subsites, allowing them to log in based on the second tokens. If the user login request fails, the login authentication system verifies the user's identity and sends the first login token to the front-end parent site, enabling both the front-end parent site and the front-end subsites to log in based on the first and second tokens respectively. Therefore, users only need to initiate one login request to simultaneously log in to the front-end parent site and multiple front-end subsites, eliminating the need to log in to different evaluation tool components individually, thus improving evaluation efficiency and enhancing user experience.
[0088] Figure 5 An exemplary system architecture 500 for an integrated platform login method or integrated system to which embodiments of the present invention can be applied is shown.
[0089] like Figure 5As shown, the system architecture 500 may include terminal devices 501, 502, and 503, a network 504, and front-end servers 505, back-end servers 506, and 507. Network 504 serves as the medium for providing communication links between terminal devices 501, 502, and 503, and between front-end servers 505 and back-end servers 506 and 507. Network 504 may include various connection types, such as wired or wireless communication links, or fiber optic cables. Users can use terminal devices 501, 502, and 503 to interact with front-end servers 505 through network 504 to initiate requests. Front-end servers 505 can then forward these requests to back-end servers 506 and 507 via the network.
[0090] Terminal devices 501, 502, and 503 can have various client applications installed, such as shopping applications, payment applications, instant messaging tools, and social media platform software. Terminal devices 501, 502, and 503 can be various electronic devices with displays that support web browsing, including but not limited to smartphones, tablets, laptops, and desktop computers.
[0091] It should be understood that Figure 5 The number of terminal devices, networks, and servers shown is merely illustrative. Depending on implementation needs, any number of terminal devices, networks, and servers can be included.
[0092] The following is for reference. Figure 6 It shows a schematic diagram of the structure of a computer system 600 suitable for implementing a terminal device of the present invention. Figure 6 The terminal device shown is merely an example and should not impose any limitations on the functionality and scope of use of the embodiments of the present invention.
[0093] like Figure 6 As shown, the computer system 600 includes a central processing unit (CPU) 601, which can perform various appropriate actions and processes based on programs stored in read-only memory (ROM) 602 or programs loaded from storage section 608 into random access memory (RAM) 603. The RAM 603 also stores various programs and data required for the operation of the system 600. The CPU 601, ROM 602, and RAM 603 are interconnected via a bus 604. An input / output (I / O) interface 605 is also connected to the bus 604.
[0094] The following components are connected to I / O interface 605: an input section 606 including a keyboard, mouse, etc.; an output section 607 including a cathode ray tube (CRT), liquid crystal display (LCD), etc., and speakers, etc.; a storage section 608 including a hard disk, etc.; and a communication section 609 including a network interface card such as a LAN card, modem, etc. The communication section 609 performs communication processing via a network such as the Internet. A drive 610 is also connected to I / O interface 605 as needed. A removable medium 611, such as a disk, optical disk, magneto-optical disk, semiconductor memory, etc., is installed on drive 610 as needed so that computer programs read from it can be installed into storage section 608 as needed.
[0095] In particular, according to the embodiments disclosed in this invention, the processes described above with reference to the flowcharts can be implemented as computer software programs. For example, embodiments disclosed in this invention include a computer program product comprising a computer program carried on a computer-readable medium, the computer program containing program code for performing the methods shown in the flowcharts. In such embodiments, the computer program can be downloaded and installed from a network via communication section 609, and / or installed from removable medium 611. When the computer program is executed by central processing unit (CPU) 601, it performs the functions defined above in the system of this invention.
[0096] It should be noted that the computer-readable medium shown in this invention can be a computer-readable signal medium or a computer-readable storage medium, or any combination thereof. A computer-readable storage medium can be, for example,—but not limited to—an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination thereof. More specific examples of a computer-readable storage medium may include, but are not limited to: an electrical connection having one or more wires, a portable computer disk, a hard disk, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fiber, portable compact disk read-only memory (CD-ROM), optical storage device, magnetic storage device, or any suitable combination thereof. In this invention, a computer-readable storage medium can be any tangible medium containing or storing a program that can be used by or in conjunction with an instruction execution system, apparatus, or device. In this invention, a computer-readable signal medium can include a data signal propagated in baseband or as part of a carrier wave, carrying computer-readable program code. Such propagated data signals can take various forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination thereof. Computer-readable signal media can also be any computer-readable medium other than computer-readable storage media, which can send, propagate, or transmit a program for use by or in connection with an instruction execution system, apparatus, or device. The program code contained on the computer-readable medium can be transmitted using any suitable medium, including but not limited to: wireless, wire, optical fiber, RF, etc., or any suitable combination thereof.
[0097] The flowcharts and block diagrams in the accompanying drawings illustrate the architecture, functionality, and operation of possible implementations of systems, methods, and computer program products according to various embodiments of the present invention. In this regard, each block in a flowchart or block diagram may represent a module, segment, or portion of code containing one or more executable instructions for implementing a specified logical function. It should also be noted that in some alternative implementations, the functions indicated in the blocks may occur in a different order than those indicated in the drawings. For example, two consecutively indicated blocks may actually be executed substantially in parallel, and they may sometimes be executed in reverse order, depending on the functions involved. It should also be noted that each block in a block diagram or flowchart, and combinations of blocks in a block diagram or flowchart, may be implemented using a dedicated hardware-based system that performs the specified function or operation, or using a combination of dedicated hardware and computer instructions.
[0098] The modules described in the embodiments of the present invention can be implemented in software or hardware. The described system can also be located in a processor; for example, it can be described as: a processor including a front-end parent site and front-end sub-sites. The names of these sites do not necessarily limit the system itself; for example, the front-end parent site can also be described as "the front-end site corresponding to the integration platform".
[0099] In another aspect, the present invention also provides a computer-readable medium, which may be included in the device described in the above embodiments; or it may exist independently and not assembled into the device. The computer-readable medium carries one or more programs that, when executed by the device, cause the device to: obtain a user login request through the front-end parent site and verify whether the user login request carries a valid first login token; if the user login request is verified, log in to the front-end parent site and distribute second login tokens corresponding to the first login token to multiple front-end sub-sites through the front-end parent site, so that each front-end sub-site logs in according to the second login token to log in to the evaluation tool component corresponding to the second front-end site; if the user login request is not verified, redirect the user login request to a login authentication system, so that the login authentication system verifies the user identity corresponding to the user login request; if the user identity is verified, obtain the first login token through the front-end parent site and obtain the second login token through the front-end sub-sites, so that the front-end sub-sites log in according to the second login token to log in to the evaluation tool component corresponding to the front-end sub-sites.
[0100] According to the technical solution of this invention, multiple evaluation tool components' corresponding front-end subsites and the integration platform's corresponding front-end parent site are integrated into the front-end server via an embedded framework. This integrates the front-ends of multiple evaluation tool components into the integration platform's front-end server. After receiving a user login request through the front-end parent site, it verifies whether the request carries a valid first login token. If the verification is successful, the user can log in to the front-end parent site and distribute corresponding second login tokens to multiple front-end subsites, enabling them to log in based on the second login tokens. If the user login request fails, the login authentication system verifies the user's identity and sends the first login token to the front-end parent site, allowing both the front-end parent site and the front-end subsites to log in based on the first and second login tokens respectively. Therefore, the user only needs to initiate one login request to simultaneously log in to the front-end parent site and multiple front-end subsites, eliminating the need to log in to different evaluation tool components individually, thus improving evaluation efficiency and enhancing user experience.
[0101] The specific embodiments described above do not constitute a limitation on the scope of protection of this invention. Those skilled in the art should understand that various modifications, combinations, sub-combinations, and substitutions can occur depending on design requirements and other factors. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of this invention should be included within the scope of protection of this invention.
Claims
1. A login method for an integrated platform, characterized in that, A front-end server for an integration platform, comprising a parent front-end site corresponding to the integration platform and multiple front-end subsites corresponding to various evaluation tool components, wherein the parent front-end site and the subsites are integrated into the front-end server via an embedded framework; including: The user login request is obtained through the parent front-end site, and it is verified whether the user login request carries a valid first login token. If the user login request is verified, the user logs into the parent front-end site and distributes a second login token corresponding to the first login token to the multiple front-end sub-sites through the parent front-end site. This allows each front-end sub-site to log in using the second login token to access the assessment tool component corresponding to the second front-end site. If the user login request fails to be verified, the user login request is redirected to the login authentication system, so that the login authentication system can verify the user identity corresponding to the user login request. If the user authentication is successful, the first login token is obtained through the parent front-end site, and the user logs in based on the first login token; and the second login token corresponding to the first login token is obtained through the front-end subsite, so that the front-end subsite logs in based on the second login token to log in to the assessment tool component corresponding to the front-end subsite.
2. The method according to claim 1, characterized in that, The first login token is sent to the front-end parent site by the login authentication system after the user's identity verification is successful, and the second login token is generated by the front-end parent site based on the registration information of the front-end subsite and the first login token.
3. The method according to claim 2, characterized in that, Also includes: The registration information of the integration platform and the multiple evaluation tool components is obtained through the main front-end site, and the registration information is sent to the login authentication system to register the parent front-end site and the sub-site in the login authentication system; The login process based on the second login token includes: The second login token is sent to the login authentication system through the front-end subsite, so that the login authentication system verifies the second login token based on the registration information; If the verification is successful, the front-end subsite is allowed to log in.
4. The method according to claim 2, characterized in that, Also includes: The user logout request is obtained through the parent front-end site, and the user logout request is sent to the login authentication system so that the login authentication system sets the first login token and / or the second login token corresponding to the user logout request to the logout state. The front-end parent node and the front-end sub-node exit the login process based on the logout status.
5. The method according to claim 1, characterized in that, The step of distributing the second login token corresponding to the first login token to the plurality of front-end sub-sites through the front-end parent site includes: The user permission list is obtained from the integration backend corresponding to the integration platform through the front-end parent site; The target front-end subsite corresponding to the user login request is determined based on the user permission list; Generate a second login token corresponding to the target front-end subsite, and send the second login token to the target front-end subsite.
6. A front-end server for an integrated platform, characterized in that, include: The integrated platform corresponds to the front-end parent site, and the multiple evaluation tool components correspond to the front-end subsites respectively. The parent front-end site and the sub-sites are integrated into the front-end server via an embedded framework; wherein... The front-end parent site is configured to: obtain a user login request and verify whether the user login request carries a valid first login token; if the user login request is verified, log in and distribute a second login token corresponding to the first login token to each of the multiple front-end subsites; if the user login request is not verified, redirect the user login request to the login authentication system, so that the login authentication system verifies the user identity corresponding to the user login request; if the identity verification is successful, obtain the first login token and log in based on the first login token; The front-end subsite is configured to: obtain a second login token corresponding to the first login token, and log in according to the second login token to log in to the assessment tool component corresponding to the front-end subsite.
7. An integrated system, characterized in that, include: The front-end server and login authentication system as described in claim 6; wherein, The login authentication system is configured to: verify the user's identity based on the user's login request, and send a first login token to the front-end parent site in the front-end server if the user's identity verification is successful; Upon receiving a second login token sent by a front-end subsite in the front-end server, the second login token is verified according to the registration information of the front-end subsite, and login to the front-end subsite is allowed if the verification is successful.
8. The integrated system according to claim 7, characterized in that, Also includes: The integration backend corresponding to the parent frontend site, and the evaluation backend corresponding to the subsites of the frontend site; wherein... The integrated backend is configured to send a list of user permissions to the parent frontend site in response to the request from the parent frontend site. The evaluation backend is configured to perform evaluations based on the evaluation requests sent by the frontend subsites and then feed back the evaluation results to the frontend server.
9. A server for a login integration platform, characterized in that, include: processor; Memory used to store the processor's executable instructions; The processor is configured to execute the instructions to implement the login method as described in any one of claims 1-5.
10. A computer-readable storage medium, wherein instructions in the computer-readable storage medium, when executed by a processor of a server of a login integration platform, enable the server of the login integration platform to perform the login method as described in any one of claims 1-5.