Unified login authentication method and device based on simple Token string

Abstract

The invention discloses a unified login authentication method and device based on a simple Token string. The method comprises the steps that user identity authentication is carried out through an authentication server according to a user name and a password submitted by a user, a unique Token string used for representing identity information is generated after identity authentication is passed, and the Token string comprises the identity information, a validity period and a signature; when a user accesses a target application system, checking whether user request information of the user carries an effective Token string or not through a request interception module of the target application system, and sending the effective Token string to an authentication server under the condition that the user carries the effective Token string; analyzing the effective Token string through the authentication server to obtain analysis information of the effective Token string, and judging whether the identity of the user is legal or not according to the analysis information; and under the condition that the identity of the user is legal, the target application system judges that the identity authentication of the user is passed, and the target application system is logged in.

Description

Technical Field

[0001] The present invention relates to the technical field of login authentication, and more specifically, to a unified login authentication method and device based on a simple Token string. Background Art

[0002] For the numerous web products in the company, there are also multiple backend management systems. Each management system has an independent identity authentication module, and these products are usually operated by the same group of employees. Operators need to enter their account and password to log in to different systems, which leads to technical problems such as wasting time and inefficiency in logging into multiple systems. Summary of the invention

[0003] In view of the deficiencies in the prior art, the present invention provides a unified login authentication method and device based on a simple Token string.

[0004] According to one aspect of the present invention, a unified login authentication method based on a simple Token string is provided, comprising:

[0005] The authentication server performs user identity authentication based on the user name and password submitted by the user, and generates a unique Token string to represent the identity information after the identity authentication is passed. The Token string includes the identity information, validity period, and signature;

[0006] When a user accesses the target application system, the request interception module of the target application system checks whether the user's request information carries a valid Token string, and if the user carries a valid Token string, the valid Token string is sent to the authentication server;

[0007] Parse the valid Token string through the authentication server, obtain the parsing information of the valid Token string, and determine whether the user's identity is legal based on the parsing information;

[0008] If the user's identity is legal, the target application system determines that the user's identity authentication is successful and logs into the target application system.

[0009] Optionally, when a user accesses a target application system, a request interception module of the target application system checks whether the user's request information carries a valid Token string, including:

[0010] Store the user's Token string in the local storage or Cookie of the user's client browser;

[0011] When a user accesses the application system, the Token string stored locally in the browser or in the cookie is carried in the request header of the user request information to generate user request information carrying the Token string;

[0012] The request interception module of the target application system checks whether the user's request information carries a valid Token string.

[0013] Optionally, it also includes:

[0014] If the Token string has not expired, the user will automatically request the authentication server to update the Token string when accessing the target application system;

[0015] The authentication server regenerates a new Token string based on the Token string update request and returns it to the user.

[0016] Optionally, it also includes:

[0017] When a user logs out or the Token string expires, the authentication server will mark the user's corresponding Token string as invalid.

[0018] Optionally, the valid Token string is parsed by the authentication server to obtain parsing information of the valid Token string, including:

[0019] The authentication server determines whether the valid Token string is within the validity period, and if the valid Token string is within the validity period, the authentication server parses the valid Token string to obtain parsing information of the valid Token string.

[0020] Optionally, the authentication server determines whether the valid Token string is within the validity period, including:

[0021] If the valid Token string is not within the validity period, the authentication server will guide the user to log in again to the authentication server to obtain a new Token string.

[0022] According to another aspect of the present invention, a unified login authentication device based on a simple Token string is provided, comprising:

[0023] The authentication module is used to authenticate the user through the authentication server according to the user name and password submitted by the user, and generate a unique Token string used to represent the identity information after the identity authentication is passed, where the Token string includes the identity information, validity period and signature;

[0024] The sending module is used to check whether the user's user request information carries a valid Token string through the request interception module of the target application system when the user accesses the target application system, and send the valid Token string to the authentication server if the user carries a valid Token string;

[0025] The judgment module is used to parse the valid Token string through the authentication server, obtain the parsing information of the valid Token string, and judge whether the user's identity is legal based on the parsing information;

[0026] The login module is used to determine that the user's identity authentication is passed and log in to the target application system when the user's identity is legal.

[0027] Optionally, when a user accesses a target application system in the sending module, the request interception module of the target application system checks whether the user's request information carries a valid Token string, including:

[0028] The storage submodule is used to store the user's Token string in the local storage or Cookie of the user's client browser;

[0029] The generation submodule is used to carry the Token string of the browser local storage or Cookie in the request header of the user request information when the user accesses the application system, and generate the user request information carrying the Token string;

[0030] The checking submodule is used to check whether the user request information of the user carries a valid Token string through the request interception module of the target application system.

[0031] Optionally, the device further comprises:

[0032] The request module is used to automatically request the authentication server to update the Token string when the user accesses the target application system if the Token string has not expired;

[0033] The regeneration module is used to regenerate a new Token string through the authentication server according to the token string update request and return it to the user.

[0034] Optionally, the device further comprises:

[0035] It is recorded as a module, which is used to mark the user's corresponding Token string as invalid through the authentication server when the user logs out or the Token string expires.

[0036] Optionally, the sending module parses the valid Token string through the authentication server to obtain parsing information of the valid Token string, including:

[0037] The acquisition submodule is used to determine whether the valid Token string is within the validity period through the authentication server, and if the valid Token string is within the validity period, parse the valid Token string through the authentication server to obtain the parsing information of the valid Token string.

[0038] Optionally, the judging module judges whether the valid Token string is within the validity period through the authentication server, including:

[0039] The re-login submodule is used to guide the user to re-login to the authentication server to obtain a new Token string through the authentication server when the valid Token string is no longer valid.

[0040] According to another aspect of the present invention, a computer-readable storage medium is provided, wherein the storage medium stores a computer program, and the computer program is used to execute the method described in any one of the above aspects of the present invention.

[0041] According to another aspect of the present invention, an electronic device is provided, comprising: a processor; a memory for storing instructions executable by the processor; the processor is configured to read the executable instructions from the memory and execute the instructions to implement the method described in any one of the above aspects of the present invention.

[0042] Therefore, the Token string-based single sign-on solution of the present invention generates and manages the Token string through the authentication server, and the application system verifies the Token string to realize the user's single sign-on, thereby improving the user experience and the security and maintainability of the system. BRIEF DESCRIPTION OF THE DRAWINGS

[0043] A more complete understanding of exemplary embodiments of the present invention may be obtained by referring to the following drawings:

[0044] Figure 1 It is a flowchart of a unified login authentication method based on a simple Token string provided by an exemplary embodiment of the present invention;

[0045] Figure 2 It is another flowchart of a unified login authentication method based on a simple Token string provided by an exemplary embodiment of the present invention;

[0046] Figure 3 It is a structural diagram of a unified login authentication device based on a simple Token string provided by an exemplary embodiment of the present invention;

[0047] Figure 4 This is a structure of an electronic device provided by an exemplary embodiment of the present invention. DETAILED DESCRIPTION

[0048] Below, the exemplary embodiments according to the present invention will be described in detail with reference to the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, rather than all the embodiments of the present invention, and it should be understood that the present invention is not limited to the exemplary embodiments described here.

[0049] It should be noted that the relative arrangement of components and steps, the numerical expressions and numerical values ​​set forth in these embodiments do not limit the scope of the present invention unless specifically stated otherwise.

[0050] Those skilled in the art can understand that the terms "first" and "second" in the embodiments of the present invention are only used to distinguish different steps, devices or modules, etc., and neither represent any specific technical meaning nor indicate the necessary logical order between them.

[0051] It should also be understood that, in the embodiments of the present invention, “plurality” may refer to two or more than two, and “at least one” may refer to one, two or more than two.

[0052] It should also be understood that any component, data or structure mentioned in the embodiments of the present invention can generally be understood as one or more, unless explicitly limited or otherwise indicated in the context.

[0053] In addition, the term "and / or" in the present invention is only a description of the association relationship of the associated objects, indicating that there can be three relationships. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. In addition, the character " / " in the present invention generally indicates that the associated objects before and after are in an "or" relationship.

[0054] It should also be understood that the description of the various embodiments of the present invention focuses on the differences between the various embodiments, and the same or similar aspects thereof can be referenced to each other, and for the sake of brevity, they will not be described one by one.

[0055] At the same time, it should be understood that for the convenience of description, the sizes of the various parts shown in the drawings are not drawn according to the actual proportional relationship.

[0056] The following description of at least one exemplary embodiment is merely illustrative in nature and is in no way intended to limit the invention, its application, or uses.

[0057] Technologies, methods, and equipment known to ordinary technicians in the relevant art may not be discussed in detail, but where appropriate, the technologies, methods, and equipment should be considered part of the specification.

[0058] It should be noted that like reference numerals and letters refer to similar items in the following figures, and therefore, once an item is defined in one figure, it need not be further discussed in subsequent figures.

[0059] Embodiments of the present invention can be applied to electronic devices such as terminal devices, computer systems, servers, etc., which can operate with many other general or special computing system environments or configurations. Examples of well-known terminal devices, computing systems, environments and / or configurations suitable for use with electronic devices such as terminal devices, computer systems, servers, etc. include, but are not limited to: personal computer systems, server computer systems, thin clients, thick clients, handheld or laptop devices, microprocessor-based systems, set-top boxes, programmable consumer electronics, network personal computers, small computer systems, large computer systems, and distributed cloud computing technology environments including any of the above systems, etc.

[0060] Electronic devices such as terminal devices, computer systems, servers, etc. can be described in the general context of computer system executable instructions (such as program modules) executed by computer systems. Generally, program modules can include routines, programs, object programs, components, logic, data structures, etc., which perform specific tasks or implement specific abstract data types. Computer systems / servers can be implemented in a distributed cloud computing environment, where tasks are performed by remote processing devices linked through a communication network. In a distributed cloud computing environment, program modules can be located on local or remote computing system storage media including storage devices.

[0061] Exemplary Methods

[0062] Figure 1 1 is a flowchart of a unified login authentication method based on a simple Token string provided by an exemplary embodiment of the present invention. This embodiment can be applied to electronic devices, such as Figure 1 As shown, the unified login authentication method 100 based on a simple Token string includes the following steps:

[0063] Step 101: The authentication server performs user identity authentication based on the user name and password submitted by the user, and generates a unique Token string for representing identity information after the identity authentication is passed, wherein the Token string includes identity information, validity period, and signature;

[0064] Step 102: When a user accesses the target application system, the request interception module of the target application system checks whether the user's request information carries a valid Token string, and if the user carries a valid Token string, sends the valid Token string to the authentication server;

[0065] Step 103: parse the valid Token string through the authentication server, obtain the parsing information of the valid Token string, and determine whether the user's identity is legal based on the parsing information;

[0066] Step 104: If the user's identity is legitimate, the target application system determines that the user's identity authentication is successful, and logs into the target application system.

[0067] Specifically, the purpose of the present invention is to provide a simple and reliable single sign-on solution. After a user logs in at an identity provider, the identity provider will generate a unique token and return it to the user. When the user accesses other services, the token is passed to the server, and the server verifies the validity of the token by communicating with the identity provider to determine the identity of the user.

[0068] This solution mainly involves the following key steps and components:

[0069] Authentication Server

[0070] -User authentication: As the core of this solution, it is responsible for verifying the user's identity information. The user first submits credentials such as username and password to the authentication server, which verifies them.

[0071] -Token generation: When the user identity is authenticated, the authentication server will generate a unique token string. This token string usually contains the user's identity information, validity period, signature, etc. to ensure its security and effectiveness.

[0072] Application System

[0073] -Request interception: Each application system needs to have a request interception module. When a user accesses the application system, the module will first check whether the user carries a valid Token string.

[0074] -Token verification: If the user carries a token string, the application system will send the token to the authentication server for verification. The authentication server will parse the information in the token string, verify its signature and validity period, and confirm whether the user's identity is legal.

[0075] User side

[0076] -Token acquisition: After the user successfully logs in to the authentication server, he will receive a token string returned by the authentication server. This token string is usually stored in the browser's local storage (such as LocalStorage) or Cookies for subsequent use in accessing other application systems.

[0077] -Token string transfer: When a user accesses other application systems, the browser will automatically carry the stored Token string in the request header and send it to the application system.

[0078] Token string update and expiration processing

[0079] -Token string update: To ensure security and effectiveness, the token string usually has a certain validity period. When the token string is about to expire, the user can automatically request the authentication server to update the token string when accessing the application system. The authentication server will regenerate a new token string and return it to the user.

[0080] -Token string invalidation processing: When the user logs out or the token string expires, the authentication server will mark the token string as invalid. When the application system receives an invalid token string, it will guide the user to log in to the authentication server again to obtain a new token string.

[0081] The Token string-based single sign-on solution generates and manages the Token string through the authentication server, and the application system verifies the Token string to implement the user's single sign-on, improving the user experience and the security and maintainability of the system.

[0082] The key technical points of the present invention are:

[0083] Ensure the randomness and uniqueness of the TOKEN string;

[0084] The generated TOKEN string needs to be associated with the user's key identity token;

[0085] Encryption and signature of TOKEN string;

[0086] Security of TOKEN string transmission;

[0087] Reasonably set the validity period and refresh mechanism of the TOKEN string;

[0088] This solution has the following advantages:

[0089] Improve user experience: Users only need to log in once to access multiple related systems without having to repeatedly enter their account and password, saving time and energy and greatly improving work efficiency.

[0090] Reduce management costs: Enterprises only need to maintain a unified identity authentication system, which reduces the workload of managing user accounts and passwords in multiple systems and reduces management costs.

[0091] Enhanced security: Centralized identity authentication and authorization management allow enterprises to better control user access to system resources, improve system security, and reduce security risks caused by account and password leaks.

[0092] Therefore, the Token string-based single sign-on solution of the present invention generates and manages the Token string through the authentication server, and the application system verifies the Token string to realize the user's single sign-on, thereby improving the user experience and the security and maintainability of the system.

[0093] Exemplary Devices

[0094] Figure 3 FIG. 1 is a schematic diagram of a unified login authentication device based on a simple Token string provided by an exemplary embodiment of the present invention. Figure 3 As shown, the device 300 includes:

[0095] The authentication module 310 is used to perform user identity authentication through the authentication server according to the user name and password submitted by the user, and generate a unique Token string for representing the identity information after the identity authentication is passed, wherein the Token string includes the identity information, validity period and signature;

[0096] The sending module 320 is used to check whether the user request information of the user carries a valid Token string through the request interception module of the target application system when the user accesses the target application system, and send the valid Token string to the authentication server if the user carries a valid Token string;

[0097] The judgment module 330 is used to parse the valid Token string through the authentication server, obtain the parsing information of the valid Token string, and judge whether the user's identity is legal according to the parsing information;

[0098] The login module 340 is used for the target application system to determine that the user's identity authentication is passed and log in to the target application system when the user's identity is legal.

[0099] Optionally, when a user accesses a target application system in the sending module 320, a request interception module of the target application system is used to check whether the user request information of the user carries a valid Token string, including:

[0100] The storage submodule is used to store the user's Token string in the local storage or Cookie of the user's client browser;

[0101] The generation submodule is used to carry the Token string of the browser local storage or Cookie in the request header of the user request information when the user accesses the application system, and generate the user request information carrying the Token string;

[0102] The checking submodule is used to check whether the user request information of the user carries a valid Token string through the request interception module of the target application system.

[0103] Optionally, the apparatus 300 further includes:

[0104] The request module is used to automatically request the authentication server to update the Token string when the user accesses the target application system if the Token string has not expired;

[0105] The regeneration module is used to regenerate a new Token string through the authentication server according to the token string update request and return it to the user.

[0106] Optionally, the apparatus 300 further includes:

[0107] It is recorded as a module, which is used to mark the user's corresponding Token string as invalid through the authentication server when the user logs out or the Token string expires.

[0108] Optionally, the sending module 320 parses the valid Token string through the authentication server to obtain parsing information of the valid Token string, including:

[0109] The acquisition submodule is used to determine whether the valid Token string is within the validity period through the authentication server, and if the valid Token string is within the validity period, parse the valid Token string through the authentication server to obtain the parsing information of the valid Token string.

[0110] Optionally, the determination module 330 determines whether the valid Token string is within the validity period by the authentication server, including:

[0111] The re-login submodule is used to guide the user to re-login to the authentication server to obtain a new Token string through the authentication server when the valid Token string is no longer valid.

[0112] Exemplary Electronic Devices

[0113] Figure 4 This is a structure of an electronic device provided by an exemplary embodiment of the present invention. Figure 4 As shown, the electronic device 40 includes one or more processors 41 and a memory 42 .

[0114] The processor 41 may be a central processing unit (CPU) or other forms of processing units having data processing capabilities and / or instruction execution capabilities, and may control other components in the electronic device to perform desired functions.

[0115] The memory 42 may include one or more computer program products, which may include various forms of computer-readable storage media, such as volatile memory and / or non-volatile memory. The volatile memory may include, for example, random access memory (RAM) and / or cache memory (cache), etc. The non-volatile memory may include, for example, read-only memory (ROM), hard disk, flash memory, etc. One or more computer program instructions may be stored on the computer-readable storage medium, and the processor 41 may run the program instructions to implement the methods of the software programs of the various embodiments of the present invention described above and / or other desired functions. In one example, the electronic device may also include: an input device 43 and an output device 44, which are interconnected via a bus system and / or other forms of connection mechanisms (not shown).

[0116] In addition, the input device 43 may also include, for example, a keyboard, a mouse, etc.

[0117] The output device 44 can output various information to the outside, and can include, for example, a display, a speaker, a printer, a communication network and a remote output device connected thereto.

[0118] Of course, to simplify, Figure 4 Only some of the components related to the present invention in the electronic device are shown, and components such as a bus, an input / output interface, etc. are omitted. In addition, the electronic device may further include any other appropriate components according to specific application conditions.

[0119] Exemplary computer program products and computer-readable storage media

[0120] In addition to the above-mentioned methods and devices, an embodiment of the present invention may also be a computer program product, which includes computer program instructions, which, when executed by a processor, enable the processor to execute the steps of the method according to various embodiments of the present invention described in the above-mentioned "Exemplary Method" section of this specification.

[0121] The computer program product may be written in any combination of one or more programming languages ​​to write program code for performing the operations of the embodiments of the present invention, including object-oriented programming languages ​​such as Java, C++, etc., and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user computing device, partially on the user device, as a separate software package, partially on the user computing device and partially on a remote computing device, or entirely on a remote computing device or server.

[0122] In addition, an embodiment of the present invention may also be a computer-readable storage medium having computer program instructions stored thereon, which, when executed by a processor, enable the processor to execute the steps of the method according to various embodiments of the present invention described in the above “Exemplary Method” section of this specification.

[0123] The computer readable storage medium can adopt any combination of one or more readable media. The readable medium can be a readable signal medium or a readable storage medium. The readable storage medium can include, for example, but is not limited to, a system, system or device of electricity, magnetism, light, electromagnetic, infrared, or semiconductor, or any combination of the above. More specific examples (non-exhaustive list) of readable storage media include: an electrical connection with one or more wires, a portable disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above.

[0124] The basic principle of the present invention is described above in conjunction with specific embodiments. However, it should be pointed out that the advantages, strengths, effects, etc. mentioned in the present invention are only examples and not limitations, and it cannot be considered that these advantages, strengths, effects, etc. must be possessed by each embodiment of the present invention. In addition, the specific details disclosed above are only for the purpose of illustration and facilitation of understanding, rather than limitation, and the above details do not limit the present invention to being implemented by adopting the above specific details.

[0125] Each embodiment in this specification is described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the embodiments can be referred to each other. For the system embodiment, since it basically corresponds to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0126] The block diagrams of the devices, systems, equipment, and systems involved in the present invention are only illustrative examples and are not intended to require or imply that they must be connected, arranged, and configured in the manner shown in the block diagram. As will be appreciated by those skilled in the art, these devices, systems, equipment, and systems can be connected, arranged, and configured in any manner. Words such as "including", "comprising", "having", etc. are open words, referring to "including but not limited to", and can be used interchangeably with them. The words "or" and "and" used here refer to the words "and / or" and can be used interchangeably with them, unless the context clearly indicates otherwise. The word "such as" used here refers to the phrase "such as but not limited to", and can be used interchangeably with it.

[0127] The method and system of the present invention may be implemented in many ways. For example, the method and system of the present invention may be implemented by software, hardware, firmware or any combination of software, hardware, firmware. The above order of steps for the method is only for illustration, and the steps of the method of the present invention are not limited to the order specifically described above, unless otherwise specifically stated. In addition, in some embodiments, the present invention may also be implemented as a program recorded in a recording medium, which includes machine-readable instructions for implementing the method according to the present invention. Thus, the present invention also covers a recording medium storing a program for executing the method according to the present invention.

[0128] It should also be noted that in the system, device and method of the present invention, each component or each step can be decomposed and / or recombined. These decompositions and / or recombinations should be regarded as equivalent schemes of the present invention. The above description of the disclosed aspects is provided to enable any technician in the field to make or use the present invention. Various modifications to these aspects are very obvious to those skilled in the art, and the general principles defined here can be applied to other aspects without departing from the scope of the present invention. Therefore, the present invention is not intended to be limited to the aspects shown here, but in accordance with the widest range consistent with the principles and novel features disclosed here.

[0129] The above description has been given for the purpose of illustration and description. In addition, this description is not intended to limit the embodiments of the present invention to the forms disclosed herein. Although a number of example aspects and embodiments have been discussed above, those skilled in the art will recognize certain variations, modifications, changes, additions and sub-combinations thereof.

Claims

1. A unified login authentication method based on a simple Token string, characterized in that: include: The authentication server performs user identity authentication based on the user name and password submitted by the user, and generates a unique Token string for representing the identity information after the identity authentication is passed, wherein the Token string includes the identity information, validity period and signature; When the user accesses the target application system, the request interception module of the target application system checks whether the user request information of the user carries a valid Token string, and if the user carries a valid Token string, sends the valid Token string to the authentication server; Parsing the valid Token string through the authentication server to obtain parsing information of the valid Token string, and determining whether the identity of the user is legal according to the parsing information; In the case that the identity of the user is legal, the target application system determines that the identity authentication of the user is passed, and logs into the target application system.

2. The method according to claim 1, characterized in that When the user accesses the target application system, the request interception module of the target application system checks whether the user request information of the user carries a valid Token string, including: The token string of the user is stored in the local storage or cookie of the client browser of the user; When the user accesses the application system, the Token string stored locally in the browser or in the cookie is carried in the request header of the user request information, and the user request information carrying the Token string is generated; The request interception module of the target application system checks whether the user request information of the user carries a valid Token string.

3. The method according to claim 1, characterized in that Also includes: If the Token string has not expired, the user automatically requests the authentication server to update the Token string when accessing the target application system; The authentication server regenerates a new Token string according to the Token string update request and returns it to the user.

4. The method according to claim 1, characterized in that: Also includes: When the user logs out or the Token string expires, the authentication server will mark the Token string corresponding to the user as invalid.

5. The method according to claim 1, characterized in that The valid Token string is parsed by the authentication server to obtain parsing information of the valid Token string, including: The authentication server determines whether the valid Token string is within the validity period, and if the valid Token string is within the validity period, the authentication server parses the valid Token string to obtain parsing information of the valid Token string.

6. The method according to claim 5, characterized in that Determining, by the authentication server, whether the valid Token string is within the validity period includes: When the valid Token string is not within the validity period, the authentication server guides the user to log in to the authentication server again to obtain a new Token string.

7. A unified login authentication device based on a simple TOKEN string, characterized in that: include: An authentication module is used to perform user identity authentication through an authentication server according to the user name and password submitted by the user, and generate a unique Token string for representing identity information after the identity authentication is passed, wherein the Token string includes identity information, validity period and signature; A sending module, used for checking whether the user request information of the user carries a valid Token string through the request interception module of the target application system when the user accesses the target application system, and sending the valid Token string to the authentication server if the user carries a valid Token string; A judgment module, used to parse the valid Token string through the authentication server, obtain the parsing information of the valid Token string, and judge whether the identity of the user is legal according to the parsing information; The login module is used for, when the identity of the user is legal, the target application system determines that the identity authentication of the user has passed and logs into the target application system.

8. The device according to claim 7, characterized in that When the user accesses the target application system in the sending module, the request interception module of the target application system checks whether the user request information of the user carries a valid Token string, including: A storage submodule, used to store the Token string of the user in the local storage or Cookie of the client browser of the user; A generating submodule, used for carrying the Token string stored locally in the browser or in the Cookie in the request header of the user request information when the user accesses the application system, and generating user request information carrying the Token string; The checking submodule is used to check whether the user request information of the user carries a valid Token string through the request interception module of the target application system.

9. A computer-readable storage medium, characterized in that: The storage medium stores a computer program, and the computer program is used to execute the method according to any one of claims 1 to 6.

10. An electronic device, characterized in that: The electronic device comprises: processor; a memory for storing instructions executable by the processor; The processor is used to read the executable instructions from the memory and execute the instructions to implement the method described in any one of claims 1 to 6.

Images