Interaction method and device of low-code platform, equipment, medium and program product

Abstract

The invention provides an interaction method of a low-code platform, which can be applied to the technical field of information security. The interaction method of the low-code platform comprises the steps that in response to a pre-binding event, triggered by a user, of the front end of the low-code platform, an operation request is received, and the operation request comprises a first identifier and parameter information; executing multi-layer verification operation on the operation request to obtain a verification result; under the condition that the verification result is passed, calling a prefabricated operation statement template based on the first identifier; forming a database operation statement based on the operation statement template and the parameter information; and returning an operation result obtained after the database operation statement is executed to the low-code platform front end. The invention further provides an interaction device of the low-code platform, equipment, a storage medium and a program product.

Description

Technical Field

[0001] The present disclosure relates to the field of information security technology, and specifically to an interaction method, device, equipment, medium and program product of a low-code platform. Background Art

[0002] In the development mode of the low-code platform, the user interface and data flow can be defined through a graphical interface and manual configuration, without the need to configure the user interface through traditional handwritten code. The low-code platform can provide a series of pre-made trigger methods, such as pre-made form buttons, etc. In the development and use of the low-code platform, the developer binds a specific trigger method to an event processing function. When the trigger method occurs, the event processing function is called to implement the corresponding specified logic.

[0003] During this process, the parameters passed through the front end can form operation statements for the back end. The dynamically generated operation statements will have certain security risks. Therefore, how to avoid security risks when business logic is triggered in the low-code platform has become a technical problem that needs to be solved urgently. Summary of the invention

[0004] In view of the above problems, the present disclosure provides a low-code platform interaction method, apparatus, device, medium and program product for improving the interaction security of the low-code platform.

[0005] According to the first aspect of the present disclosure, a low-code platform interaction method is provided, including: in response to a user triggering a pre-binding event of the low-code platform front end, receiving an operation request, wherein the operation request includes a first identifier and parameter information; performing multiple layers of verification operations on the operation request to obtain a verification result; when the verification result is passed, calling a prefabricated operation statement template based on the first identifier; forming a database operation statement based on the operation statement template and the parameter information; and returning the operation result obtained after executing the database operation statement to the low-code platform front end.

[0006] According to an embodiment of the present disclosure, the multi-layer verification operation is performed on the operation request to obtain a verification result, including: performing a parameter verification operation, a frequency verification operation and a token verification operation on the operation request respectively; and if any one of the parameter verification operation, the frequency verification operation and the token verification operation fails, determining the verification result as failed.

[0007] According to an embodiment of the present disclosure, the parameter verification operation includes: obtaining preset parameter verification information based on the first identifier, the preset parameter verification information including: a preset type, a preset length, and a preset business format; verifying whether the parameter information complies with the preset parameter verification information; and if the parameter information complies with the preset parameter verification information, determining that the parameter verification operation is passed.

[0008] According to an embodiment of the present disclosure, the frequency verification operation includes: verifying whether the operation request from the low-code platform front end exceeds the preset frequency threshold within a preset verification period; and if the operation request from the low-code platform front end does not exceed the preset frequency threshold, determining that the frequency verification operation has passed.

[0009] According to an embodiment of the present disclosure, wherein the operation request also includes the current token, the token verification operation includes: verifying whether the current token satisfies legal conditions, wherein the legal conditions include that the current token has not expired, and the legal conditions also include that the current token is authenticated; and in the case that the current token satisfies the legal conditions, determining that the token verification operation is passed.

[0010] According to an embodiment of the present disclosure, calling a prefabricated operation statement template based on the first identifier includes: obtaining a mapping relationship pre-stored in the back end, the mapping relationship including a one-to-one mapping relationship between preset identifiers and preset operation statement templates; and selecting a corresponding operation statement template based on the first identifier and the mapping relationship.

[0011] According to an embodiment of the present disclosure, the operation request is in ciphertext form. After receiving the operation request, performing multiple layers of verification operations on the operation request, before obtaining the verification result, the method also includes: decrypting the operation request in ciphertext form to obtain the operation request in plaintext form.

[0012] The second aspect of the present disclosure provides an interactive device for a low-code platform, the device comprising: a receiving module, for receiving an operation request in response to a pre-binding event triggered by a user on the front end of the low-code platform, wherein the operation request comprises a first identifier and parameter information; a layer verification module, for performing multi-layer verification operations on the operation request to obtain a verification result; a template calling module, for calling a prefabricated operation statement template based on the first identifier when the verification result is passed; a statement forming module, for forming a database operation statement based on the operation statement template and the parameter information; and a result returning module, for returning the operation result obtained after executing the database operation statement to the front end of the low-code platform.

[0013] According to an embodiment of the present disclosure, the multi-layer verification module is specifically used to perform parameter verification operation, frequency verification operation and token verification operation on the operation request respectively; and if any one of the parameter verification operation, the frequency verification operation and the token verification operation fails, the verification result is determined to be failed.

[0014] According to an embodiment of the present disclosure, the parameter verification operation includes: obtaining preset parameter verification information based on the first identifier, the preset parameter verification information including: a preset type, a preset length, and a preset business format; verifying whether the parameter information complies with the preset parameter verification information; and if the parameter information complies with the preset parameter verification information, determining that the parameter verification operation is passed.

[0015] According to an embodiment of the present disclosure, the frequency verification operation includes: verifying whether the operation request from the low-code platform front end exceeds the preset frequency threshold within a preset verification period; and verifying that the operation request from the low-code platform front end does not exceed the preset frequency threshold.

[0016] According to an embodiment of the present disclosure, wherein the operation request also includes the current token, the token verification operation includes: verifying whether the current token satisfies legal conditions, wherein the legal conditions include that the current token has not expired, and the legal conditions also include that the current token is authenticated; and in the case that the current token satisfies the legal conditions, determining that the token verification operation is passed.

[0017] According to an embodiment of the present disclosure, the template calling module is specifically used to obtain a mapping relationship pre-stored in the back end, wherein the mapping relationship includes a one-to-one mapping relationship between a preset identifier and a preset operation statement template; and based on the first identifier and the mapping relationship, select the corresponding operation statement template.

[0018] According to an embodiment of the present disclosure, the operation request is in ciphertext form. After receiving the operation request, performing multiple layers of verification operations on the operation request, before obtaining the verification result, the method also includes: decrypting the operation request in ciphertext form to obtain the operation request in plaintext form.

[0019] A third aspect of the present disclosure provides an electronic device, comprising: one or more processors; and a memory for storing one or more computer programs, wherein the one or more processors execute the one or more computer programs to implement the steps of the above method.

[0020] The fourth aspect of the present disclosure further provides a computer-readable storage medium having a computer program or instructions stored thereon, which implements the steps of the above method when the above computer program or instructions are executed by a processor.

[0021] The fifth aspect of the present disclosure further provides a computer program product, including a computer program or instructions, which implement the steps of the above method when the above computer program or instructions are executed by a processor.

[0022] In the embodiment of the present disclosure, first, when the user operates the pre-bound event of the low-code platform front end, the back end receives the operation request of the front end, then verifies the operation request, and finally calls the corresponding database operation template to form an operation statement if the verification passes, executes the database operation statement and returns the front end result to complete the interaction of the low-code platform. The beneficial effect is that business information is transmitted through the first identifier, which can hide business information during the transmission process and reduce business risks. The verification results obtained through multi-layer verification operations can effectively prevent most security threats. In summary, the scheme in the embodiment of the present disclosure can greatly ensure the interactive security of the low-code platform development efficiency. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] The above contents and other objects, features and advantages of the present disclosure will become more apparent through the following description of the embodiments of the present disclosure with reference to the accompanying drawings, in which:

[0024] Figure 1 An application scenario diagram of an interaction method of a low-code platform according to an embodiment of the present disclosure is schematically shown;

[0025] Figure 2 A flowchart schematically illustrates an interaction method of a low-code platform according to an embodiment of the present disclosure;

[0026] Figure 3 A structural block diagram schematically shows an interactive device of a low-code platform according to an embodiment of the present disclosure; and

[0027] Figure 4 A block diagram of an electronic device suitable for implementing an interaction method of a low-code platform according to an embodiment of the present disclosure is schematically shown. DETAILED DESCRIPTION

[0028] Hereinafter, embodiments of the present disclosure will be described with reference to the accompanying drawings. However, it should be understood that these descriptions are exemplary only and are not intended to limit the scope of the present disclosure. In the following detailed description, for ease of explanation, many specific details are set forth to provide a comprehensive understanding of the embodiments of the present disclosure. However, it is apparent that one or more embodiments may also be implemented without these specific details. In addition, in the following description, descriptions of known structures and technologies are omitted to avoid unnecessary confusion of the concepts of the present disclosure.

[0029] The terms used herein are only for describing specific embodiments and are not intended to limit the present disclosure. The terms "comprise", "include", etc. used herein indicate the existence of the features, steps, operations and / or components, but do not exclude the existence or addition of one or more other features, steps, operations or components.

[0030] All terms (including technical and scientific terms) used herein have the meanings commonly understood by those skilled in the art unless otherwise defined. It should be noted that the terms used herein should be interpreted as having a meaning consistent with the context of this specification and should not be interpreted in an idealized or overly rigid manner.

[0031] When using expressions such as "at least one of A, B, and C, etc.", they should generally be interpreted according to the meaning of the expression commonly understood by those skilled in the art (for example, "a system having at least one of A, B, and C" should include but is not limited to a system having A alone, B alone, C alone, A and B, A and C, B and C, and / or A, B, C, etc.).

[0032] In the prior art, the low-code platform front-end and back-end interact with each other through request calls. During the development process, developers need to manually write the corresponding back-end processing logic and corresponding database operation statements for each front-end operation. During use, users can form operation requests through binding triggers. The back-end forms and executes the corresponding statements based on the received operation requests, and finally returns the front-end information. Although the low-code platform has the advantages of streamlined code and high development efficiency, there are still various security issues.

[0033] In order to solve the technical problems existing in the prior art, an embodiment of the present disclosure provides an interactive method of a low-code platform, the method comprising: in response to a user triggering a pre-binding event of the low-code platform front end, receiving an operation request, wherein the operation request includes a first identifier and parameter information; performing multiple layers of verification operations on the operation request to obtain a verification result; when the verification result is passed, calling a prefabricated operation statement template based on the first identifier; forming a database operation statement based on the operation statement template and the parameter information; and returning the operation result obtained after executing the database operation statement to the low-code platform front end.

[0034] In the embodiment of the present disclosure, first, when the user operates the pre-bound event of the low-code platform front end, the back end receives the operation request of the front end, then verifies the operation request, and finally calls the corresponding database operation template to form an operation statement if the verification passes, executes the database operation statement and returns the front end result to complete the interaction of the low-code platform. The beneficial effect is that business information is transmitted through the first identifier, which can hide business information during the transmission process and reduce business risks. The verification results obtained through multi-layer verification operations can effectively prevent most security threats. In summary, the scheme in the embodiment of the present disclosure can greatly ensure the interactive security of the low-code platform development efficiency.

[0035] Figure 1 An application scenario diagram of the interaction method of the low-code platform according to an embodiment of the present disclosure is schematically shown.

[0036] like Figure 1 As shown, the application scenario 100 according to this embodiment may include a first terminal device 101, a second terminal device 102, a third terminal device 103, a network 104, and a server 105. The network 104 is used to provide a medium for a communication link between the first terminal device 101, the second terminal device 102, the third terminal device 103, and the server 105. The network 104 may include various connection types, such as wired, wireless communication links, or optical fiber cables, etc.

[0037] The user can use the first terminal device 101, the second terminal device 102, and the third terminal device 103 to interact with the server 105 through the network 104 to receive or send messages, etc. Various communication client applications can be installed on the first terminal device 101, the second terminal device 102, and the third terminal device 103, such as shopping applications, web browser applications, search applications, instant messaging tools, email clients, social platform software, etc. (only for example).

[0038] The first terminal device 101, the second terminal device 102, and the third terminal device 103 may be various electronic devices having display screens and supporting web browsing, including but not limited to smart phones, tablet computers, laptop computers, desktop computers, and the like.

[0039] The server 105 may be a server that provides various services, such as a background management server (only as an example) that provides support for websites browsed by users using the first terminal device 101, the second terminal device 102, and the third terminal device 103. The background management server may analyze and process the received data such as user requests, and feed back the processing results (such as web pages, information, or data obtained or generated according to user requests) to the terminal device.

[0040] It should be noted that the interactive method of the low-code platform provided in the embodiment of the present disclosure can generally be executed by the server 105. Accordingly, the interactive device of the low-code platform provided in the embodiment of the present disclosure can generally be set in the server 105. The interactive method of the low-code platform provided in the embodiment of the present disclosure can also be executed by a server or server cluster that is different from the server 105 and can communicate with the first terminal device 101, the second terminal device 102, the third terminal device 103 and / or the server 105. Correspondingly, the interactive device of the low-code platform provided in the embodiment of the present disclosure can also be set in a server or server cluster that is different from the server 105 and can communicate with the first terminal device 101, the second terminal device 102, the third terminal device 103 and / or the server 105.

[0041] It should be understood that Figure 1 The number of terminal devices, networks and servers in the embodiment is only for illustration. Any number of terminal devices, networks and servers may be provided according to implementation requirements.

[0042] The following will be based on Figure 1 The scene described by Figure 2 The interactive method of the low-code platform of the disclosed embodiment is described in detail.

[0043] Figure 2 A flowchart of an interaction method of a low-code platform according to an embodiment of the present disclosure is schematically shown.

[0044] like Figure 2 As shown, the interaction method of the low-code platform of this embodiment includes operations S210 to S250, and the interaction method of the low-code platform can be executed by server 105.

[0045] In operation S210, in response to a user triggering a pre-binding event on the low-code platform front end, an operation request is received, wherein the operation request includes a first identifier and parameter information.

[0046] In the low-code development method, it is usually necessary to bind the front-end trigger method and the back-end event in advance. Among them, the trigger method refers to the specific action or event that can cause the code to execute when the user interacts with the web page. Common trigger methods include: click: the user clicks the mouse button; submit: the user submits the form; change: the content of the input box changes; scroll: the user scrolls the page; keyboard input: the user presses or releases the key on the keyboard; touch event: the user operates on the touch screen. Among them, the binding event refers to the association of a specific function / database operation statement with the above-mentioned trigger method, so that when the trigger method occurs, the corresponding logic will be executed. It should be noted that the event is bound to the processing function, and closures can be used to limit the scope of the bound event. The advantage is to avoid exposing the core logic.

[0047] The first identifier is an identifier for the backend business logic, and the parameter information is information on various parameters for the backend operation database.

[0048] Specifically, the user can select the backend operation to be performed through the configuration interface, such as calling a specific interface or executing a database query. The request includes the time parameter, operation parameter and business logic ID of the backend database operation statement.

[0049] In a typical scenario, a user completes the items in a form through the front end, clicks on them, forms an operation request, and sends it to the back end, wherein the type of the form is the first identification, and the items form parameter information.

[0050] In operation S220, a multi-layer verification operation is performed on the operation request to obtain a verification result.

[0051] Specifically, the operation request from the user front end is verified, and the multi-layer verification operation includes a parameter verification operation, a frequency verification operation, and a token verification operation.

[0052] According to an embodiment of the present disclosure, the multi-layer verification operation is performed on the operation request to obtain a verification result, including: performing a parameter verification operation, a frequency verification operation and a token verification operation on the operation request respectively; and if any one of the parameter verification operation, the frequency verification operation and the token verification operation fails, determining the verification result as failed.

[0053] Specifically, based on the operation request, the parameter verification operation, the frequency verification operation and the token verification operation are respectively performed to ensure that all the verification operations are passed before it is determined that the multi-layer verification operation is passed, wherein the verification result includes pass or fail.

[0054] According to an embodiment of the present disclosure, the parameter verification operation includes: obtaining preset parameter verification information based on the first identifier, the preset parameter verification information including: a preset type, a preset length, and a preset business format; verifying whether the parameter information complies with the preset parameter verification information; and if the parameter information complies with the preset parameter verification information, determining that the parameter verification operation is passed.

[0055] Specifically, check whether the parameters in the request conform to the expected format and range, such as checking whether the input is of a specific type and the length is appropriate. The time format of the corresponding parameter in the request needs to be reviewed with the business logic (format). For example, if the specified time format can only be month but the received time format is day, it will not be accepted.

[0056] According to an embodiment of the present disclosure, the frequency verification operation includes: verifying whether the operation request from the low-code platform front end exceeds the preset frequency threshold within a preset verification period; and verifying that the operation request from the low-code platform front end does not exceed the preset frequency threshold.

[0057] Specifically, by setting a limit on the request frequency, malicious users can be prevented from launching attacks by initiating a large number of requests. For example, the number of operation requests received within 5 minutes cannot exceed A times.

[0058] According to an embodiment of the present disclosure, wherein the operation request also includes the current token, the token verification operation includes: verifying whether the current token satisfies legal conditions, wherein the legal conditions include that the current token has not expired, and the legal conditions also include that the current token is authenticated; and in the case that the current token satisfies the legal conditions, determining that the token verification operation is passed.

[0059] Specifically, it is necessary to determine whether the current token received has expired and whether the current token has passed authentication. If the current token has expired or has not passed authentication, the token verification operation will not be performed. For example, the backend obtains the validity period information by parsing the payload in the token, and then performs expiration verification on it; for another example, the correctness of the current token is verified by comparing the signature in the token with the local signature.

[0060] According to an embodiment of the present disclosure, the operation request is in ciphertext form. After receiving the operation request, performing multiple layers of verification operations on the operation request, before obtaining the verification result, the method also includes: decrypting the operation request in ciphertext form to obtain the operation request in plaintext form.

[0061] The encryption method of the ciphertext may be asymmetric encryption or symmetric encryption. Accordingly, the decryption method at the back end may be asymmetric decryption or symmetric decryption, which will not be described in detail here.

[0062] Specifically, the low-code platform generates a corresponding request code and performs encryption processing when necessary to ensure the security of data transmission. The backend decrypts the ciphertext of the received operation request and then performs operation S230.

[0063] In operation S230, when the verification result is passed, a prefabricated operation statement template is called based on the first identifier.

[0064] According to an embodiment of the present disclosure, a mapping relationship pre-stored in a backend is obtained, the mapping relationship including a one-to-one mapping relationship between a preset identifier and a preset operation statement template; and based on the first identifier and the mapping relationship, a corresponding operation statement template is selected.

[0065] In a typical scenario, the backend defines the templates of database operation statements and stores them in the configuration file or database table on the server; a unique identifier (business logic ID) is assigned to each database operation statement template, and the frontend requests the execution of a specific database operation statement through the business logic ID; based on the database operation statement business logic ID provided in the request, the corresponding database operation statement template is retrieved from the storage.

[0066] It is understandable that for the business logic ID of the back-end database operation statement, the database operation statement is not directly displayed on the front-end page or generated by the front-end, but is placed on the back-end server for management and execution. The purpose of this is to prevent database operation statement injection attacks, because the attacker cannot directly see or modify the database operation statement used for database query.

[0067] In operation S240, a database operation statement is formed based on the operation statement template and the parameter information.

[0068] In operation S250, the operation result obtained after executing the database operation statement is returned to the low-code platform front end.

[0069] In a typical scenario, the retrieved database operation statement template is executed on the server side, the parameters are written into the operation statement template and executed, and the results are subsequently returned to the front end.

[0070] In the embodiment of the present disclosure, first, when the user operates the pre-bound event of the low-code platform front end, the back end receives the operation request of the front end, then verifies the operation request, and finally calls the corresponding database operation template to form an operation statement if the verification passes, executes the database operation statement and returns the front end result to complete the interaction of the low-code platform. The beneficial effect is that business information is transmitted through the first identifier, which can hide business information during the transmission process and reduce business risks. The verification results obtained through multi-layer verification operations can effectively prevent most security threats. In summary, the scheme in the embodiment of the present disclosure can greatly ensure the interactive security of the low-code platform development efficiency.

[0071] Based on the above-mentioned low-code platform interaction method, the present disclosure also provides a low-code platform interaction device. Figure 3 The device is described in detail.

[0072] Figure 3The structural block diagram of the interactive device of the low-code platform according to an embodiment of the present disclosure is schematically shown.

[0073] like Figure 3 As shown, the interactive device 300 of the low-code platform of this embodiment includes a receiving module 310, a multi-layer verification module 320, a template calling module 330, a statement forming module 340 and a result returning module 350.

[0074] The receiving module 310 is used to receive an operation request in response to a user triggering a pre-binding event of the low-code platform front end, wherein the operation request includes a first identifier and parameter information. In one embodiment, the receiving module 310 can be used to perform the operation S210 described above, which is not repeated here.

[0075] The multi-layer verification module 320 is used to perform a multi-layer verification operation on the operation request to obtain a verification result. In one embodiment, the multi-layer verification module 320 can be used to perform the operation S220 described above, which will not be described in detail here.

[0076] The template calling module 330 is used to call the prefabricated operation statement template based on the first identifier when the verification result is passed. In one embodiment, the template calling module 330 can be used to perform the operation S230 described above, which will not be described in detail here.

[0077] The statement forming module 340 is used to form a database operation statement based on the operation statement template and the parameter information. In one embodiment, the statement forming module 340 can be used to perform the operation S240 described above, which will not be described in detail here.

[0078] The result return module 350 is used to return the operation result obtained after executing the database operation statement to the low-code platform front end. In one embodiment, the result return module 350 can be used to perform the operation S250 described above, which will not be repeated here.

[0079] In the embodiment of the present disclosure, first, when the user operates the pre-bound event of the low-code platform front end, the back end receives the operation request of the front end, then verifies the operation request, and finally calls the corresponding database operation template to form an operation statement if the verification passes, executes the database operation statement and returns the front end result to complete the interaction of the low-code platform. The beneficial effect is that business information is transmitted through the first identifier, which can hide business information during the transmission process and reduce business risks. The verification results obtained through multi-layer verification operations can effectively prevent most security threats. In summary, the scheme in the embodiment of the present disclosure can greatly ensure the interactive security of the low-code platform development efficiency.

[0080] According to an embodiment of the present disclosure, the multi-layer verification module is specifically used to perform parameter verification operation, frequency verification operation and token verification operation on the operation request respectively; and if any one of the parameter verification operation, the frequency verification operation and the token verification operation fails, the verification result is determined to be failed.

[0081] According to an embodiment of the present disclosure, the parameter verification operation includes: obtaining preset parameter verification information based on the first identifier, the preset parameter verification information including: a preset type, a preset length, and a preset business format; verifying whether the parameter information complies with the preset parameter verification information; and if the parameter information complies with the preset parameter verification information, determining that the parameter verification operation is passed.

[0082] According to an embodiment of the present disclosure, the frequency verification operation includes: verifying whether the operation request from the low-code platform front end exceeds the preset frequency threshold within a preset verification period; and verifying that the operation request from the low-code platform front end does not exceed the preset frequency threshold.

[0083] According to an embodiment of the present disclosure, wherein the operation request also includes the current token, the token verification operation includes: verifying whether the current token satisfies legal conditions, wherein the legal conditions include that the current token has not expired, and the legal conditions also include that the current token is authenticated; and in the case that the current token satisfies the legal conditions, determining that the token verification operation is passed.

[0084] According to an embodiment of the present disclosure, the template calling module is specifically used to obtain a mapping relationship pre-stored in the back end, wherein the mapping relationship includes a one-to-one mapping relationship between a preset identifier and a preset operation statement template; and based on the first identifier and the mapping relationship, select the corresponding operation statement template.

[0085] According to an embodiment of the present disclosure, the operation request is in ciphertext form. After receiving the operation request, performing multiple layers of verification operations on the operation request, before obtaining the verification result, the method also includes: decrypting the operation request in ciphertext form to obtain the operation request in plaintext form.

[0086] According to an embodiment of the present disclosure, any multiple modules of the receiving module 310, the multi-layer verification module 320, the template calling module 330, the sentence forming module 340 and the result returning module 350 can be combined in one module for implementation, or any one of the modules can be split into multiple modules. Alternatively, at least part of the functions of one or more of these modules can be combined with at least part of the functions of other modules and implemented in one module. According to an embodiment of the present disclosure, at least one of the receiving module 310, the multi-layer verification module 320, the template calling module 330, the sentence forming module 340 and the result returning module 350 can be at least partially implemented as a hardware circuit, such as a field programmable gate array (FPGA), a programmable logic array (PLA), a system on a chip, a system on a substrate, a system on a package, an application specific integrated circuit (ASIC), or can be implemented by hardware or firmware such as any other reasonable way of integrating or packaging the circuit, or implemented in any one of the three implementation methods of software, hardware and firmware or in a suitable combination of any of them. Alternatively, at least one of the receiving module 310, the multi-layer verification module 320, the template calling module 330, the statement forming module 340 and the result returning module 350 may be at least partially implemented as a computer program module, which may perform corresponding functions when executed.

[0087] Figure 4 A block diagram of an electronic device suitable for implementing an interaction method of a low-code platform according to an embodiment of the present disclosure is schematically shown.

[0088] like Figure 4 As shown, the electronic device 400 according to an embodiment of the present disclosure includes a processor 401, which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM) 402 or a program loaded from a storage part 408 to a random access memory (RAM) 403. The processor 401 may include, for example, a general-purpose microprocessor (e.g., a CPU), an instruction set processor and / or a related chipset and / or a dedicated microprocessor (e.g., an application-specific integrated circuit (ASIC)), etc. The processor 401 may also include an onboard memory for caching purposes. The processor 401 may include a single processing unit or multiple processing units for performing different actions of the method flow according to an embodiment of the present disclosure.

[0089] In RAM 403, various programs and data required for the operation of electronic device 400 are stored. Processor 401, ROM 402 and RAM 403 are connected to each other via bus 404. Processor 401 performs various operations of the method flow according to the embodiment of the present disclosure by executing the program in ROM 402 and / or RAM 403. It should be noted that the program can also be stored in one or more memories other than ROM 402 and RAM 403. Processor 401 can also perform various operations of the method flow according to the embodiment of the present disclosure by executing the program stored in the one or more memories.

[0090] According to an embodiment of the present disclosure, the electronic device 400 may further include an input / output (I / O) interface 405, which is also connected to the bus 404. The electronic device 400 may further include one or more of the following components connected to the input / output (I / O) interface 405: an input portion 406 including a keyboard, a mouse, etc.; an output portion 407 including a cathode ray tube (CRT), a liquid crystal display (LCD), etc., and a speaker, etc.; a storage portion 408 including a hard disk, etc.; and a communication portion 409 including a network interface card such as a LAN card, a modem, etc. The communication portion 409 performs communication processing via a network such as the Internet. A drive 410 is also connected to the input / output (I / O) interface 405 as needed. A removable medium 411, such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, etc., is installed on the drive 410 as needed, so that a computer program read therefrom is installed into the storage portion 408 as needed.

[0091] The present disclosure also provides a computer-readable storage medium, which may be included in the device / apparatus / system described in the above embodiments; or may exist independently without being assembled into the device / apparatus / system. The above computer-readable storage medium carries one or more programs, and when the above one or more programs are executed, the method according to the embodiment of the present disclosure is implemented.

[0092] According to an embodiment of the present disclosure, the computer-readable storage medium may be a non-volatile computer-readable storage medium, for example, it may include but is not limited to: a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination thereof. In the present disclosure, a computer-readable storage medium may be any tangible medium containing or storing a program, which may be used by or in combination with an instruction execution system, an apparatus or a device. For example, according to an embodiment of the present disclosure, the computer-readable storage medium may include the ROM 402 and / or RAM 403 described above and / or one or more memories other than ROM 402 and RAM 403.

[0093] The embodiment of the present disclosure also includes a computer program product, which includes a computer program, and the computer program contains program code for executing the method shown in the flowchart. When the computer program product is run in a computer system, the program code is used to enable the computer system to implement the method provided by the embodiment of the present disclosure.

[0094] The above functions defined in the system / device of the embodiment of the present disclosure are performed when the computer program is executed by the processor 401. According to the embodiment of the present disclosure, the system, device, module, unit, etc. described above can be implemented by a computer program module.

[0095] In one embodiment, the computer program may rely on tangible storage media such as optical storage devices, magnetic storage devices, etc. In another embodiment, the computer program may also be transmitted and distributed in the form of signals on a network medium, and downloaded and installed through the communication part 409, and / or installed from the removable medium 411. The program code contained in the computer program may be transmitted using any appropriate network medium, including but not limited to: wireless, wired, etc., or any suitable combination of the above.

[0096] In such an embodiment, the computer program can be downloaded and installed from the network through the communication part 409, and / or installed from the removable medium 411. When the computer program is executed by the processor 401, the above functions defined in the system of the embodiment of the present disclosure are performed. According to the embodiment of the present disclosure, the system, device, apparatus, module, unit, etc. described above can be implemented by a computer program module.

[0097] According to an embodiment of the present disclosure, the program code for executing the computer program provided by the embodiment of the present disclosure can be written in any combination of one or more programming languages. Specifically, these computing programs can be implemented using high-level process and / or object-oriented programming languages, and / or assembly / machine languages. Programming languages ​​include, but are not limited to, Java, C++, python, "C" language or similar programming languages. The program code can be executed entirely on the user computing device, partially on the user device, partially on the remote computing device, or entirely on the remote computing device or server. In the case of a remote computing device, the remote computing device can be connected to the user computing device through any type of network, including a local area network (LAN) or a wide area network (WAN), or can be connected to an external computing device (for example, using an Internet service provider to connect through the Internet).

[0098] The flow charts and block diagrams in the accompanying drawings illustrate the possible architecture, functions and operations of the systems, methods and computer program products according to various embodiments of the present disclosure. In this regard, each box in the flow chart or block diagram can represent a module, a program segment, or a part of a code, and the above-mentioned module, program segment, or a part of a code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in a different order from the order marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram or flow chart, and the combination of the boxes in the block diagram or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0099] It will be appreciated by those skilled in the art that the features described in the various embodiments of the present disclosure may be combined and / or combined in a variety of ways, even if such combinations or combinations are not explicitly described in the present disclosure. In particular, without departing from the spirit and teachings of the present disclosure, the features described in the various embodiments of the present disclosure may be combined and / or combined in a variety of ways. All of these combinations and / or combinations fall within the scope of the present disclosure.

[0100] The embodiments of the present disclosure are described above. However, these embodiments are only for illustrative purposes and are not intended to limit the scope of the present disclosure. Although the embodiments are described above, this does not mean that the measures in the various embodiments cannot be used in combination to advantage. Without departing from the scope of the present disclosure, those skilled in the art may make a variety of substitutions and modifications, which should all fall within the scope of the present disclosure.

Claims

1. A low-code platform interaction method, characterized in that: The method comprises: In response to a user triggering a pre-binding event on the low-code platform front end, receiving an operation request, wherein the operation request includes a first identifier and parameter information; Performing multiple layers of verification operations on the operation request to obtain a verification result; If the verification result is passed, calling a prefabricated operation statement template based on the first identifier; Forming a database operation statement based on the operation statement template and the parameter information; and The operation result obtained after executing the database operation statement is returned to the low-code platform front end.

2. The method according to claim 1, characterized in that: The performing of multiple layers of verification operations on the operation request to obtain a verification result includes: performing a parameter verification operation, a frequency verification operation, and a token verification operation on the operation request respectively; and In the case that any one of the parameter verification operation, the frequency verification operation, and the token verification operation fails, the verification result is determined to be failed.

3. The method according to claim 2, characterized in that The parameter verification operation includes: Acquire preset parameter verification information based on the first identifier, where the preset parameter verification information includes: a preset type, a preset length, and a preset service format; Verifying whether the parameter information complies with preset parameter verification information; and When the parameter information conforms to the preset parameter verification information, it is determined that the parameter verification operation is passed.

4. The method according to claim 2, characterized in that: The frequency verification operation includes: Verify whether the operation request from the low-code platform front end exceeds a preset frequency threshold within a preset verification period; and When the operation request from the low-code platform front end does not exceed the preset frequency threshold, it is determined that the frequency verification operation has passed.

5. The method according to claim 2, characterized in that: in, The operation request also includes the current token, The token verification operation includes: Verify whether the current token satisfies a legal condition, wherein the legal condition includes that the current token is not expired, and the legal condition also includes that the current token is authenticated; and In the case where the current token meets the legal condition, it is determined that the token verification operation is successful.

6. The method according to any one of claims 1 to 5, characterized in that: The calling of a prefabricated operation statement template based on the first identifier includes: Acquire a mapping relationship pre-stored in the backend, the mapping relationship including a one-to-one mapping relationship between a preset identifier and a preset operation statement template; and Based on the first identifier and the mapping relationship, a corresponding operation statement template is selected.

7. The method according to any one of claims 1 to 5, characterized in that: The operation request is in ciphertext form. After receiving the operation request, performing a multi-layer verification operation on the operation request, and before obtaining a verification result, the method further includes: The operation request in ciphertext form is decrypted to obtain the operation request in plaintext form.

8. An interactive device for a low-code platform, characterized in that: The device comprises: A receiving module, configured to receive an operation request in response to a user triggering a pre-binding event on the low-code platform front end, wherein the operation request includes a first identifier and parameter information; A multi-layer verification module, used to perform a multi-layer verification operation on the operation request to obtain a verification result; A template calling module, configured to call a prefabricated operation statement template based on the first identifier when the verification result is passed; A statement forming module, used for forming a database operation statement based on the operation statement template and the parameter information; and The result return module is used to return the operation results obtained after executing the database operation statement to the low-code platform front end.

9. An electronic device, comprising: one or more processors; a memory for storing one or more computer programs, It is characterized in that the one or more processors execute the one or more computer programs to implement the steps of the method according to any one of claims 1 to 7.

10. A computer-readable storage medium having a computer program or instruction stored thereon, characterized in that: When the computer program or instruction is executed by a processor, the steps of the method according to any one of claims 1 to 7 are implemented.

11. A computer program product comprising a computer program or instructions, characterized in that When the computer program or instruction is executed by a processor, the steps of the method according to any one of claims 1 to 7 are implemented.

Images