Data access method and device, computer equipment and storage medium

Abstract

The invention belongs to the technical field of data processing, and relates to a data access method which comprises the following steps: judging whether a data access request triggered by a user is received or not in a deployment process of an application program; wherein the data access request carries user information of the user; if yes, extracting the user information from the data access request; performing permission verification on the user based on the user information; if the user passes the permission verification, determining a corresponding private warehouse based on the user information; pulling a target certificate and a target configuration file from the private warehouse; and performing installation processing on the target certificate and the target configuration file. The invention further provides a data access device, computer equipment and a storage medium. In addition, the invention also relates to a block chain technology, and the target certificate can be stored in a block chain. According to the application, the certificate and the configuration file are managed based on the use of the private warehouse, and the deployment efficiency of the application program can be improved.

Description

Technical Field

[0001] The present application relates to the fields of data processing technology and financial technology, and in particular to data access methods, devices, computer equipment and storage media. Background Art

[0002] In the financial sector, with the rapid development of mobile application technology, the deployment of applications has become an indispensable part of the daily work of development teams. In order to ensure the security, integrity and credibility of applications, major application stores, testing service platforms and device manufacturers require applications to be code signed before release or installation. Code signing is a digital signature technology that uses a certificate to sign applications to verify the source and integrity of the application and prevent tampering during transmission or storage.

[0003] In current practice, most development teams use a more traditional and cumbersome code signing management method: that is, to provide each team member with a separate code signing identity, that is, a certificate. Although this method guarantees the independence and traceability of code signing to a certain extent, it also brings the following problems: whenever a new test device needs to be added or the certificate expires, the development team needs to manually renew the certificate and update the corresponding configuration file. This process is cumbersome and time-consuming, which not only increases the workload of team members, but also may lead to configuration errors or omissions, which in turn affects the deployment progress of the application and leads to low deployment efficiency of the application. Summary of the invention

[0004] The purpose of the embodiments of the present application is to propose a data access method, apparatus, computer device and storage medium to solve the technical problem that the existing code signing management method of application programs requires manual renewal of certificates and updating of corresponding configuration files, resulting in low deployment efficiency of the application programs.

[0005] In order to solve the above technical problems, the present application embodiment provides a data access method, which adopts the following technical solution:

[0006] During the deployment of the application, determining whether a data access request triggered by a user is received; wherein the data access request carries user information of the user;

[0007] If so, extracting the user information from the data access request;

[0008] Performing authority verification on the user based on the user information;

[0009] If the user passes the authority verification, the corresponding private warehouse is determined based on the user information;

[0010] Pull the corresponding target certificate and target configuration file from the private warehouse;

[0011] The target certificate and the target configuration file are installed.

[0012] Furthermore, the step of verifying the authority of the user based on the user information specifically includes:

[0013] Calling a preset permission verification model, and obtaining a specified permission level corresponding to the user information based on the permission verification model;

[0014] determining a specified processing operation corresponding to the data access request;

[0015] Calling a preset business operation permission table, and querying the target permission level range corresponding to the specified processing operation from the business operation permission table;

[0016] Determining whether the specified permission level is within the target permission level range;

[0017] If so, it is determined that the user has passed the authority verification; otherwise, it is determined that the user has not passed the authority verification.

[0018] Furthermore, the step of determining the corresponding private warehouse based on the user information specifically includes:

[0019] Determine corresponding target team information based on the user information;

[0020] Get the preset warehouse mapping table;

[0021] Query the designated warehouse information matching the target team information from the warehouse mapping table;

[0022] A private warehouse corresponding to the target team information is determined based on the designated warehouse information.

[0023] Furthermore, the step of pulling the corresponding target certificate and target configuration file from the private warehouse specifically includes:

[0024] Get the preset target pull command;

[0025] The target pull command is run to pull the corresponding target certificate and target configuration file from the private warehouse.

[0026] Furthermore, the step of installing the target certificate and the target configuration file specifically includes:

[0027] Obtain a preset import command and a preset target folder; wherein the target folder is a related folder storing configuration files;

[0028] Importing the target certificate into a corresponding designated keychain based on the import command;

[0029] The target configuration file is stored in the target folder.

[0030] Furthermore, before the step of determining the corresponding private warehouse based on the user information, the method further includes:

[0031] Call the preset command line tool;

[0032] Installing the command line tool;

[0033] Get the preset certificate management policy;

[0034] Based on the certificate management policy, the command line tool is used to perform certificate management processing on the private warehouse.

[0035] Further, after the step of installing the target certificate and the target configuration file, the method further includes:

[0036] Configuring a deployment environment corresponding to the application;

[0037] Call the preset deployment tool;

[0038] Based on the deployment tool, performing a deployment operation on the application in the deployment environment to obtain a corresponding deployment result;

[0039] The deployment result is stored.

[0040] In order to solve the above technical problems, the embodiment of the present application further provides a data access device, which adopts the following technical solution:

[0041] A judgment module, used to judge whether a data access request triggered by a user is received during the deployment of the application; wherein the data access request carries the user information of the user;

[0042] An extraction module, configured to extract the user information from the data access request;

[0043] A verification module, used to verify the authority of the user based on the user information;

[0044] A determination module, configured to determine a corresponding private warehouse based on the user information if the user passes the authority verification;

[0045] A pulling module, used to pull the corresponding target certificate and target configuration file from the private warehouse;

[0046] A processing module is used to perform installation processing on the target certificate and the target configuration file.

[0047] In order to solve the above technical problems, the embodiment of the present application further provides a computer device, which adopts the following technical solution:

[0048] During the deployment of the application, determining whether a data access request triggered by a user is received; wherein the data access request carries user information of the user;

[0049] If so, extracting the user information from the data access request;

[0050] Performing authority verification on the user based on the user information;

[0051] If the user passes the authority verification, the corresponding private warehouse is determined based on the user information;

[0052] Pull the corresponding target certificate and target configuration file from the private warehouse;

[0053] The target certificate and the target configuration file are installed.

[0054] In order to solve the above technical problems, the embodiment of the present application further provides a computer-readable storage medium, which adopts the following technical solution:

[0055] During the deployment of the application, determining whether a data access request triggered by a user is received; wherein the data access request carries user information of the user;

[0056] If so, extracting the user information from the data access request;

[0057] Performing authority verification on the user based on the user information;

[0058] If the user passes the authority verification, the corresponding private warehouse is determined based on the user information;

[0059] Pull the corresponding target certificate and target configuration file from the private warehouse;

[0060] The target certificate and the target configuration file are installed.

[0061] Compared with the prior art, the embodiments of the present application have the following beneficial effects:

[0062] In the process of deploying an application, the present application determines whether a data access request triggered by a user is received; wherein the data access request carries the user information of the user; if so, the user information is extracted from the data access request; then the user is authenticated based on the user information; if the user passes the authentication, the corresponding private warehouse is determined based on the user information; the corresponding target certificate and target configuration file are subsequently pulled from the private warehouse; and finally the target certificate and the target configuration file are installed. In the process of deploying an application, when a data access request triggered by a user is received, the user information of the user is extracted from the data access request, and the user is authenticated based on the user information. If the user passes the authentication, the corresponding private warehouse is determined based on the user information, and then the corresponding target certificate and target configuration file are pulled from the private warehouse, and the target certificate and target configuration file are installed. The present application implements the management of certificates and configuration files based on the use of private warehouses, so that users can automatically and conveniently pull out the required target certificates and target configuration files from private warehouses during the deployment of applications, thereby effectively reducing the workload of users manually renewing certificates and downloading configuration files, thereby improving the deployment efficiency and stability of applications. BRIEF DESCRIPTION OF THE DRAWINGS

[0063] In order to more clearly illustrate the scheme in the present application, a brief introduction is given below to the drawings required for use in the description of the embodiments of the present application. Obviously, the drawings described below are some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0064] Figure 1 is an exemplary system architecture diagram to which the present application may be applied;

[0065] Figure 2 A flowchart of an embodiment of a data access method according to the present application;

[0066] Figure 3 is a structural diagram of an embodiment of a data access device according to the present application;

[0067] Figure 4 It is a structural diagram of an embodiment of a computer device according to the present application. DETAILED DESCRIPTION

[0068] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as those commonly understood by technicians in the technical field of the present application; the terms used in the specification of the application herein are only for the purpose of describing specific embodiments and are not intended to limit the present application; the terms "including" and "having" and any variations thereof in the specification and claims of the present application and the above-mentioned drawings are intended to cover non-exclusive inclusions. The terms "first", "second", etc. in the specification and claims of the present application or the above-mentioned drawings are used to distinguish different objects, not to describe a specific order.

[0069] Reference to "embodiments" herein means that a particular feature, structure, or characteristic described in conjunction with the embodiments may be included in at least one embodiment of the present application. The appearance of the phrase in various locations in the specification does not necessarily refer to the same embodiment, nor is it an independent or alternative embodiment that is mutually exclusive with other embodiments. It is explicitly and implicitly understood by those skilled in the art that the embodiments described herein may be combined with other embodiments.

[0070] In order to enable those skilled in the art to better understand the solution of the present application, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the accompanying drawings.

[0071] like Figure 1 As shown, the system architecture 100 may include a terminal device 101, a network 102 and a server 103. The terminal device 101 may be a laptop 1011, a tablet computer 1012 or a mobile phone 1013. The network 102 is used to provide a medium for a communication link between the terminal device 101 and the server 103. The network 102 may include various connection types, such as wired, wireless communication links or optical fiber cables, etc.

[0072] The user can use the terminal device 101 to interact with the server 103 through the network 102 to receive or send messages, etc. Various communication client applications can be installed on the terminal device 101, such as web browser applications, shopping applications, search applications, instant messaging tools, email clients, social platform software, etc.

[0073] The terminal device 101 can be any electronic device with a display screen and supporting web browsing. In addition to the laptop computer 1011, tablet computer 1012 or mobile phone 1013, the terminal device 101 can also be an e-book reader, an MP3 player (Moving Picture Experts Group Audio Layer III), an MP4 (Moving Picture Experts Group Audio Layer IV), a laptop computer, a desktop computer, etc.

[0074] The server 103 may be a server that provides various services, such as a background server that provides support for a web page displayed on the terminal device 101 .

[0075] It should be noted that the data access method provided in the embodiment of the present application is generally executed by a server / terminal device, and accordingly, the data access device is generally set in the server / terminal device.

[0076] It should be understood that Figure 1 The number of terminal devices, networks and servers in the embodiment is only for illustration. Any number of terminal devices, networks and servers may be provided according to implementation requirements.

[0077] Continue to refer Figure 2 , shows a flow chart of an embodiment of the data access method according to the present application. According to different requirements, the order of the steps in the flow chart can be changed, and some steps can be omitted. The data access method provided by the embodiment of the present application can be applied to any scenario where data access is required, and the data access method can be applied to products in these scenarios, for example, data access in the financial insurance field. The data access method comprises the following steps:

[0078] Step S201, during the deployment of the application, determining whether a data access request triggered by a user is received; wherein the data access request carries user information of the user.

[0079] In this embodiment, the electronic device on which the data access method is executed, or simply referred to as a device (eg Figure 1The server / terminal device shown in the figure) can obtain data access requests through wired connection or wireless connection. It should be noted that the above-mentioned wireless connection methods may include but are not limited to 3G / 4G / 5G connection, WiFi connection, Bluetooth connection, WiMAX connection, Zigbee connection, UWB (ultra wideband) connection, and other wireless connection methods currently known or developed in the future. The deployment process of the above-mentioned application may include the process of deploying the application to an application store, testing service, or installing the application on a device. The above-mentioned user may be a developer or operation and maintenance personnel of the application. The above-mentioned data access request may be an access request triggered by a user to access the shared certificates and configuration files of the target team corresponding to the user. Among them, in the business scenarios in the financial field, the above-mentioned applications may include financial management applications, claims applications, insurance applications, and the like. In addition, the above-mentioned user information may refer to the user's name information.

[0080] Step S202: If yes, extract the user information from the data access request.

[0081] In this embodiment, the user information carried in the data access request can be obtained by performing information extraction processing on the data access request.

[0082] Step S203: verify the authority of the user based on the user information.

[0083] In this embodiment, the specific implementation process of the above-mentioned authorization verification of the user based on the user information will be described in further detail in subsequent specific embodiments of the present application, and will not be elaborated in detail here.

[0084] Step S204: If the user passes the authority verification, the corresponding private warehouse is determined based on the user information.

[0085] In this embodiment, the specific implementation process of determining the corresponding private warehouse based on the user information will be described in further detail in subsequent specific embodiments of the present application and will not be elaborated on here.

[0086] Step S205, pulling the corresponding target certificate and target configuration file from the private warehouse.

[0087] In this embodiment, the specific implementation process of pulling the corresponding target certificate and target configuration file from the private warehouse will be further described in detail in subsequent specific embodiments of the present application, and will not be elaborated on here.

[0088] Step S206: Install the target certificate and the target configuration file.

[0089] In this embodiment, the specific implementation process of installing the target certificate and the target configuration file will be described in further detail in subsequent specific embodiments of the present application, and will not be elaborated on here.

[0090] In the process of deploying an application, the present application determines whether a data access request triggered by a user is received; wherein the data access request carries the user information of the user; if so, the user information is extracted from the data access request; then the user is authenticated based on the user information; if the user passes the authentication, the corresponding private warehouse is determined based on the user information; the corresponding target certificate and target configuration file are subsequently pulled from the private warehouse; and finally the target certificate and the target configuration file are installed. In the process of deploying an application, when a data access request triggered by a user is received, the user information of the user is extracted from the data access request, and the user is authenticated based on the user information. If the user passes the authentication, the corresponding private warehouse is determined based on the user information, and then the corresponding target certificate and target configuration file are pulled from the private warehouse, and the target certificate and target configuration file are installed. The present application implements the management of certificates and configuration files based on the use of private warehouses, so that users can automatically and conveniently pull out the required target certificates and target configuration files from private warehouses during the deployment of applications, thereby effectively reducing the workload of users manually renewing certificates and downloading configuration files, thereby improving the deployment efficiency and stability of applications.

[0091] In some optional implementations, step S203 includes the following steps:

[0092] A preset permission verification model is called, and a specified permission level corresponding to the user information is obtained based on the permission verification model.

[0093] In this embodiment, the user information may be the user's name information. The permission verification model is a pre-built big data model that stores a one-to-one mapping relationship between each user's name information and the permission level. The permission verification model may be queried using the user information to obtain a specified permission level corresponding to the user information.

[0094] A specified processing operation corresponding to the data access request is determined.

[0095] In this embodiment, for each processing operation, a processing operation identifier matching the processing operation is pre-set, and the processing operation identifier is unique, and one processing operation corresponds to one processing operation identifier. The specified processing operation identifier corresponding to the above data access request can be obtained, and then the matching specified processing operation can be queried according to the specified processing operation identifier.

[0096] A preset business operation permission table is called, and a target permission level range corresponding to the specified processing operation is queried from the business operation permission table.

[0097] In this embodiment, the business operation permission table is a pre-constructed data table storing a variety of processing operation identifiers and permission level ranges corresponding to the various processing operation identifiers. Specifically, the specified business operation identifier corresponding to the specified processing operation can be obtained, and then the specified business operation identifier can be used to query the business operation permission table to obtain the target permission level range corresponding to the specified processing operation.

[0098] Determine whether the specified permission level is within the target permission level range.

[0099] In this embodiment, the specified permission level can be compared with the two endpoint values ​​included in the above-mentioned target permission level range to obtain a corresponding numerical comparison result, and based on the numerical comparison result, it can be identified whether the specified permission level is within the target permission level range.

[0100] If so, it is determined that the user has passed the authority verification; otherwise, it is determined that the user has not passed the authority verification.

[0101] In this embodiment, if the specified permission level is within the target permission level range, it indicates that the user has the permission to perform the data access operation corresponding to the data access request, and the user is determined to have passed the permission verification. If the specified permission level is not within the target permission level range, it indicates that the user does not have the permission to perform the data access operation corresponding to the data access request, and the user is determined to have failed the permission verification.

[0102] This application calls a preset permission verification model, and obtains the specified permission level corresponding to the user information based on the permission verification model; then determines the specified processing operation corresponding to the data access request; then calls the preset business operation permission table, and queries the target permission level range corresponding to the specified processing operation from the business operation permission table; then determines whether the specified permission level is within the target permission level range; only when it is detected that the specified permission level is within the target permission level range, it indicates that the user has the permission to perform the data access operation corresponding to the above data access request, thereby determining that the user has passed the permission verification, effectively improving the processing intelligence and processing accuracy of the user's permission verification, and ensuring the accuracy of the obtained user's permission verification results. In addition, only after it is determined that the user has passed the permission verification, will the data access request be responded to and processed later, which effectively improves the standardized processing and security processing of data access requests, and ensures the security of responding to data access requests.

[0103] In some optional implementations of this embodiment, step S204 includes the following steps:

[0104] The corresponding target team information is determined based on the user information.

[0105] In this embodiment, the team information query can be performed based on the above user information to obtain the team information described by the user. In the application scenario in the financial field, the team information may include team information of the financial management team, the claims team, the insurance team, etc. The team information may refer to the identification information of the team, such as the team number. And the team information is unique.

[0106] Get the preset warehouse mapping table.

[0107] In this embodiment, the above-mentioned warehouse mapping table is a pre-built data table storing a one-to-one correspondence between team information and warehouse information. Among them, the warehouse information refers to the warehouse identifier of the Git warehouse, such as the warehouse number, and the warehouse identifier is unique. Among them, a private warehouse dedicated to storing certificates and configuration files shared within the business team will be configured in advance for each business team.

[0108] The designated warehouse information matching the target team information is queried from the warehouse mapping table.

[0109] In this embodiment, the target team information is used to query the warehouse mapping table, thereby finding out the designated warehouse information corresponding to the target team information.

[0110] A private warehouse corresponding to the target team information is determined based on the designated warehouse information.

[0111] In this embodiment, the designated warehouse information refers to the identification information of the private warehouse corresponding to the target team information. The corresponding private warehouse can be obtained by performing a warehouse query on the designated warehouse information.

[0112] The present application determines the corresponding target team information based on the user information; then obtains a preset warehouse mapping table; then queries the designated warehouse information matching the target team information from the warehouse mapping table; and subsequently determines the private warehouse corresponding to the target team information based on the designated warehouse information. The present application determines the corresponding target team information based on the user information, and then queries the designated warehouse information matching the target team information based on the use of the warehouse mapping table, so that the private warehouse corresponding to the target team information can be quickly and accurately determined based on the designated warehouse information, thereby improving the efficiency and accuracy of determining the private warehouse.

[0113] In other embodiments, the process of using a Git repository to perform code signing includes:

[0114] 1. First, create a new private Git repository to store configuration files.

[0115] 2. Create new private keys and certificates for each environment, such as "production" and "development". Then store these private keys and certificates in the Git repository.

[0116] 3. Create new provisioning profiles for the various target (“Dev”, “App Store”, and “Ad hoc”) folders with matching certificates and store them in the Git repository.

[0117] 4. Encrypt the files (certificates and configuration files) before submitting them to the Git repository (e.g. OpenSSL).

[0118] 5. Each device can access the Git repository and install the latest certificate and profile. a) Use Finder or the secure import command to import the certificate and private key into the keychain. b) Put the profile in the folder where Xcode stores the profile.

[0119] 6. Later, when you need to add new devices to temporary or development configuration files, you can update the configuration files in the Git repository.

[0120] This application builds a private Git repository that stores code signing identities (certificates) and configuration files so that any team member in the development team can access it during the deployment process of the application. In this way, all team members can use the same account and have a code signing identity without any manual work. In addition, the entire development team shares a code signing identity, which can reduce the build failure caused by Xcode sometimes revoking certificates. In addition, more predictable builds can be achieved by explicitly configuring files instead of using automatic settings.

[0121] In some optional implementations, step S205 includes the following steps:

[0122] Get the preset target pull command.

[0123] In this embodiment, the target pull command is specifically a fastlane command corresponding to the command line tool fastlane. The corresponding lane is pre-configured in the fastlane / Fastfile file of the project to obtain certificates and configuration files from the Git repository. Thus, team members can obtain and use the latest certificates and configuration files from the Git repository by running the fastlane command.

[0124] The target pull command is run to pull the corresponding target certificate and target configuration file from the private warehouse.

[0125] In this embodiment, the target certificate and target configuration file stored in the private warehouse can be automatically pulled from the private warehouse by running the acquired target pull command. The private warehouse stores the shared target certificate and target configuration file required by the target team corresponding to the target team information when performing the deployment process of the application.

[0126] The present application obtains a preset target pull command; and then runs the target pull command to pull the corresponding target certificate and target configuration file from the private warehouse. The present application obtains a preset target pull command, and then runs the target pull command to automatically and quickly pull the corresponding target certificate and target configuration file from the private warehouse, effectively improving the efficiency of obtaining the target certificate and target configuration file.

[0127] In some optional implementations, step S206 includes the following steps:

[0128] Obtain a preset import command and a preset target folder; wherein the target folder is a related folder storing configuration files.

[0129] In this embodiment, the import command is a safe import command. The target folder is a related folder storing configuration files.

[0130] The target certificate is imported into a corresponding designated keychain based on the import command.

[0131] In this embodiment, the target certificate can be imported into the corresponding designated keychain by using the above-mentioned import command.

[0132] The target configuration file is stored in the target folder.

[0133] In this embodiment, the target certificate and the target configuration file are installed by importing the target certificate into the corresponding designated keychain based on the import command and storing the target configuration file into the target folder.

[0134] This application obtains a preset import command and a preset target folder; then imports the target certificate into the corresponding designated keychain based on the import command; and subsequently stores the target configuration file into the target folder. This application obtains a preset import command and a target folder, and then imports the target certificate into the corresponding designated keychain based on the import command, and stores the target configuration file into the target folder, so that the installation process of the target certificate and the target configuration file can be completed quickly and accurately, thereby improving the installation efficiency of the target certificate and the target configuration file. This is conducive to the smooth deployment process of the application based on the installed target certificate and target configuration file.

[0135] In some optional implementations of this embodiment, before step S204, the electronic device may further perform the following steps:

[0136] Invoke the default command line tool.

[0137] In this embodiment, the above command line tool is specifically the fastlane tool.

[0138] The command line tool is installed.

[0139] In this embodiment, the command line tool is installed into the device and initialized.

[0140] Get the preset certificate management policy.

[0141] In this embodiment, the policy content of the above-mentioned certificate management policy includes: configuring the Matchfile file, specifying the URL, branch, storage mode, type, application identifier and Apple ID of the Git repository, etc. If you already have certificates and configuration files, you can initialize them through fastlane match init and manually upload the existing certificates and configuration files to the Git repository. Use ruby ​​scripts and Spaceship libraries to list existing certificates and record certificate IDs. Create certs and profiles folders in the Git repository to store encrypted certificates and configuration files. Download existing certificates and mobileprovision files from Apple Developer, import them into the keychain, and generate encrypted p12 files and cer files, as well as encrypted mobileprovision files. Put these encrypted files (certificates and configuration files) into the corresponding directories of the Git repository.

[0142] Based on the certificate management policy, the command line tool is used to perform certificate management processing on the private warehouse.

[0143] In this embodiment, the command line tool may be used to perform certificate management processing on the private repository according to the policy content of the certificate management policy.

[0144] This application calls a preset command line tool; then installs the command line tool; then obtains a preset certificate management policy; and subsequently uses the command line tool to perform certificate management on the private warehouse based on the certificate management policy. This application installs the called command line tool, and then uses the command line tool to perform certificate management on the private warehouse according to the obtained certificate management policy, thereby achieving synchronous management of certificates and configuration files, reducing the workload of manually renewing certificates and downloading configuration files, and thus improving the development efficiency and deployment stability of the application.

[0145] In some optional implementations of this embodiment, after step S206, the electronic device may further perform the following steps:

[0146] Configure a deployment environment corresponding to the application.

[0147] In this embodiment, a deployment environment related to the deployment operation of the application is constructed, and it is ensured that all necessary dependencies and tools, such as a compiler, a linker, and a packaging tool, are configured in the deployment environment.

[0148] Call the preset deployment tool.

[0149] In this embodiment, the above deployment tool is a pre-built tool with application deployment function.

[0150] Based on the deployment tool, a deployment operation is performed on the application in the deployment environment to obtain a corresponding deployment result.

[0151] In this embodiment, according to the deployment process of the application, the deployment tool is used to perform deployment operations on the application, which may specifically include steps such as translating source code, linking library files, and packaging the application, and generating corresponding deployment results. In the process of deploying the application, the deployment tool will perform necessary processing and optimization on the application according to the instructions of the target configuration file and the requirements of the target certificate.

[0152] The deployment result is stored.

[0153] In this embodiment, there is no specific limitation on the storage method of the above deployment results, and it can be set according to actual storage requirements. For example, any one of local database storage, cloud server storage, network disk storage, blockchain storage, etc. can be used. Among them, blockchain storage is preferably used as the storage method of the above deployment results. By using blockchain to store and manage the deployment results, the security and non-tamperability of the deployment results can be effectively guaranteed.

[0154] This application configures a deployment environment corresponding to the application; then calls a preset deployment tool; then, based on the deployment tool, performs a deployment operation on the application in the deployment environment to obtain a corresponding deployment result; and subsequently stores and processes the deployment result. After installing the target certificate and the target configuration file, this application will also intelligently configure a deployment environment corresponding to the application, and based on the use of the deployment tool, perform a deployment operation on the application in the deployment environment to obtain a corresponding deployment result, thereby automatically and accurately completing the deployment process of the application, improving the security and efficiency of the deployment process of the application. In addition, the generated deployment results will be intelligently stored to ensure the data security of the deployment results.

[0155] In some optional implementations, the user information obtained is subject to the user's consent and complies with relevant laws and policies.

[0156] In addition, the non-Company software tools or components that appear in the embodiments of the present application are merely examples and do not represent actual use.

[0157] It should be understood that the order of execution of the steps in the above embodiment does not necessarily mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiment of the present invention.

[0158] It should be emphasized that in order to further ensure the privacy and security of the above-mentioned target certificate, the above-mentioned target certificate can also be stored in a node of a blockchain.

[0159] The blockchain referred to in this application is a new application model of computer technologies such as distributed data storage, peer-to-peer transmission, consensus mechanism, encryption algorithm, etc. Blockchain is essentially a decentralized database, a string of data blocks generated by cryptographic methods. Each data block contains a batch of network transaction information, which is used to verify the validity of its information (anti-counterfeiting) and generate the next block. Blockchain can include the underlying blockchain platform, platform product service layer, and application service layer.

[0160] The embodiments of the present application can acquire and process relevant data based on artificial intelligence technology. Among them, artificial intelligence (AI) is the theory, method, technology and application system that uses digital computers or machines controlled by digital computers to simulate, extend and expand human intelligence, perceive the environment, acquire knowledge and use knowledge to obtain the best results.

[0161] AI basic technologies generally include sensors, dedicated AI chips, cloud computing, distributed storage, big data processing technology, operation / interaction systems, mechatronics, etc. AI software technologies mainly include computer vision technology, robotics technology, biometrics technology, speech processing technology, natural language processing technology, and machine learning / deep learning.

[0162] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiments can be implemented by instructing the relevant hardware through computer-readable instructions, and the computer-readable instructions can be stored in a computer-readable storage medium. When the program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, the aforementioned storage medium can be a non-volatile storage medium such as a disk, an optical disk, a read-only memory (ROM), or a random access memory (RAM).

[0163] It should be understood that, although the steps in the flowchart of the accompanying drawings are displayed in sequence as indicated by the arrows, these steps are not necessarily executed in sequence in the order indicated by the arrows. Unless otherwise specified herein, there is no strict order restriction on the execution of these steps, and they can be executed in other orders. Moreover, at least a part of the steps in the flowchart of the accompanying drawings may include multiple sub-steps or multiple stages, and these sub-steps or stages are not necessarily executed at the same time, but can be executed at different times, and their execution order is not necessarily sequential, but can be executed in turn or alternately with other steps or at least a part of the sub-steps or stages of other steps.

[0164] Further references Figure 3 , as a response to the above Figure 2 The present application provides an embodiment of a data access device, and the device embodiment is Figure 2 Corresponding to the method embodiment shown, the device can be specifically applied to various electronic devices.

[0165] like Figure 3 As shown, the data access device 300 described in this embodiment includes: a judgment module 301, an extraction module 302, a verification module 303, a determination module 304, a pull module 305, and a processing module 306. Among them:

[0166] The judgment module 301 is used to judge whether a data access request triggered by a user is received during the deployment of the application program; wherein the data access request carries the user information of the user;

[0167] An extraction module 302, configured to extract the user information from the data access request;

[0168] Verification module 303, used to verify the authority of the user based on the user information;

[0169] A determination module 304 is configured to determine a corresponding private warehouse based on the user information if the user passes the authority verification;

[0170] A pulling module 305 is used to pull the corresponding target certificate and target configuration file from the private warehouse;

[0171] The processing module 306 is used to perform installation processing on the target certificate and the target configuration file.

[0172] In this embodiment, the operations performed by the above modules or units correspond one-to-one to the steps of the data access method in the above-mentioned implementation mode, and are not described in detail here.

[0173] In some optional implementations of this embodiment, the verification module 303 includes:

[0174] A first acquisition submodule, used to call a preset permission verification model, and obtain a specified permission level corresponding to the user information based on the permission verification model;

[0175] A first determination submodule, used to determine a specified processing operation corresponding to the data access request;

[0176] A first query submodule is used to call a preset business operation permission table and query the target permission level range corresponding to the specified processing operation from the business operation permission table;

[0177] A determination submodule, used to determine whether the specified permission level is within the target permission level range;

[0178] The determination submodule is used to determine that if yes, the user has passed the authority verification; otherwise, the user has not passed the authority verification.

[0179] In this embodiment, the operations performed by the above modules or units correspond one-to-one to the steps of the data access method in the above-mentioned implementation mode, and are not described in detail here.

[0180] In some optional implementations of this embodiment, the determination module 304 includes:

[0181] A second determination submodule is used to determine corresponding target team information based on the user information;

[0182] The second acquisition submodule is used to obtain a preset warehouse mapping table;

[0183] A second query submodule is used to query the designated warehouse information matching the target team information from the warehouse mapping table;

[0184] The third determination submodule is used to determine the private warehouse corresponding to the target team information based on the designated warehouse information.

[0185] In this embodiment, the operations performed by the above modules or units correspond one-to-one to the steps of the data access method in the above-mentioned implementation mode, and are not described in detail here.

[0186] In some optional implementations of this embodiment, the pulling module 305 includes:

[0187] The third acquisition submodule is used to obtain a preset target pull command;

[0188] The running submodule is used to run the target pull command to pull the corresponding target certificate and target configuration file from the private warehouse.

[0189] In this embodiment, the operations performed by the above modules or units correspond one-to-one to the steps of the data access method in the above-mentioned implementation mode, and are not described in detail here.

[0190] In some optional implementations of this embodiment, the processing module 306 includes:

[0191] The fourth acquisition submodule is used to acquire a preset import command and a preset target folder; wherein the target folder is a related folder storing configuration files;

[0192] An import submodule, used for importing the target certificate into a corresponding designated keychain based on the import command;

[0193] The storage submodule is used to store the target configuration file in the target folder.

[0194] In this embodiment, the operations performed by the above modules or units correspond one-to-one to the steps of the data access method in the above-mentioned implementation mode, and are not described in detail here.

[0195] In some optional implementations of this embodiment, the data access device further includes:

[0196] The first calling module is used to call a preset command line tool;

[0197] An installation module, used for installing the command line tool;

[0198] An acquisition module is used to obtain a preset certificate management policy;

[0199] A management module is used to perform certificate management processing on the private warehouse using the command line tool based on the certificate management policy.

[0200] In this embodiment, the operations performed by the above modules or units correspond one-to-one to the steps of the data access method in the above-mentioned implementation mode, and are not described in detail here.

[0201] In some optional implementations of this embodiment, the data access device further includes:

[0202] A configuration module, used to configure a deployment environment corresponding to the application;

[0203] The second calling module is used to call a preset deployment tool;

[0204] A deployment module, used to perform deployment operations on the application in the deployment environment based on the deployment tool to obtain corresponding deployment results;

[0205] The storage module is used to store the deployment results.

[0206] In this embodiment, the operations performed by the above modules or units correspond one-to-one to the steps of the data access method in the above-mentioned implementation mode, and are not described in detail here.

[0207] To solve the above technical problems, the present application also provides a computer device. Figure 4 , Figure 4 This is a basic structural block diagram of the computer device in this embodiment.

[0208] The computer device 4 includes a memory 41, a processor 42, and a network interface 43 that are interconnected through a system bus. It should be noted that the figure only shows a computer device 4 with components 41-43, but it should be understood that it is not required to implement all the components shown, and more or fewer components can be implemented instead. Among them, those skilled in the art can understand that the computer device here is a device that can automatically perform numerical calculations and / or information processing according to pre-set or stored instructions, and its hardware includes but is not limited to microprocessors, application specific integrated circuits (Application Specific Integrated Circuit, ASIC), programmable gate arrays (Field-Programmable Gate Array, FPGA), digital processors (Digital Signal Processor, DSP), embedded devices, etc.

[0209] The computer device may be a computing device such as a desktop computer, a notebook, a PDA, a cloud server, etc. The computer device may interact with a user through a keyboard, a mouse, a remote controller, a touch pad, or a voice control device.

[0210] The memory 41 includes at least one type of readable storage medium, and the readable storage medium includes flash memory, hard disk, multimedia card, card-type memory (for example, SD or DX memory, etc.), random access memory (RAM), static random access memory (SRAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), programmable read-only memory (PROM), magnetic memory, disk, optical disk, etc. In some embodiments, the memory 41 can be an internal storage unit of the computer device 4, such as a hard disk or memory of the computer device 4. In other embodiments, the memory 41 can also be an external storage device of the computer device 4, such as a plug-in hard disk equipped on the computer device 4, a smart memory card (Smart Media Card, SMC), a secure digital (Secure Digital, SD) card, a flash card (FlashCard), etc. Of course, the memory 41 can also include both the internal storage unit of the computer device 4 and its external storage device. In this embodiment, the memory 41 is generally used to store the operating system and various application software installed on the computer device 4, such as computer-readable instructions of data access methods, etc. In addition, the memory 41 can also be used to temporarily store various types of data that have been output or are to be output.

[0211] The processor 42 may be a central processing unit (CPU), a controller, a microcontroller, a microprocessor, or other data processing chips in some embodiments. The processor 42 is generally used to control the overall operation of the computer device 4. In this embodiment, the processor 42 is used to run computer-readable instructions stored in the memory 41 or process data, such as computer-readable instructions for running the data access method.

[0212] The network interface 43 may include a wireless network interface or a wired network interface. The network interface 43 is generally used to establish a communication connection between the computer device 4 and other electronic devices.

[0213] Compared with the prior art, the embodiments of the present application have the following beneficial effects:

[0214] In an embodiment of the present application, during the deployment of an application, it is determined whether a data access request triggered by a user is received; wherein the data access request carries the user information of the user; if so, the user information is extracted from the data access request; then the user is authenticated based on the user information; if the user passes the authentication, the corresponding private warehouse is determined based on the user information; subsequently, the corresponding target certificate and target configuration file are pulled from the private warehouse; finally, the target certificate and target configuration file are installed. During the deployment of an application, when a data access request triggered by a user is received, the user information of the user is extracted from the data access request, and the user is authenticated based on the user information; if the user passes the authentication, the corresponding private warehouse is determined based on the user information, and then the corresponding target certificate and target configuration file are pulled from the private warehouse, and the target certificate and target configuration file are installed. This application implements the management of certificates and configuration files through the use of private repositories, so that users can automatically and conveniently pull out the required target certificates and target configuration files from the private repositories during the application deployment process, thereby effectively reducing the workload of users manually renewing certificates and downloading configuration files, thereby improving the deployment efficiency and stability of the application.

[0215] The present application also provides another implementation, namely, providing a computer-readable storage medium, wherein the computer-readable storage medium stores computer-readable instructions, and the computer-readable instructions can be executed by at least one processor to enable the at least one processor to perform the steps of the data access method as described above.

[0216] Compared with the prior art, the embodiments of the present application have the following beneficial effects:

[0217] In an embodiment of the present application, during the deployment of an application, it is determined whether a data access request triggered by a user is received; wherein the data access request carries the user information of the user; if so, the user information is extracted from the data access request; then the user is authenticated based on the user information; if the user passes the authentication, the corresponding private warehouse is determined based on the user information; subsequently, the corresponding target certificate and target configuration file are pulled from the private warehouse; finally, the target certificate and target configuration file are installed. During the deployment of an application, when a data access request triggered by a user is received, the user information of the user is extracted from the data access request, and the user is authenticated based on the user information; if the user passes the authentication, the corresponding private warehouse is determined based on the user information, and then the corresponding target certificate and target configuration file are pulled from the private warehouse, and the target certificate and target configuration file are installed. This application implements the management of certificates and configuration files through the use of private repositories, so that users can automatically and conveniently pull out the required target certificates and target configuration files from the private repositories during the application deployment process, thereby effectively reducing the workload of users manually renewing certificates and downloading configuration files, thereby improving the deployment efficiency and stability of the application.

[0218] Through the description of the above implementation methods, those skilled in the art can clearly understand that the above-mentioned embodiment methods can be implemented by means of software plus a necessary general hardware platform, and of course by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the present application, or the part that contributes to the prior art, can be embodied in the form of a software product, which is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk), and includes a number of instructions for a terminal device (which can be a mobile phone, computer, server, air conditioner, or network device, etc.) to execute the methods described in each embodiment of the present application.

[0219] Obviously, the embodiments described above are only some embodiments of the present application, rather than all embodiments. The preferred embodiments of the present application are given in the accompanying drawings, but they do not limit the patent scope of the present application. The present application can be implemented in many different forms. On the contrary, the purpose of providing these embodiments is to make the understanding of the disclosure of the present application more thorough and comprehensive. Although the present application is described in detail with reference to the aforementioned embodiments, for those skilled in the art, it is still possible to modify the technical solutions recorded in the aforementioned specific implementation methods, or to perform equivalent replacement of some of the technical features therein. Any equivalent structure made using the contents of the specification and drawings of this application, directly or indirectly used in other related technical fields, is similarly within the scope of patent protection of this application.

Claims

1. A data access method, characterized in that: The steps include: During the deployment of the application, determining whether a data access request triggered by a user is received; wherein the data access request carries user information of the user; If so, extracting the user information from the data access request; Performing authority verification on the user based on the user information; If the user passes the authority verification, the corresponding private warehouse is determined based on the user information; Pull the corresponding target certificate and target configuration file from the private warehouse; The target certificate and the target configuration file are installed.

2. The data access method according to claim 1, characterized in that: The step of verifying the authority of the user based on the user information specifically includes: Calling a preset permission verification model, and obtaining a specified permission level corresponding to the user information based on the permission verification model; determining a specified processing operation corresponding to the data access request; Calling a preset business operation permission table, and querying the target permission level range corresponding to the specified processing operation from the business operation permission table; Determining whether the specified permission level is within the target permission level range; If so, it is determined that the user has passed the authority verification; otherwise, it is determined that the user has not passed the authority verification.

3. The data access method according to claim 1, characterized in that: The step of determining the corresponding private warehouse based on the user information specifically includes: Determine corresponding target team information based on the user information; Get the preset warehouse mapping table; Query the designated warehouse information matching the target team information from the warehouse mapping table; A private warehouse corresponding to the target team information is determined based on the designated warehouse information.

4. The data access method according to claim 1, characterized in that: The step of pulling the corresponding target certificate and target configuration file from the private warehouse specifically includes: Get the preset target pull command; The target pull command is run to pull the corresponding target certificate and target configuration file from the private warehouse.

5. The data access method according to claim 1, characterized in that: The step of installing the target certificate and the target configuration file specifically includes: Obtain a preset import command and a preset target folder; wherein the target folder is a related folder storing configuration files; Importing the target certificate into a corresponding designated keychain based on the import command; The target configuration file is stored in the target folder.

6. The data access method according to claim 1, characterized in that: Before the step of determining the corresponding private warehouse based on the user information, the method further includes: Call the preset command line tool; Installing the command line tool; Get the preset certificate management policy; Based on the certificate management policy, the command line tool is used to perform certificate management processing on the private warehouse.

7. The data access method according to claim 1, characterized in that: After the step of installing the target certificate and the target configuration file, the method further includes: Configuring a deployment environment corresponding to the application; Call the preset deployment tool; Based on the deployment tool, performing a deployment operation on the application in the deployment environment to obtain a corresponding deployment result; The deployment result is stored.

8. A data access device, characterized in that: include: A judgment module, used to judge whether a data access request triggered by a user is received during the deployment of the application; wherein the data access request carries the user information of the user; An extraction module, configured to extract the user information from the data access request; A verification module, used to verify the authority of the user based on the user information; A determination module, configured to determine a corresponding private warehouse based on the user information if the user passes the authority verification; A pulling module, used to pull the corresponding target certificate and target configuration file from the private warehouse; A processing module is used to perform installation processing on the target certificate and the target configuration file.

9. A computer device, characterized in that: The method comprises a memory and a processor, wherein the memory stores computer-readable instructions, and the processor implements the steps of the data access method according to any one of claims 1 to 7 when executing the computer-readable instructions.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer-readable instructions, and when the computer-readable instructions are executed by a processor, the steps of the data access method according to any one of claims 1 to 7 are implemented.

Images