Open Platform Login via Command Word and Unified Callback
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing login methods for third-party pages face challenges due to the need for callback addresses, which complicate development and are not supported by all websites, especially in intelligent terminal environments, and are hindered by same-origin policy limitations and lack of direct communication between third-party and login platforms.
Innovation Solution
A unified callback address page is provided by a login platform that receives an Access Token parameter, acquires an OpenID, and generates a command word including the Access Token and OpenID, which is returned to the third-party page, supporting various browser environments and enabling direct communication without requiring a callback-free address page development.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If websites provide callback-free address page manner (direct SDK integration), then login process is simplified and operational costs are reduced, but cross-domain communication is blocked by browser same-origin policy and implementation mechanism needs significant improvement
Solution Approach 1:
The patent introduces a domain name mapping relationship as an intermediary mechanism between the third-party page domain and the login platform domain. The browser stores and retrieves domain mappings to enable cross-domain communication while maintaining same-origin policy security. This intermediary allows the system to bypass browser blocking without requiring significant implementation mechanism changes.
2Reliability
If websites use pseudo protocol in SDK for callback address, then direct communication between third-party and platform is enabled, but http request is ended and Access Token parameter must be directly captured from address
Solution Approach 1:
The patent replaces the manual mechanical process of directly capturing Access Token parameters from the address bar with an automated JavaScript interface. The JS interface automatically retrieves the command word from the pseudo protocol address, parses the Access Token and OpenID parameters, and transfers them to the third-party page, eliminating the need for manual parameter extraction.
3Adaptability or versatility
If JS SDKs are provided by SNS media websites, then openAPI calls are enabled, but they are unavailable in intelligent terminal environment and bring great inconvenience to third-party page development
Solution Approach 1:
The patent creates a universal JS interface that functions across multiple platforms including both traditional web browsers and intelligent terminals. The interface provides unified methods for login, authentication, and openAPI calls that work consistently across different environments, eliminating the need for platform-specific SDK implementations and simplifying third-party page development.
Data Source
AI summary
The present disclosure is applicable to the field of network communications, and provides a login method and apparatus, and an open platform system. The method includes: receiving an Access Token parameter provided by a login platform after a user is authenticated and authorized; acquiring an open digital identity (OpenID) of the user by using the received Access Token parameter; and generating a corresponding command word according to a browser environment of a third-party page, and returning the command word to the third-party page, the command word including the Access Token parameter and the OpenID of the user. In the present disclosure, a login platform provides a unified callback address page for a third-party page, and the third-party page can access an open platform without developing a callback-free address page, thereby reducing development costs of the third-party page; a complete login and an openAPI call JS interface are provided and automatic update is supported, and a JS SDK of the latest version can be automatically applied without adjustment of the third-party page, and therefore can work on various intelligent terminals.