WO2021218328A1

WO2021218328A1 - Multi-tenant access service implementation method, apparatus and device, and storage medium

Info

Publication number: WO2021218328A1
Application number: PCT/CN2021/078046
Authority: WO
Inventors: 杨越
Original assignee: 深圳壹账通智能科技有限公司
Priority date: 2020-04-28
Filing date: 2021-02-26
Publication date: 2021-11-04
Also published as: CN111641675A

Abstract

The present application relates to artificial intelligence, and provides a multi-tenant access service implementation method, apparatus and device, and a storage medium. The method comprises: by modifying underlying technology of a multi-tenant architecture, modifying, on the same platform, an application context adaptive to one tenant access service into an application context adaptive to multiple independent tenant access services, configuring a universal function implementation class and a tenant customized function implementation class for each tenant access service, and by programming to an interface of the application context, starting an instance corresponding to each function implementation class; in a service starting stage, first loading the corresponding application context for each tenant access service; and in a service operation process, acquiring the corresponding application context by means of tenant credential information of a tenant client, accessing the current thread, and starting a corresponding tenant access service. Moreover, the present application also relates to blockchain technology, and related information can be stored in a blockchain node. In the present application, and multiple customized services are provided on the multi-tenant architecture.

Description

Multi-tenant access service realization method, device, equipment and storage medium

This application claims the priority of a Chinese patent application filed with the Chinese Patent Office on April 28, 2020, the application number is 202010350026.4, and the invention title is "Multi-tenant access service implementation methods, devices, equipment and storage media". The entire content of the application is approved The reference is incorporated in the application.

Technical field

This application relates to the field of artificial intelligence, and in particular to a method, device, equipment and storage medium for implementing multi-tenant access services.

Background technique

As a new technology for deploying applications and services in the cloud, microservices have become the latest hot topic. The development of microservice technology is first to solve the problems of traditional large-scale software development, testing, deployment and maintenance. The modification of each functional module needs to consider the overall changes of the software application, and the microservice technology divides the entire large application into multiple Independent small modules, each small module basically only needs to be responsible for its own business function development, testing, deployment, operation and maintenance. Nowadays, microservices are the leader in software application model innovation. From traditional enterprise internal deployment of software products to cloud deployment, a new delivery method is defined, which reduces the large upfront investment required for local deployment and integrates software The application returns to its essential service attributes.

Today's microservices use a multi-tenant architecture. The same set of services is for multiple customers and needs to meet the needs of multiple tenants as much as possible. For individual users, the platform only needs to meet public needs. The inventor realizes that for enterprise users, it needs to be satisfied as much as possible, but due to the various customer needs and even conflicts, it is difficult to develop for enterprise users. Often in order to meet the needs of one tenant, it affects the businesses of other tenants. So how to provide multiple sets of customized services on the multi-tenant architecture to meet the needs of different users?

Summary of the invention

The main purpose of this application is to solve the problem of how to provide multiple sets of customized services on a multi-tenant architecture to meet the needs of different users.

To achieve the above objective, the first aspect of this application provides a multi-tenant access service implementation method, including: reading a tenant configuration file, the tenant configuration file contains the customized function implementation class corresponding to each tenant access service and/or General function realization class; based on the custom function realization class and/or general function realization class corresponding to each tenant access service, create the application context corresponding to each tenant access service; receive and parse the access service request initiated by the tenant client to obtain The tenant credential information corresponding to the tenant client; obtain and parse the corresponding tenant information according to the tenant credential information to obtain tenant identification information; determine the application context corresponding to the tenant client to access the service according to the tenant identification information And assigned to the thread where the access service request is located.

The second aspect of the present application provides a device for implementing multi-tenant access services, including a memory, a processor, and computer-readable instructions stored on the memory and running on the processor, and the processor executes the The computer-readable instructions implement the following steps: read the tenant configuration file, the tenant configuration file contains the customized function implementation class and/or the general function implementation class corresponding to each tenant access service; based on the corresponding tenant access service Customize function implementation classes and/or general function implementation classes to create an application context corresponding to each tenant's access service; receive and parse the access service request initiated by the tenant client to obtain the tenant credential information corresponding to the tenant client; The tenant credential information obtains and analyzes the corresponding tenant information to obtain tenant identification information; according to the tenant identification information, the application context corresponding to the tenant client's access service is determined and assigned to the thread where the access service request is located.

The third aspect of the present application provides a computer-readable storage medium, which stores computer instructions, and when the computer instructions are run on the computer, the computer executes the following steps: read the tenant configuration file , The tenant configuration file contains the customized function realization class and/or general function realization class corresponding to each tenant access service; based on the custom function realization class and/or general function realization class corresponding to each tenant access service, each An application context corresponding to the tenant's access service; receiving and parsing an access service request initiated by the tenant client to obtain the tenant credential information corresponding to the tenant client; according to the tenant credential information, obtaining the corresponding tenant information and analyzing it to obtain the tenant Identification information; according to the tenant identification information, the application context corresponding to the tenant client's access service is determined and assigned to the thread where the access service request is located.

The fourth aspect of the application provides a device for implementing multi-tenant access services, including: a receiving module for reading tenant configuration files, the tenant configuration files containing customized function implementation classes corresponding to each tenant access service and/or General function realization class; creation module, used to create the application context corresponding to each tenant access service based on the custom function realization class and/or general function realization class corresponding to each tenant access service; parsing module, used to receive tenant customers Access service request initiated by the client and parsed to obtain the tenant credential information corresponding to the tenant client; according to the tenant credential information, the corresponding tenant information is obtained and parsed to obtain the tenant identification information; the allocation module is used to obtain the tenant identification information according to the tenant credential information. The identification information determines the application context corresponding to the access service of the tenant client and assigns it to the thread where the access service request is located.

In the technical solution provided by this application, the tenant configuration file is read, and the tenant configuration file contains the customized function realization class and/or the general function realization class corresponding to each tenant access service; based on the customization corresponding to each tenant access service The function realization class and/or the general function realization class create the application context corresponding to each tenant's access service; receive and analyze the service access request initiated by the tenant client to obtain the tenant credential information corresponding to the tenant client; The credential information obtains and analyzes corresponding tenant information to obtain tenant identification information; according to the tenant identification information, the application context corresponding to the tenant client access service is determined and assigned to the thread where the access service request is located. In the embodiments of the present application, the beneficial effect of providing multiple sets of customized services on a multi-tenant architecture is obtained.

Description of the drawings

FIG. 1 is a schematic diagram of an embodiment of a method for implementing multi-tenant access services in an embodiment of the application;

2 is a schematic diagram of another embodiment of a method for implementing multi-tenant access services in an embodiment of the application;

Fig. 3 is a schematic diagram of an embodiment of a device for implementing multi-tenant access services in an embodiment of the application;

FIG. 4 is a schematic diagram of another embodiment of a device for implementing multi-tenant access services in an embodiment of the application;

Figure 5 is a schematic diagram of an embodiment of a device for implementing multi-tenant access services in an embodiment of the application.

Detailed ways

The embodiments of the present application provide a method, device, device and storage medium for implementing multi-tenant access services. By modifying the underlying technology of the multi-tenant architecture, the application context that adapts to a set of tenant access services on the same platform is modified to adapt. Multiple sets of independent tenants access the application context of the service, and configure common function realization classes and tenant customization function realization classes for each set of tenant access services, and start the corresponding instance of each function realization class through the application context interface programming; in the service startup phase , First load the corresponding application context for each set of tenant access services; in the service running process, obtain the corresponding application context through the tenant credential information of the tenant client and access the current thread, and start the corresponding tenant access service to obtain optimized multi-tenancy The architecture meets the beneficial effects of the different needs of multiple users.

The terms "first", "second", "third", "fourth", etc. (if any) in the description and claims of this application and the above-mentioned drawings are used to distinguish similar objects, without having to use To describe a specific order or sequence. It should be understood that the data used in this way can be interchanged under appropriate circumstances so that the embodiments described herein can be implemented in a sequence other than the content illustrated or described herein. In addition, the terms "including" or "having" and any variations thereof are intended to cover non-exclusive inclusion. For example, a process, method, system, product, or device that includes a series of steps or units is not necessarily limited to those clearly listed. Steps or units, but may include other steps or units that are not clearly listed or are inherent to these processes, methods, products, or equipment.

For ease of understanding, the following describes the specific process of the embodiment of the present application. Please refer to FIG. 1. An embodiment of the method for implementing multi-tenant access services in the embodiment of the present application includes:

101. Read a tenant configuration file, where the tenant configuration file contains customized function realization classes and/or general function realization classes corresponding to each tenant's access service;

It is understandable that the execution subject of this application may be a device for implementing multi-tenant access services, and may also be a terminal or a server, which is not specifically limited here. The embodiment of the present application takes the server as the execution subject as an example for description.

In this embodiment, the specific implementation of the method of this application is explained through the spring framework. During the development of this system, an external configuration file has been created and stored with the tenant information table and function realization classes; when the tenant access service is started, the function realization classes and/or customized function realization classes corresponding to each tenant access service specified in the tenant information table are used Common function implementation class to start the instance.

For example, tenant access service A includes Comonbean1, Comonbean2, Coonbean3, and Comonbean4; tenant access service B includes Comonbean1, Comonbean3, bean110, and bean121. Among them, Comonbean is a generic function implementation class, and bean is a custom function implementation class.

102. Create an application context corresponding to each tenant access service based on the customized function implementation class and/or general function implementation class corresponding to each tenant access service;

In this embodiment, spring belongs to a kind of container framework. Here we modify the application context container of spring's underlying technology, and modify the original platform global only one set of application contexts so that each tenant has its own application context for accessing services. First, modify the application context environment that adapts to one set of tenant access services to the application context environment that adapts to multiple sets of tenant access services. The platform server obtains the customized function implementation class and/or common function implementation class of each tenant access service. Later, based on the different needs of each tenant to access the service, the corresponding interface programming is marked. Each custom function realization class marks its own realization interface and its own tenant, and each general function realization class marks its own realization interface. A tag interface is associated with a corresponding function implementation class, and an application context corresponding to each tenant's access service is generated.

For example, tenant access service A is marked to use interface 1, interface 2, interface 3 in the application context, interface 1, interface 3, interface 4, Comonbean1 mark to realize interface 1, Comonbean2 mark to realize interface 2, bean mark to realize interface 3, and Belonging to tenant A and bean4 mark to implement interface 4 and belong to tenant A, then in the application context environment of tenant access A, associate Comonbean1 with interface 1, bean113 and interface 3, bean114 and interface 4, and get the exclusive application context of tenant access service A .

103. Receive and parse the access service request initiated by the tenant client to obtain tenant credential information corresponding to the tenant client;

In this embodiment, when a tenant client accesses the virtual application platform built by the spring framework, it needs to initiate an access service request to the platform server to enter the corresponding application interface. The header of the access service request carries the tenant credential information of the tenant client. , Used for the platform server to verify the identity of the tenant client.

One type of tenant credential information is the tenant identity token, an example of which is: field A, field B, and field C. Among them, the most important information of the tenant identity token is the load field "field B" between the two "."s. This field represents the tenant client ID of the tenant identity token and is used to help retrieve the creation time and time of the tenant client. The expiration time indicates the identity and validity of this tenant's identity token.

104. According to the tenant credential information, obtain and analyze corresponding tenant information to obtain tenant identification information;

In this embodiment, each tenant access service stores a set of configured tenant information, which is marked with tenant identification information. When the user selects the desired tenant to access the service, the tenant client ID of the user is bound to the tenant identification information corresponding to the tenant information of the tenant to access the service. Through the tenant client ID in the tenant identification information obtained in the previous step, retrieve the corresponding tenant identification information, and obtain the tenant information corresponding to the tenant identification information, so that the platform server can call the tenant access services required by the tenant client, and It can be used for the subsequent platform server to call the corresponding function implementation class for the required customized service of the tenant client.

For example, when the tenant credential information is a tenant security token, it includes the signed "field B", and the tenant client ID in the payload field is obtained after decoding. If the tenant client ID is bound to the tenant identification information I of the tenant information T, Then, the tenant identification information I is retrieved and the corresponding tenant information T is obtained.

105. According to the tenant identification information, determine the application context corresponding to the tenant client to access the service and assign it to the thread where the service access request is located.

In this embodiment, the application context corresponding to each tenant access service is also marked with tenant identification information, and the application context corresponding to the tenant access service can be found by retrieving the incoming tenant identification information; and the virtual application platform relies on the application context to achieve Each tenant independently customizes the function, specifically by calling the function of the application context to realize the interface required for class instantiation. Here, the corresponding tenant access service of the tenant client can be realized by accessing the application context by accessing the thread where the service request is located.

For example, the default function of tenant client A is function 1, function 2, and function 3. In the thread of tenant client A, there is an application context A corresponding to tenant access service A. To realize function A, Comonbean1 needs to instantiate interface 1, and to realize function 2 requires bean113 instance. To implement interface 3, implement function 3 requires bean114 to instantiate interface 4. Assigning application context A to the thread where the service request is accessed can implement function 1, function 2, and function 3 for tenant client A.

In the embodiment of this application, by modifying the underlying technology of the multi-tenant architecture, the application context that adapts to one set of tenant access services on the same platform is modified to the application context that adapts to multiple sets of independent tenant access services, and provides access for each set of tenants. Service configuration common function realization class and tenant customization function realization class, through the application context interface programming to start the corresponding instance of each function realization class; in the service start phase, first load the corresponding application context for each set of tenants to access the service; In the running process, the corresponding application context is obtained through the tenant credential information of the tenant client and access to the current thread, and the corresponding tenant access service is started, so as to obtain the beneficial effect of providing multiple sets of customized services on the multi-tenant architecture.

Referring to FIG. 2, another embodiment of the method for implementing multi-tenant access services in the embodiment of the present application includes:

201. Load a preset default application context for realizing common functions for each tenant to access services;

202. Determine that the interface required by the default application context corresponds to one or more general function implementation classes;

203. If it corresponds to a general function implementation class, use the general function implementation class as the implementation class corresponding to the interface of the default application context;

204. If there are multiple general function implementation classes, select one of the preset general function implementation classes as the implementation class corresponding to the interface required by the default application context.

In this embodiment, when the tenant access service is started, a set of common tenant access services will also be loaded to construct a default application context. For users who do not have the authority to customize functions, they can access their tenant access services by accessing common functions.

In this embodiment, the association relationship between the required interface of the default application and the general function realization class can be judged through the programming information of the required interface and the label information of the interface to which the general function realization class belongs.

In this embodiment, the interface required by the default application context may correspond to multiple general function implementation classes and custom function implementation classes. Because the custom function implementation class not only marks its own implementation interface, but also marks its tenant access service and does not include the general tenant access Service, and the interface required by each application context is also marked with its own reference preference, so when the platform server selects multiple function implementation classes corresponding to the interface required by the default application context, it selects the preset common function implementation class through the reference preference mark .

For example, the implementation classes corresponding to interface A required by the default application context are: Comonbean3, Coonbean4, Coonbean5, bean3, bean4, bean5, and the platform server directly selects the three common implementation classes from Comonbean3, Coonbean4, and Coonbean5 for instantiating the interface. A required common implementation class.

In this embodiment, by loading the default application context when the tenant access service starts, it can be used for subsequent tenant clients to call the default application context to use the general tenant access service.

205. Read a tenant configuration file, where the tenant configuration file contains customized function realization classes and/or general function realization classes corresponding to each tenant's access service;

206. Create an application context corresponding to each tenant access service based on the customized function implementation class and/or general function implementation class corresponding to each tenant access service;

In this embodiment, the specific creation process of the application context corresponding to each tenant's access service is as follows:

Parse the tenant configuration file to obtain the customized function implementation class with the first identification information and/or the general function implementation class with the second identification information corresponding to each tenant's access service;

Based on the first identification information and/or the second identification information, and the required interface of the application context corresponding to each tenant to access the service, determine the application context and each customized function implementation class and/or each general function implementation class Relationship between

Based on the association relationship, bind the required interface with the corresponding customized function realization class and/or general function realization class, generate the application context corresponding to each tenant access service and use the tenant identification information of the corresponding tenant for identification.

In this embodiment, the application can implement the creation and switching of instances during operation through dynamic agents. The tenant configuration file stores corresponding function implementation classes for each tenant to access services, and each function implementation class is identified by identification information. The first identification information corresponding to the customized function implementation class is used to identify the implemented interface and the tenant to which it belongs, and the second identification information corresponding to the general function implementation class is used to identify the implemented interface.

When a function is invoked during the use of the tenant, the creation and invocation of instances in the application context can be realized through a dynamic proxy. When the service is started, it is necessary to define annotations, application context interfaces, and annotate declarations for function implementation classes. For example, define an annotation named AbcAnnotation, pass ElementType.TYPE in @Target to indicate that the annotation can be used for function implementation classes and interfaces, and @Retention(RetentionPolicy.RUNTIME) indicates that the annotation lifetime is at runtime, and tenant services Through the reference relationship between the function realization class and the AbcAnnotation annotation, the corresponding function realization class can be called.

In this embodiment, the platform marks the interface required by the corresponding application context based on the needs of each tenant to access the service, and the application context interface programming has a corresponding relationship with the corresponding first identification information and/or second identification information to determine the application context The customized function realization class and/or each general function realization class corresponding to each interface.

In this embodiment, the function realization class refers to the ClassAnnotation annotation, and through the function identification of the interface to which the application context belongs, the two form an association relationship. The function identification of the interface required by the application context and the definition annotation of the function realization class are used for the corresponding application context interface It is bound with the function implementation class to generate the application context corresponding to the tenant access service, and is identified by the tenant identification information corresponding to the tenant access service.

207. Receive and parse the access service request initiated by the tenant client to obtain tenant credential information corresponding to the tenant client;

In this embodiment, the specific implementation process of obtaining tenant credential information by analyzing the access service request is as follows:

Intercepting the service access request initiated by the tenant client;

Determine the type of access service of the tenant client according to the access service request;

If the access service type is a non-logged-in access service, parse the access service request to obtain the tenant credential information corresponding to the tenant client as a secret key;

If the access service type is a login state access service, the access service request is parsed, and the tenant credential information corresponding to the tenant client is obtained as a tenant identity token.

In this embodiment, when a user accesses the virtual application platform through a tenant client, the platform server intercepts the access service request initiated by the tenant client through a request interceptor. The request interceptor can filter and verify access requests from the virtual application platform. The login status of the user, whether the tenant credential information in the service access request is invalid, etc.

If the access service request intercepted by the request interceptor carries the tenant identity token, according to the identity token, the session corresponding to the token is queried from the server cache, and the session validity period is obtained from the session. If the request is received time Within the validity period of the tenant identity token, it indicates that the tenant identity token is still valid and the processing flow of the access service request is executed normally; if the request receiving time exceeds the validity period of the tenant identity token, it indicates that the tenant identity order If the card is invalid, the request fails, and the processing logic of tenant identity token invalidation is executed. If a prompt message is sent to the tenant client to prompt the user to log in timeout, please log in again.

In this embodiment, the request interceptor is used to intercept the client's service access request and obtain the current login token from the cookie of the service request, query the session from the server cache according to the token, and obtain tenant information from the session. , And execute the corresponding tenant access request processing logic through the type of the tenant identification information, where the type of access service can be a non-logged-in state and a logged-on state.

In this embodiment, in the non-logged-in tenant access service, it is necessary to add a secret key to the access service request for the request interceptor to pass the verification, and execute the corresponding non-logged-in tenant access request processing logic, such as successful access After this virtual application platform, it is not possible to enter the business processing interface, there is no business processing history record, and there is no calling authority for some functional modules, etc.

In this embodiment, in the tenant access service in the login state, the tenant identity token needs to be carried in the access service request for the interceptor to verify, and the corresponding login state tenant access service request processing logic is executed, such as entering the corresponding tenant Access to the service interface, with customized functions for calling tenants to access the service, and interaction authority for functional communication with the platform server, etc.

208. According to the tenant credential information, obtain and analyze corresponding tenant information to obtain tenant identification information;

209. Determine whether the tenant credential information is a tenant identity token;

210. If the tenant credential information is a tenant identity token, create a session object corresponding to the tenant client based on the tenant identity token;

211. Generate session identification information corresponding to the session object and send it to the tenant client for storage.

212. Save the tenant information to the session object, and call a corresponding implementation class according to the tenant information stored in the session object.

In this embodiment, in the tenant access service in the login state, after receiving the tenant access request with the tenant identity token, the tenant identity token in the tenant access request needs to be verified. If the verification is successful, it is the tenant customer The client creates a corresponding session object and stores the tenant information for the function call interaction with the platform server. If the user calls function A through the tenant client, the session object communicates with the platform server to obtain the function implementation class corresponding to the function A.

In this embodiment, the platform server generates corresponding session identification information for each tenant to access the service, which is stored by the platform server on the one hand, and sent to the tenant client on the other hand and stored as a cookie.

In this embodiment, for the session identification information in the service processing request initiated by the tenant client, the tenant information to which the tenant access service belongs is obtained from the session object, and stored in the storage area of the platform server to call based on the tenant information The corresponding implementation class.

213. According to the tenant identification information, determine the application context corresponding to the tenant client's access service and assign it to the thread where the access service request is located.

214. Receive a service processing request with the session identification information and the first identification information or the second identification information that is initiated when the tenant client invokes the customization function;

215. Determine the session object corresponding to the tenant client according to the session identification information.

216. According to the first identification information or the second identification information, determine the corresponding function realization class in the tenant information stored in the session object, and instantiate the application context interface corresponding to the client service processing through the function realization class.

In this embodiment, the header of the service processing request initiated when the tenant client invokes the customized function will carry the session identification information for the platform server to retrieve the corresponding session object, and also need to carry the implementation class identification information corresponding to the customized function. For the platform server to identify the required function implementation class.

In this embodiment, the user's invocation of the customized function on the virtual application platform is based on the instantiation of the application context interface by the function implementation class, and the instantiation of the application context interface is implemented by the dynamic agent. When a user calls a custom function, the tenant information is obtained from the session object created by the tenant server when the tenant client logs in, and the interface corresponding to the function implementation class instantiation corresponding to the custom function is obtained.

In the embodiment of this application, after the user clicks to log in to the client, the QR code of the login client is displayed on the authentication authorization page for the second client to scan and perform biometric authentication and user click authorization on the login client; If the second client has authorized the login client, it will log in directly without authentication and authorization; if the second client has not authorized the login client, it will need to perform the initial authentication and authorization, and then log in directly to achieve Password-free login of the second client to the first client.

The method for implementing multi-tenant access services in the embodiments of this application is described above, and the device for implementing multi-tenant access services in the embodiments of this application is described below. Please refer to FIG. include:

The receiving module 301 is configured to read a tenant configuration file, where the tenant configuration file contains a customized function implementation class and/or a general function implementation class corresponding to each tenant's access service;

The creation module 302 is configured to create an application context corresponding to each tenant access service based on the customized function realization class and/or general function realization class corresponding to each tenant access service;

The parsing module 303 is configured to receive and parse the access service request initiated by the tenant client to obtain the tenant credential information corresponding to the tenant client; obtain and parse the corresponding tenant information according to the tenant credential information to obtain the tenant identification information;

The allocation module 304 is configured to determine the application context corresponding to the access service of the tenant client to the thread where the access service request is located according to the tenant identification information.

In the embodiment of the present application, when a user logs in to the first client, an HTTP authentication request is initiated to the authentication server, and the authentication server generates a QR code with the identification information of the first client by parsing the authentication request; the second client Initiate an authentication request to the authentication server by scanning the QR code, requesting the authentication server to determine whether the authentication server has authorized password-free login to the first client; if the second client has authorized the first client, Then the authentication server does not need to authenticate the corresponding user of the authentication server again, and the second client directly authorizes the password-free login to the first client; if the second client has not authorized the first client, the authentication server is required The authentication server authenticates the user, and after the authentication is completed, the second client authorizes to log in to the first client without secret, store the authorization record, and respond to the first client by returning the user information acquisition code to the first client The HTTP authentication request initiated by the client has passed. The first client can also obtain the user information corresponding to the second client through the user information acquisition code. Through this embodiment, the second client can realize secret-free login to the first client.

Referring to FIG. 4, another embodiment of the device for implementing multi-tenant access services in the embodiment of the present application includes:

The receiving module 401 is configured to read a tenant configuration file, where the tenant configuration file contains customized function realization classes and/or general function realization classes corresponding to each tenant's access service;

The creation module 402 is configured to create an application context corresponding to each tenant's access service based on the customized function realization class and/or general function realization class corresponding to each tenant's access service;

The parsing module 403 is configured to receive and parse the access service request initiated by the tenant client to obtain the tenant credential information corresponding to the tenant client; obtain the corresponding tenant information according to the tenant credential information and analyze it to obtain the tenant identification information;

The allocation module 404 is configured to determine the application context corresponding to the access service of the tenant client to the thread where the access service request is located according to the tenant identification information.

Specifically, the device for implementing multi-tenant access services further includes a startup module 405, which is specifically configured to:

Load the preset default application context to realize the common functions of each tenant to access the service;

Judging whether the interface required by the default application context corresponds to one or more general function implementation classes;

If it corresponds to a general function realization class, use the general function realization class as the realization class corresponding to the interface of the default application context;

If there are multiple general function implementation classes corresponding, one of the preset general function implementation classes is selected as the implementation class corresponding to the interface required by the default application context.

Specifically, the creation module 402 includes a parsing unit 4021, a screening unit 4022, and a matching unit 4023, which are used for:

The first parsing unit 4021 is configured to parse the tenant configuration file to obtain the customized function realization class with the first identification information and/or the general function realization class with the second identification information corresponding to each tenant's access service;

The screening unit 4022 is configured to determine the application context and the implementation class of each customized function and/or based on the first identification information and/or the second identification information, and the required interface for each tenant to access the application context corresponding to the service The association relationship between various general function realization classes;

The matching unit 4023 is configured to bind the required interface with the corresponding customized function realization class and/or general function realization class based on the association relationship, and generate the application context corresponding to each tenant access service and use the corresponding tenant’s The tenant identification information is used for identification.

Specifically, the parsing module 403 includes an intercepting unit 4031, a discrimination unit 4032, and a parsing unit 4033, which are used for:

The intercepting unit 4031 is configured to intercept the service access request initiated by the tenant client;

The determining unit 4032 is configured to determine the access service type of the tenant client according to the access service request;

The second parsing unit 4033 is configured to parse the access service request if the access service type is a non-login access service, and obtain the tenant credential information corresponding to the tenant client as a secret key; if the access service type To access the service in the login state, the access service request is parsed, and the tenant credential information corresponding to the tenant client is obtained as the tenant identity token.

Specifically, the device for implementing multi-tenant access services further includes a recording module 406, which is used to:

If the tenant credential information is a tenant identity token, create a session object corresponding to the tenant client based on the tenant identity token;

Generate the session identification information corresponding to the session object and send it to the tenant client for storage;

Save the tenant information to the session object, and call the corresponding implementation class according to the tenant information stored in the session object.

Specifically, the allocation module 404 is also used for:

Receiving a service processing request with the session identification information and the first identification information or the second identification information initiated when the tenant client invokes the customization function;

Determine the session object corresponding to the tenant client according to the session identification information;

According to the first identification information or the second identification information, the corresponding function realization class in the tenant information stored in the session object is determined, and the application context interface corresponding to the client service processing is instantiated through the function realization class.

The above figures 3 and 4 describe in detail the multi-tenant access service implementation device in the embodiment of the present application from the perspective of modular functional entities, and the following describes the multi-tenant access service implementation device in the embodiment of the present application in detail from the perspective of hardware processing.

FIG. 5 is a schematic structural diagram of a device for implementing multi-tenant access services provided by an embodiment of the present application. The device 500 for implementing multi-tenant access services may have relatively large differences due to different configurations or performances, and may include one or more processors (central processing units, CPU) 510 (for example, one or more processors) and memory 520, one or more storage media 530 (for example, one or one storage device with a large amount of storage) storing application programs 533 or data 532. Among them, the memory 520 and the storage medium 530 may be short-term storage or persistent storage. The program stored in the storage medium 530 may include one or more modules (not shown in the figure), and each module may include a series of instruction operations in the device 500 for implementing multi-tenant access services. Further, the processor 510 may be configured to communicate with the storage medium 530, and execute a series of instruction operations in the storage medium 530 on the device 500 for implementing multi-tenant access services.

The device 500 for implementing multi-tenant access services may also include one or more power supplies 540, one or more wired or wireless network interfaces 550, one or more input and output interfaces 560, and/or one or more operating systems 531, for example Windows Serve, Mac OS X, Unix, Linux, FreeBSD, etc. Those skilled in the art can understand that the structure of the multi-tenant access service implementation device shown in FIG. 5 does not constitute a limitation on the multi-tenant access service implementation device, and may include more or less components than shown in the figure, or a combination of certain components , Or different component arrangements.

This application also provides a computer-readable storage medium. The computer-readable storage medium may be a non-volatile computer-readable storage medium, and the computer-readable storage medium may also be a volatile computer-readable storage medium. The computer-readable storage medium stores instructions, and when the instructions are executed on the computer, the computer executes the following steps:

Reading a tenant configuration file, where the tenant configuration file contains customized function realization classes and/or general function realization classes corresponding to each tenant's access service;

Create an application context corresponding to each tenant access service based on the customized function realization class and/or general function realization class corresponding to each tenant access service;

Receiving and analyzing the access service request initiated by the tenant client to obtain tenant credential information corresponding to the tenant client;

According to the tenant credential information, obtain and analyze corresponding tenant information to obtain tenant identification information;

According to the tenant identification information, the application context corresponding to the access service of the tenant client is determined and assigned to the thread where the service access request is located.

Further, the computer-readable storage medium may mainly include a storage program area and a storage data area, where the storage program area may store an operating system, an application program required by at least one function, etc.; the storage data area may store Data created by the use of nodes, etc.

Those skilled in the art can clearly understand that, for the convenience and conciseness of the description, the specific working process of the above-described system, device, and unit can refer to the corresponding process in the foregoing method embodiment, which will not be repeated here.

If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer readable storage medium. Based on this understanding, the technical solution of the present application essentially or the part that contributes to the existing technology or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium , Including several instructions to make a computer device (which may be a personal computer, a server, or a network device, etc.) execute all or part of the steps of the methods described in the various embodiments of the present application. The aforementioned storage media include: U disk, mobile hard disk, read-only memory (read-only memory, ROM), random access memory (random access memory, RAM), magnetic disks or optical disks and other media that can store program codes. .

The blockchain referred to in this application is a new application mode of computer technology such as distributed data storage, point-to-point transmission, consensus mechanism, and encryption algorithm. Blockchain, essentially a decentralized database, is a series of data blocks associated with cryptographic methods. Each data block contains a batch of network transaction information for verification. The validity of the information (anti-counterfeiting) and the generation of the next block. The blockchain can include the underlying platform of the blockchain, the platform product service layer, and the application service layer.

As mentioned above, the above embodiments are only used to illustrate the technical solutions of the present application, but not to limit them; although the present application has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that: The technical solutions recorded in the embodiments are modified, or some of the technical features are equivalently replaced; and these modifications or replacements do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of the present application.

Claims

A method for implementing multi-tenant access services, including:

Reading a tenant configuration file, where the tenant configuration file contains customized function realization classes and/or general function realization classes corresponding to each tenant's access service;

Create an application context corresponding to each tenant access service based on the customized function realization class and/or general function realization class corresponding to each tenant access service;

Receiving and analyzing the access service request initiated by the tenant client to obtain tenant credential information corresponding to the tenant client;

According to the tenant credential information, obtain and analyze corresponding tenant information to obtain tenant identification information;

According to the tenant identification information, the application context corresponding to the access service of the tenant client is determined and assigned to the thread where the service access request is located.
The method for implementing multi-tenant access services according to claim 1, wherein, in the reading tenant configuration file, the tenant configuration file contains customized function realization classes and/or general function realization classes corresponding to each tenant access service Before the steps, it also includes:

Load the preset default application context to realize the common functions of each tenant to access the service;

Judging whether the interface required by the default application context corresponds to one or more general function implementation classes;

If it corresponds to a general function realization class, use the general function realization class as the realization class corresponding to the interface of the default application context;

If there are multiple general function implementation classes corresponding, one of the preset general function implementation classes is selected as the implementation class corresponding to the interface required by the default application context.
The method for implementing multi-tenant access services according to claim 1, wherein the application context corresponding to each tenant access service is created based on the customized function implementation class and/or general function implementation class corresponding to each tenant access service, include:

Parse the tenant configuration file to obtain the customized function implementation class with the first identification information and/or the general function implementation class with the second identification information corresponding to each tenant's access service;

Based on the first identification information and/or the second identification information, and the required interface of the application context corresponding to each tenant to access the service, determine the application context and each customized function implementation class and/or each general function implementation class Relationship between

Based on the association relationship, bind the required interface with the corresponding customized function realization class and/or general function realization class, generate the application context corresponding to each tenant access service and use the tenant identification information of the corresponding tenant for identification.
The method for implementing multi-tenant access services according to claim 1, wherein the receiving and parsing the access service request initiated by the tenant client to obtain the tenant credential information corresponding to the tenant client includes:

Intercepting the service access request initiated by the tenant client;

Determine the type of access service of the tenant client according to the access service request;

If the access service type is a non-logged-in access service, parse the access service request to obtain the tenant credential information corresponding to the tenant client as a secret key;

If the access service type is a login state access service, the access service request is parsed, and the tenant credential information corresponding to the tenant client is obtained as a tenant identity token.
The method for implementing multi-tenant access services according to claim 4, wherein after the step of obtaining and analyzing corresponding tenant information according to the tenant credential information to obtain tenant identification information, the method further comprises:

If the tenant credential information is a tenant identity token, create a session object corresponding to the tenant client based on the tenant identity token;

Generate the session identification information corresponding to the session object and send it to the tenant client for storage;

Save the tenant information to the session object, and call the corresponding implementation class according to the tenant information stored in the session object.
The method for implementing multi-tenant access services according to claim 1, wherein after the step of determining the application context corresponding to the tenant client access service according to the tenant identification information and assigning it to the thread where the access service request is located ,Also includes:

Receiving a service processing request with the session identification information and the first identification information or the second identification information initiated when the tenant client invokes the customization function;

Determine the session object corresponding to the tenant client according to the session identification information;

According to the first identification information or the second identification information, the corresponding function realization class in the tenant information stored in the session object is determined, and the application context interface corresponding to the client service processing is instantiated through the function realization class.
A device for implementing multi-tenant access services, including a memory, a processor, and computer-readable instructions stored on the memory and capable of running on the processor. The processor executes the computer-readable instructions as follows step:

Reading a tenant configuration file, where the tenant configuration file contains customized function realization classes and/or general function realization classes corresponding to each tenant's access service;

Create an application context corresponding to each tenant access service based on the customized function realization class and/or general function realization class corresponding to each tenant access service;

Receiving and analyzing the access service request initiated by the tenant client to obtain tenant credential information corresponding to the tenant client;

According to the tenant credential information, obtain and analyze corresponding tenant information to obtain tenant identification information;

According to the tenant identification information, the application context corresponding to the access service of the tenant client is determined and assigned to the thread where the service access request is located.
According to the device for implementing multi-tenant access services according to claim 7, the processor further implements the following steps when executing the computer program:

Load the preset default application context to realize the common functions of each tenant to access the service;

Judging whether the interface required by the default application context corresponds to one or more general function implementation classes;

If it corresponds to a general function realization class, use the general function realization class as the realization class corresponding to the interface of the default application context;

If there are multiple general function implementation classes corresponding, one of the preset general function implementation classes is selected as the implementation class corresponding to the interface required by the default application context.
According to the device for implementing multi-tenant access services according to claim 7, the processor further implements the following steps when executing the computer program:

Parse the tenant configuration file to obtain the customized function implementation class with the first identification information and/or the general function implementation class with the second identification information corresponding to each tenant's access service;

Based on the first identification information and/or the second identification information, and the required interface of the application context corresponding to each tenant to access the service, determine the application context and each customized function implementation class and/or each general function implementation class Relationship between

Based on the association relationship, bind the required interface with the corresponding customized function realization class and/or general function realization class, generate the application context corresponding to each tenant access service and use the tenant identification information of the corresponding tenant for identification.
According to the device for implementing multi-tenant access services according to claim 7, the processor further implements the following steps when executing the computer program:

Intercepting the service access request initiated by the tenant client;

Determine the type of access service of the tenant client according to the access service request;

If the access service type is a non-logged-in access service, parse the access service request to obtain the tenant credential information corresponding to the tenant client as a secret key;

If the access service type is a login state access service, the access service request is parsed, and the tenant credential information corresponding to the tenant client is obtained as a tenant identity token.
According to the device for implementing multi-tenant access services according to claim 10, the processor further implements the following steps when executing the computer program:

If the tenant credential information is a tenant identity token, create a session object corresponding to the tenant client based on the tenant identity token;

Generate the session identification information corresponding to the session object and send it to the tenant client for storage;

Save the tenant information to the session object, and call the corresponding implementation class according to the tenant information stored in the session object.
According to the device for implementing multi-tenant access services according to claim 7, the processor further implements the following steps when executing the computer program:

Receiving a service processing request with the session identification information and the first identification information or the second identification information initiated when the tenant client invokes the customization function;

Determine the session object corresponding to the tenant client according to the session identification information;

According to the first identification information or the second identification information, the corresponding function realization class in the tenant information stored in the session object is determined, and the application context interface corresponding to the client service processing is instantiated through the function realization class.
A computer-readable storage medium in which computer instructions are stored, and when the computer instructions are executed on a computer, the computer executes the following steps:

Reading a tenant configuration file, where the tenant configuration file contains customized function realization classes and/or general function realization classes corresponding to each tenant's access service;

Create an application context corresponding to each tenant access service based on the customized function realization class and/or general function realization class corresponding to each tenant access service;

Receiving and analyzing the access service request initiated by the tenant client to obtain tenant credential information corresponding to the tenant client;

According to the tenant credential information, obtain and analyze corresponding tenant information to obtain tenant identification information;

According to the tenant identification information, the application context corresponding to the access service of the tenant client is determined and assigned to the thread where the service access request is located.
The computer-readable storage medium according to claim 13, when the computer instructions are executed on the computer, the computer is caused to further execute the following steps:

Load the preset default application context to realize the common functions of each tenant to access the service;

Judging whether the interface required by the default application context corresponds to one or more general function implementation classes;

If it corresponds to a general function realization class, use the general function realization class as the realization class corresponding to the interface of the default application context;

If there are multiple general function implementation classes corresponding, one of the preset general function implementation classes is selected as the implementation class corresponding to the interface required by the default application context.
The computer-readable storage medium according to claim 13, when the computer instructions are executed on the computer, the computer is caused to further execute the following steps:

Parse the tenant configuration file to obtain the customized function implementation class with the first identification information and/or the general function implementation class with the second identification information corresponding to each tenant's access service;

Based on the first identification information and/or the second identification information, and the required interface of the application context corresponding to each tenant to access the service, determine the application context and each customized function implementation class and/or each general function implementation class Relationship between

Based on the association relationship, bind the required interface with the corresponding customized function realization class and/or general function realization class, generate the application context corresponding to each tenant access service and use the tenant identification information of the corresponding tenant for identification.
The computer-readable storage medium according to claim 13, when the computer instructions are executed on the computer, the computer is caused to further execute the following steps:

Intercepting the service access request initiated by the tenant client;

Determine the type of access service of the tenant client according to the access service request;

If the access service type is a non-logged-in access service, parse the access service request to obtain the tenant credential information corresponding to the tenant client as a secret key;

If the access service type is a login state access service, the access service request is parsed, and the tenant credential information corresponding to the tenant client is obtained as a tenant identity token.
The computer-readable storage medium according to claim 16, when the computer instructions are executed on the computer to execute the following steps, the computer is caused to further execute the following steps:

If the tenant credential information is a tenant identity token, create a session object corresponding to the tenant client based on the tenant identity token;

Generate the session identification information corresponding to the session object and send it to the tenant client for storage;

Save the tenant information to the session object, and call the corresponding implementation class according to the tenant information stored in the session object.
The computer-readable storage medium according to claim 13, when the computer instructions are executed on the computer, the computer is caused to further execute the following steps:

Receiving a service processing request with the session identification information and the first identification information or the second identification information initiated when the tenant client invokes the customization function;

Determine the session object corresponding to the tenant client according to the session identification information;

According to the first identification information or the second identification information, the corresponding function realization class in the tenant information stored in the session object is determined, and the application context interface corresponding to the client service processing is instantiated through the function realization class.
A device for implementing multi-tenant access services, wherein the device for implementing multi-tenant access services includes:

The receiving module is used to read a tenant configuration file, where the tenant configuration file contains a customized function implementation class and/or a general function implementation class corresponding to each tenant's access service;

The creation module is used to create an application context corresponding to each tenant's access service based on the customized function realization class and/or the general function realization class corresponding to each tenant's access service;

The parsing module is used to receive and parse the access service request initiated by the tenant client to obtain the tenant credential information corresponding to the tenant client; according to the tenant credential information, obtain and parse the corresponding tenant information to obtain the tenant identification information;

The allocation module is configured to determine the application context corresponding to the tenant client's access service according to the tenant identification information and allocate it to the thread where the access service request is located.
The device for implementing multi-tenant access services according to claim 19, wherein the creation module further comprises:

The first parsing unit is configured to parse the tenant configuration file to obtain the customized function realization class with the first identification information and/or the general function realization class with the second identification information corresponding to each tenant's access service;

The screening unit is configured to determine the application context and the implementation class of each customized function and/or each of the application contexts based on the first identification information and/or the second identification information, and the required interfaces for each tenant to access the service corresponding application context. Association relationship between common function realization classes;

The matching unit is configured to bind the required interface with the corresponding customized function realization class and/or general function realization class based on the association relationship, and generate the corresponding application context for each tenant to access the service and use the tenant of the corresponding tenant Identification information for identification.