CN112099964A - Interface calling method and device, storage medium and electronic device - Google Patents

Abstract

The invention discloses an interface calling method, an interface calling device, a storage medium and an electronic device. Wherein, the method comprises the following steps: acquiring a first interface calling request sent by a client, wherein the first interface calling request carries a target interface address of a target interface and a first interface calling parameter; responding to the first interface calling request, and acquiring an original interface address corresponding to a target interface address from a plurality of groups of interface address pairs with corresponding relations; converting the first interface calling parameter into a second interface calling parameter; and sending a second interface calling request carrying a second interface calling parameter to the original interface address. The invention solves the technical problem of low interface calling efficiency in the related technology.

Description

Interface calling method and device, storage medium and electronic device

Technical Field

The invention relates to the field of communication, in particular to a method and a device for calling an interface, a storage medium and an electronic device.

Background

The existing various software can only forward the interface one to one within a specific range, and the function is single, and the function is not capable of further packaging the original interface.

In view of the above problems, no effective solution has been proposed.

Disclosure of Invention

The embodiment of the invention provides an interface calling method, an interface calling device, a storage medium and an electronic device, and at least solves the technical problem of low interface calling efficiency in the related technology.

According to an aspect of an embodiment of the present invention, there is provided an interface calling method, including: acquiring a first interface calling request sent by a client, wherein the first interface calling request is used for requesting to call a target interface to transmit target data, the first interface calling request carries a target interface address of the target interface and a first interface calling parameter, and the first interface calling parameter is an interface calling parameter which accords with a parameter transmission format specified by the target interface; responding to the first interface calling request, and acquiring an original interface address corresponding to the target interface address from a plurality of groups of interface address pairs with corresponding relations; converting the first interface calling parameter into a second interface calling parameter, wherein the second interface calling parameter is an interface calling parameter which conforms to a parameter transmission format specified by an original interface, and the original interface is an interface indicated by the original interface address; and sending a second interface calling request carrying the second interface calling parameter to the original interface address, wherein the second interface calling request is used for requesting to call the original interface to transmit the target data.

Optionally, before obtaining the first interface call request sent by the client, the method further includes: receiving a third interface calling request sent by the client, wherein the third interface calling request carries a target user identifier, a target authorization code and first signature data, and the first signature data is obtained by signing the first interface calling parameter by the client; verifying whether the first signature data is legal and verifying whether the authorization code is expired; under the condition that the first signature data is verified to be legal and the authorization code is verified to be unexpired, generating a token value for the target user identifier, and storing the target user identifier and the token value which have a corresponding relation; sending the token value to the client, wherein the token value is used to prevent malicious invocation of the target interface.

Optionally, the obtaining of the first interface call request sent by the client includes: and receiving the first interface calling request which is sent by the client and carries the token value.

Optionally, the receiving the first interface call request carrying the token value sent by the client includes: and receiving the first interface calling request sent by the client, wherein the first interface calling request carries the target interface address and second signature data, and the second signature data is obtained by the client signing data including the token value and the first interface calling parameter.

Optionally, in response to the first interface call request, acquiring the original interface address corresponding to the target interface address from the plurality of groups of interface address pairs having the corresponding relationship includes: responding to the first interface calling request, and verifying whether the second signature data is legal or not; if the second signature data is verified to be legal, verifying whether the service time of the token value is within the valid period; under the condition that the service time of the token value is verified to be within the validity period, acquiring the original interface address corresponding to the target interface address from the plurality of groups of interface address pairs with corresponding relations; and prolonging the validity period corresponding to the token value by a target time.

Optionally, in response to the first interface call request, acquiring the original interface address corresponding to the target interface address from the plurality of groups of interface address pairs having the corresponding relationship includes: acquiring a target interface identifier of the target interface from the target interface address; acquiring original interface identifications corresponding to the target interface identifications from a plurality of groups of interface identification pairs with corresponding relations; verifying whether the first interface calling parameter meets the parameter condition corresponding to the original interface identifier; and under the condition that the first interface calling parameter is verified to meet the parameter condition corresponding to the original interface identifier, acquiring the original interface address corresponding to the original interface identifier.

Optionally, before obtaining an original interface address corresponding to the target interface address from a plurality of sets of interface address pairs having a correspondence relationship, the method further includes: acquiring parameter conditions corresponding to the original interface; verifying whether the parameter condition meets the configuration of the original interface; under the condition that the parameter condition is verified to be in accordance with the configuration of the original interface, storing the original interface and the parameter condition which have a corresponding relationship; and acquiring the target interface, and storing the target interface and the original interface which have a corresponding relationship.

Optionally, after sending the second interface call request carrying the second interface call parameter to the original interface address, the method further includes: acquiring first response information returned by the original interface responding to the target data; converting the first response information into second response information in a target format; and sending the second response information to the client.

Optionally, sending the second response information to the client includes: encrypting the second response information; and sending the encrypted second response information to the client.

Optionally, before obtaining the first interface call request sent by the client, the method further includes: receiving registration information sent by the client, wherein the registration information is used for requesting to acquire the calling permission of the target interface, and the registration information carries attribute information of the client; distributing calling authority for the client according to the registration information, wherein the calling authority is used for indicating an interface allowing the client to call and the duration of allowing the client to call the interface; generating a target user identifier for the client and generating a target authorization code corresponding to the invocation permission; and sending the target user identification, the target authorization code and the target interface address to the client.

Optionally, the original interface includes: an http interface, and/or a webservice interface.

According to another aspect of the embodiments of the present invention, there is also provided an interface invoking device, including: the system comprises a first acquisition module, a first interface calling module and a second acquisition module, wherein the first interface calling module is used for acquiring a first interface calling request sent by a client, the first interface calling request is used for requesting to call a target interface to transmit target data, the first interface calling request carries a target interface address of the target interface and a first interface calling parameter, and the first interface calling parameter is an interface calling parameter which accords with a parameter transmission format specified by the target interface; a second obtaining module, configured to respond to the first interface call request, and obtain an original interface address corresponding to the target interface address from a plurality of sets of interface address pairs having a correspondence relationship; a first conversion module, configured to convert the first interface call parameter into a second interface call parameter, where the second interface call parameter is an interface call parameter that conforms to a parameter transmission format specified by an original interface, and the original interface is an interface indicated by the original interface address; and the first sending module is used for sending a second interface calling request carrying the second interface calling parameter to the original interface address, wherein the second interface calling request is used for requesting to call the original interface to transmit the target data.

Optionally, the apparatus further comprises: a first receiving unit, configured to receive a third interface call request sent by the client, where the third interface call request carries a target user identifier, a target authorization code, and first signature data, and the first signature data is data obtained by signing, by the client, the first interface call parameter; a first verification unit configured to verify whether the first signature data is legitimate; a second verification unit configured to verify whether the authorization code is expired; a generating unit, configured to generate a token value for the target user identifier and store the target user identifier and the token value having a corresponding relationship when the first signature data is verified to be legal and the authorization code is verified to be unexpired; and the first sending unit is used for sending the token value to the client, wherein the token value is used for preventing the target interface from being invoked maliciously.

Optionally, the first obtaining module includes: and the second receiving unit is used for receiving the first interface calling request which is sent by the client and carries the token value.

Optionally, the second receiving unit is configured to: and receiving the first interface calling request sent by the client, wherein the first interface calling request carries the target interface address and second signature data, and the second signature data is obtained by the client signing data including the token value and the first interface calling parameter.

Optionally, the second obtaining module includes: the third verification unit is used for responding to the first interface calling request and verifying whether the second signature data is legal or not; a fourth verifying unit, configured to verify whether the usage time of the token value is within the validity period, if it is verified that the second signature data is valid; a first obtaining unit, configured to obtain, from the multiple sets of interface address pairs having a correspondence relationship, the original interface address corresponding to the target interface address when it is verified that the usage time of the token value is within the validity period; and the processing unit is used for prolonging the validity period corresponding to the token value by a target time.

Optionally, the second obtaining module includes: a second obtaining unit, configured to obtain a target interface identifier of the target interface from the target interface address; a third obtaining unit, configured to obtain, from multiple groups of interface identifier pairs having a corresponding relationship, an original interface identifier corresponding to the target interface identifier; a fifth verifying unit, configured to verify whether the first interface invocation parameter meets a parameter condition corresponding to the original interface identifier; and the fourth obtaining unit is used for obtaining the original interface address corresponding to the original interface identifier under the condition that the first interface calling parameter is verified to meet the parameter condition corresponding to the original interface identifier.

Optionally, the apparatus further comprises: a third obtaining module, configured to obtain a parameter condition corresponding to an original interface before obtaining the original interface address corresponding to the target interface address from a plurality of sets of interface address pairs having a correspondence relationship; the verification module is used for verifying whether the parameter condition accords with the configuration of the original interface; and the storage module is used for storing the original interface and the parameter condition with the corresponding relationship under the condition that the parameter condition is verified to be in accordance with the configuration of the original interface, acquiring the target interface and storing the target interface and the original interface with the corresponding relationship.

Optionally, the apparatus further comprises: a fourth obtaining module, configured to obtain first response information returned by the original interface in response to the target data after sending a second interface call request carrying the second interface call parameter to the original interface address; the second conversion module is used for converting the first response information into second response information in a target format; and the second sending module is used for sending the second response information to the client.

Optionally, the second sending module includes: an encryption unit configured to encrypt the second response information; and the second sending unit is used for sending the encrypted second response information to the client.

Optionally, the apparatus further comprises: a receiving module, configured to receive registration information sent by the client before obtaining the first interface call request sent by the client, where the registration information is used to request to obtain a call permission of the target interface, and the registration information carries attribute information of the client; the allocation module is used for allocating calling authority to the client according to the registration information, wherein the calling authority is used for indicating an interface allowing the client to call and the time length allowing the client to call the interface; a generation module, configured to generate a target user identifier for the client, and generate a target authorization code corresponding to the invocation permission; a third sending module, configured to send the target user identifier, the target authorization code, and the target interface address to the client.

Optionally, the original interface includes: an http interface, and/or a webservice interface.

According to another aspect of the embodiments of the present invention, there is also provided a storage medium having a computer program stored therein, wherein the computer program is configured to perform the method of any one of the above when executed.

According to another aspect of the embodiments of the present invention, there is also provided an electronic apparatus, including a memory and a processor, the memory having a computer program stored therein, the processor being configured to execute the method described in any one of the above through the computer program.

In the embodiment of the invention, a first interface calling request sent by a client is obtained, wherein the first interface calling request is used for requesting to call a target interface to transmit target data, the first interface calling request carries a target interface address of the target interface and a first interface calling parameter, and the first interface calling parameter is an interface calling parameter which accords with a parameter transmission format specified by the target interface; responding to the first interface calling request, and acquiring an original interface address corresponding to a target interface address from a plurality of groups of interface address pairs with corresponding relations; converting the first interface calling parameter into a second interface calling parameter, wherein the second interface calling parameter is an interface calling parameter which accords with a parameter transmission format specified by an original interface, and the original interface is an interface indicated by an original interface address; and sending a second interface calling request carrying a second interface calling parameter to the original interface address, wherein the second interface calling request is used for requesting to call the original interface to transmit target data, forwarding of multiple groups of interface addresses with corresponding relations can be carried out, the provided target interface has a specified parameter transmission format, the original interface can be further packaged, and the provided target interface also has a corresponding target interface address, so that the original interface address is hidden, the technical effect of improving the interface forwarding efficiency is realized, and the technical problem of low interface calling efficiency in the related technology is solved.

Drawings

The accompanying drawings, which are included to provide a further understanding of the invention and are incorporated in and constitute a part of this application, illustrate embodiment(s) of the invention and together with the description serve to explain the invention without limiting the invention. In the drawings:

FIG. 1 is a diagram illustrating an alternative interface invocation method according to an embodiment of the present invention;

FIG. 2 is a schematic diagram of an alternative interface invoking device according to an embodiment of the present invention;

FIG. 3 is a diagram illustrating an application scenario of a method for invoking an alternative interface according to an embodiment of the present invention; and

fig. 4 is a schematic diagram of an alternative electronic device according to an embodiment of the invention.

Detailed Description

In order to make the technical solutions of the present invention better understood, the technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.

It should be noted that the terms "first," "second," and the like in the description and claims of the present invention and in the drawings described above are used for distinguishing between similar elements and not necessarily for describing a particular sequential or chronological order. It is to be understood that the data so used is interchangeable under appropriate circumstances such that the embodiments of the invention described herein are capable of operation in sequences other than those illustrated or described herein. Furthermore, the terms "comprises," "comprising," and "having," and any variations thereof, are intended to cover a non-exclusive inclusion, such that a process, method, system, article, or apparatus that comprises a list of steps or elements is not necessarily limited to those steps or elements expressly listed, but may include other steps or elements not expressly listed or inherent to such process, method, article, or apparatus.

According to an aspect of an embodiment of the present invention, there is provided a method for calling an interface, as shown in fig. 1, the method including:

s102, a first interface calling request sent by a client is obtained, wherein the first interface calling request is used for requesting to call a target interface to transmit target data, the first interface calling request carries a target interface address of the target interface and a first interface calling parameter, and the first interface calling parameter is an interface calling parameter which accords with a parameter transmission format specified by the target interface;

s104, responding to the first interface calling request, and acquiring an original interface address corresponding to a target interface address from a plurality of groups of interface address pairs with corresponding relations;

s106, converting the first interface calling parameter into a second interface calling parameter, wherein the second interface calling parameter is an interface calling parameter which accords with a parameter transmission format specified by an original interface, and the original interface is an interface indicated by an original interface address;

and S108, sending a second interface calling request carrying a second interface calling parameter to the original interface address, wherein the second interface calling request is used for requesting to call the original interface to transmit target data.

Optionally, in this embodiment, the interface calling method may be, but is not limited to, applied in a scenario in which an interface calling request is forwarded. The method for invoking the interface may be, but is not limited to, applied to a device having an interface forwarding function, the device being disposed between an interface caller device and a server providing an original interface, and the interface caller device may be, but is not limited to, a client including various types of applications, for example, an online education application, an instant messaging application, a community space application, a game application, a shopping application, a browser application, a financial application, a multimedia application, a live broadcast application, a government system application, and the like. In particular, the method can be applied to, but not limited to, a scenario in which a client of the government affairs system application calls a government affairs system server interface, or can also be applied to, but not limited to, a scenario in which a financial application server interface is called by a financial application client, so as to improve the efficiency of interface calling. The above is only an example, and this is not limited in this embodiment.

Optionally, in this embodiment, the first interface call request may be used to request to call the target interface to transmit the target data, for example: the first interface call request may be for requesting a server to perform an operation, provide data, and the like.

Optionally, in this embodiment, the first interface call request sent by the client carries a target interface address and a first interface call parameter, and the target interface requested to be called by the client can be analyzed through the target interface address. The first interface call parameter needs to conform to the parameter transmission format specified by the target interface.

Optionally, in this embodiment, the original interface may include, but is not limited to: http interface, webservice interface, etc.

Optionally, in this embodiment, the sets of interface address pairs having the corresponding relationship may be, but are not limited to, configured by an administrator at an initial stage. The administrator records the information of the original interface, including the access time, access mode (http, web service), calling mode, etc. of the interface, if the interface is an http interface, the administrator can also fill in the url address of the original interface, the name of the interface parameter, the type of the parameter, the length of the parameter, whether the interface is allowed to be empty, etc. If the webservice interface is the webservice interface, the wsdl address, the user name, the password and the like of the webservice can be added, the wsdl file is automatically analyzed according to the address, and the interface name, the interface entry parameter and the return parameter in the wsdl file are all analyzed. The administrator can submit the save after confirming on the form that there is no error. The administrator can also configure the information of the target interface, fill in a new interface name (Chinese name, English name) on the form, call the mode, return whether the parameter is encrypted (the encryption mode can select DES/AES/SM2, etc.), and select the original interface corresponding to the target interface. And obtaining a group of interfaces with corresponding relations. After the submission and the storage, the system generates a new url address according to the new interface name (English name), wherein the url address is as follows: http:// 127.0.0.1/getApiInterface/English name/. The new interface address and the original interface address form a group of interface address pairs with corresponding relation.

Optionally, in this embodiment, the new target interface conforms to the standard restful interface specification, where the chinese and english names (i.e., target interface identifiers) are filled in by the administrator, and the english name may be used as a parameter of the interface when the interface address is called, so as to hide the original interface address.

Optionally, in this embodiment, the system stores a parameter transmission format specified by the original interface, such as: interface parameter name, parameter type, parameter length, whether null is allowed, etc. And converting the interface calling parameters according to the parameter transmission format specified by the original interface. And enabling the converted interface calling parameters to meet the parameter requirements of the original interface.

Therefore, through the steps, the conversion and calling of a plurality of groups of interface addresses with corresponding relations can be carried out, the provided target interface has the specified parameter transmission format, the further encapsulation of the original interface can be realized, and the provided target interface also has the corresponding target interface address, so that the hiding of the original interface address is realized, the technical effect of improving the interface forwarding efficiency is realized, and the technical problem of low interface calling efficiency in the related technology is solved.

As an optional scheme, before acquiring the first interface call request sent by the client, the method further includes:

s1, receiving a third interface calling request sent by the client, wherein the third interface calling request carries a target user identifier, a target authorization code and first signature data, and the first signature data is data obtained by the client signing the first interface calling parameter;

s2, verifying whether the first signature data is legal and verifying whether the authorization code is expired;

s3, generating a token value for the target user identifier and storing the target user identifier and the token value with corresponding relation under the condition that the first signature data is verified to be legal and the authorization code is not expired;

and S4, sending a token value to the client, wherein the token value is used for preventing malicious calling of the target interface.

Optionally, in this embodiment, before the client calls the target interface, a third interface call request may be sent to obtain a Token value (Token) interface to prevent malicious call of the target interface.

Optionally, in this embodiment, the client signs the first interface call parameter first to obtain first signature data. The signature mode can be but is not limited to the SM2 algorithm, the first character of the parameter name is subjected to ascending sorting according to the key value ASCII code of the first character (letter ascending sorting), if the same character is encountered, the second character is subjected to ascending sorting according to the key value ASCII code of the second character, and the like, then the sorted parameters and the corresponding values are combined into a format of ' parameter value ', the parameters are connected by using & ' character, the generated character string is the character string to be signed, finally, the spliced character string to be signed is subjected to SM2 hash processing, the generated signature is assigned to sign parameters, the first signature data is obtained, and the first signature data is spliced into the request parameters.

Optionally, in this embodiment, after the third interface call request is obtained, it is first verified whether the first signature data is legal, that is, the same preset rule is adopted to recalculate the signature value, and the signature value is compared with the first signature data, if the comparison is consistent, the signature verification is passed, and if the signature verification is passed, it is further verified whether the target authorization code is expired. If not, a token value is generated for the target user identification of the client.

Optionally, in this embodiment, both the target user identifier and the target authorization code may be generated by the system and then sent to the client. The target user identification is a user identification generated by the system for the client, such as an application ID or the like. The target authorization code is used for calling the interface calling authority information distributed by the system for the client according to the information of the client. And the interface calling authority information of the client is stored in the system as target authorization information and has a corresponding relation with the target user identification. The system may determine whether the target authorization code is expired by comparing the target authorization code to the target authorization information. Or, the authorization period may also be carried in the target authorization code, and whether the authorization period carried by the target authorization code expires is determined directly by whether the authorization period is a failure period.

As an optional scheme, the obtaining the first interface call request sent by the client includes:

and receiving the first interface calling request which is sent by the client and carries the token value.

Optionally, in this embodiment, the client may carry the token value in the first interface call request to send.

As an optional scheme, receiving a first interface call request carrying a token value sent by a client includes:

s1, receiving a first interface calling request sent by the client, wherein the first interface calling request carries a target interface address and second signature data, and the second signature data is data obtained by the client signing data comprising a token value and a first interface calling parameter.

Optionally, in this embodiment, after obtaining the token, the client may call the interface, place the token value in the first interface call parameter, and sign the first interface call parameter including the token value, where a signing method is the same as a method for generating the first signature data, so as to obtain the second signature data. The preservation time of Token can be set according to actual conditions, for example, the preservation time can be set to half an hour, and the Token exceeding the preservation time is invalid.

As an optional scheme, responding to the first interface call request, acquiring an original interface address corresponding to the target interface address from a plurality of interface address pairs having a correspondence relationship includes:

s1, responding to the first interface calling request, and verifying whether the second signature data is legal;

s2, verifying whether the service time of the token value is in the valid period under the condition that the second signature data is verified to be legal;

s3, under the condition that the service time of the token value is verified to be within the validity period, obtaining the original interface address corresponding to the target interface address from a plurality of groups of interface address pairs with corresponding relations;

and S4, prolonging the validity period corresponding to the token value by the target time.

Optionally, in this embodiment, after receiving the first interface call request of the client, the system first verifies whether the second signature data is legal, then verifies whether the token is invalid, and then resolves the target interface address to obtain the corresponding original interface address, and initiates a call to the original interface.

Optionally, in this embodiment, the generated token value is saved in the background and returned to the client, and the storage validity period is set for the generated token value as the validity period (for example, half an hour), and if the token is used in the validity period, the token automatically delays the target time (for example, half an hour).

Optionally, in this embodiment, after verifying whether the user signature is legal, if not, the user signature may be directly returned to the client and "signature is illegal" is prompted. After verifying whether the token is invalid, if the token is invalid, the token can be returned to the client and the token is prompted to be invalid.

As an optional scheme, responding to the first interface call request, acquiring an original interface address corresponding to the target interface address from a plurality of interface address pairs having a correspondence relationship includes:

s1, obtaining the target interface mark of the target interface from the target interface address;

s2, obtaining the original interface mark corresponding to the target interface mark from the interface mark pairs with corresponding relation;

s3, verifying whether the first interface calling parameter meets the parameter condition corresponding to the original interface identification;

and S4, acquiring the original interface address corresponding to the original interface identifier under the condition that the first interface calling parameter is verified to meet the parameter condition corresponding to the original interface identifier.

Optionally, in this embodiment, the target interface address may be generated according to a target interface identifier (such as a target interface name in english), the target interface identifier may be resolved from the target interface address, the target interface identifier has an original interface identifier corresponding to the target interface identifier, and each original interface identifier indicates an original interface. For each original interface, it has certain parameter conditions, such as: parameter type, parameter length, etc. If the first interface calling parameter accords with the parameter condition corresponding to the original interface identifier, the original interface address corresponding to the original interface identifier is obtained, and calling is initiated to the original interface address.

Optionally, in this embodiment, the address of the target interface is analyzed to obtain an english name (target interface identifier) of the target interface, the interface information configured in the system is queried, it is verified whether parameter conditions, such as the type and length of a parameter transmitted by the client, and whether a necessary parameter is legal or not, are satisfied, after the verification is passed, the system converts the call information of the target interface into the call information of the original interface, and initiates a call to the original interface.

As an optional scheme, before obtaining an original interface address corresponding to the target interface address from a plurality of interface address pairs having a correspondence relationship, the method further includes:

s1, acquiring parameter conditions corresponding to the original interface;

s2, verifying whether the parameter condition accords with the configuration of the original interface;

s3, storing the original interface and the parameter condition with the corresponding relation under the condition that the parameter condition is verified to be in accordance with the configuration of the original interface;

and S4, acquiring the target interface, and storing the target interface and the original interface which have the corresponding relation.

Optionally, in this embodiment, before the administrator saves the configured interface information, the system may automatically invoke the standard configuration of the original interface to verify the correctness of the parameter condition, and if the verification fails, the saving of the information fails, and the administrator needs to modify the information again and save the information again.

As an optional scheme, after sending the second interface call request carrying the second interface call parameter to the original interface address, the method further includes:

s1, acquiring first response information returned by the original interface response target data;

s2, converting the first response information into second response information in a target format;

and S3, sending the second response information to the client.

Optionally, in this embodiment, after receiving the return message (i.e. the first response message) from the original interface, the system encapsulates the return message into a standard return message format (i.e. the second response message), and returns the standard return message format (i.e. the second response message) to the caller.

As an optional scheme, sending the second response message to the client includes:

s1, encrypting the second response information;

and S2, sending the encrypted second response information to the client.

Optionally, in this embodiment, if the return information needs to be encrypted, the return information is encrypted according to the configured encryption method and then is sent to the client.

As an optional scheme, before acquiring the first interface call request sent by the client, the method further includes:

s1, receiving registration information sent by the client, wherein the registration information is used for requesting to acquire the calling authority of the target interface, and the registration information carries attribute information of the client;

s2, distributing calling authority for the client according to the registration information, wherein the calling authority is used for indicating a target interface which is allowed to be called by the client and the duration which is allowed to be called by the client;

s3, generating a target user identifier for the client and generating a target authorization code corresponding to the calling authority;

and S4, sending the target user identification, the target authorization code and the target interface address to the client.

Alternatively, in this embodiment, the administrator may register application information for the client, and the system may automatically generate an application ID (i.e., user identification). The administrator assigns calling authority according to the application information (attribute information of the application, including name, description, etc.) of the client, including an interface allowing calling, a time length (temporary and permanent) allowing calling the interface, if temporary is selected, an authorized start time and end time, etc. After configuration, the system automatically generates an authorization code. Each authorization code can only access the authorization interface configured under the authorization information. The administrator gives the application ID, authorization code information and destination interface address to the user for use (which may be sent off-line, such as by mail).

It should be noted that, for simplicity of description, the above-mentioned method embodiments are described as a series of acts or combination of acts, but those skilled in the art will recognize that the present invention is not limited by the order of acts, as some steps may occur in other orders or concurrently in accordance with the invention. Further, those skilled in the art should also appreciate that the embodiments described in the specification are preferred embodiments and that the acts and modules referred to are not necessarily required by the invention.

Through the above description of the embodiments, those skilled in the art can clearly understand that the method according to the above embodiments can be implemented by software plus a necessary general hardware platform, and certainly can also be implemented by hardware, but the former is a better implementation mode in many cases. Based on such understanding, the technical solutions of the present invention may be embodied in the form of a software product, which is stored in a storage medium (such as ROM/RAM, magnetic disk, optical disk) and includes instructions for enabling a terminal device (such as a mobile phone, a computer, a server, or a network device) to execute the method according to the embodiments of the present invention.

According to another aspect of the embodiments of the present invention, there is also provided an interface invoking device for implementing an interface of the invoking method of the interface, as shown in fig. 2, the device includes:

the first obtaining module 22 is configured to obtain a first interface call request sent by a client, where the first interface call request is used to request to call a target interface to transmit target data, the first interface call request carries a target interface address of the target interface and a first interface call parameter, and the first interface call parameter is an interface call parameter that conforms to a parameter transmission format specified by the target interface;

a second obtaining module 24, configured to respond to the first interface call request, and obtain an original interface address corresponding to the target interface address from a plurality of sets of interface address pairs having a corresponding relationship;

a first conversion module 26, configured to convert the first interface calling parameter into a second interface calling parameter, where the second interface calling parameter is an interface calling parameter that conforms to a parameter transmission format specified by an original interface, and the original interface is an interface indicated by an original interface address;

the first sending module 28 is configured to send a second interface call request carrying a second interface call parameter to the original interface address, where the second interface call request is used to request to call the original interface to transmit target data.

As an optional solution, the apparatus further includes:

the first receiving unit is used for receiving a third interface calling request sent by the client, wherein the third interface calling request carries a target user identifier, a target authorization code and first signature data, and the first signature data is data obtained by signing a first interface calling parameter by the client;

a first verification unit configured to verify whether the first signature data is legitimate;

the second verification unit is used for verifying whether the authorization code is expired;

the generation unit is used for generating a token value for the target user identifier and storing the target user identifier and the token value which have corresponding relation under the condition that the first signature data is verified to be legal and the authorization code is not expired;

the system comprises a first sending unit and a second sending unit, wherein the first sending unit is used for sending a token value to a client, and the token value is used for preventing a target interface from being maliciously called.

Optionally, the first obtaining module includes:

and the second receiving unit is used for receiving the first interface calling request carrying the token value sent by the client.

As an alternative, the second receiving unit is configured to:

receiving a first interface calling request sent by a client, wherein the first interface calling request carries a target interface address and second signature data, and the second signature data is data obtained by signing data comprising a token value and a first interface calling parameter by the client.

As an optional scheme, the second obtaining module includes:

the third verification unit is used for responding to the first interface calling request and verifying whether the second signature data is legal or not;

the fourth verification unit is used for verifying whether the service time of the token value is in the valid period or not under the condition that the second signature data is verified to be legal;

the first acquisition unit is used for acquiring an original interface address corresponding to a target interface address from a plurality of groups of interface address pairs with corresponding relations under the condition that the use time of the token value is verified to be within the validity period;

and the processing unit is used for prolonging the valid period corresponding to the token value by the target time.

As an optional scheme, the second obtaining module includes:

the second acquisition unit is used for acquiring the target interface identifier of the target interface from the target interface address;

a third obtaining unit, configured to obtain, from multiple sets of interface identifier pairs having a corresponding relationship, an original interface identifier corresponding to a target interface identifier;

the fifth verification unit is used for verifying whether the first interface calling parameter meets the parameter condition corresponding to the original interface identifier;

and the fourth obtaining unit is used for obtaining the original interface address corresponding to the original interface identifier under the condition that the first interface calling parameter is verified to meet the parameter condition corresponding to the original interface identifier.

As an optional solution, the apparatus further includes:

a third obtaining module, configured to obtain a parameter condition corresponding to an original interface before obtaining an original interface address corresponding to the target interface address from a plurality of sets of interface address pairs having a correspondence relationship;

the verification module is used for verifying whether the parameter condition accords with the configuration of the original interface;

and the storage module is used for storing the original interface and the parameter condition with the corresponding relation under the condition that the parameter condition is verified to be in accordance with the configuration of the original interface, acquiring the target interface and storing the target interface and the original interface with the corresponding relation.

As an optional solution, the apparatus further includes:

the fourth obtaining module is used for obtaining first response information returned by the original interface response target data after sending a second interface calling request carrying a second interface calling parameter to the original interface address;

the second conversion module is used for converting the first response information into second response information in a target format;

and the second sending module is used for sending the second response information to the client.

As an optional scheme, the second sending module includes:

an encryption unit operable to encrypt the second response information;

and the second sending unit is used for sending the encrypted second response information to the client.

As an optional solution, the apparatus further includes:

the system comprises a receiving module, a first interface calling module and a second interface calling module, wherein the receiving module is used for receiving registration information sent by a client before a first interface calling request sent by the client is obtained, the registration information is used for requesting to obtain a calling authority of a target interface, and the registration information carries attribute information of the client;

the distribution module is used for distributing calling authority for the client according to the registration information, wherein the calling authority is used for indicating a target interface which is allowed to be called by the client and the duration for allowing the client to call the target interface;

the generation module is used for generating a target user identifier for the client and generating a target authorization code corresponding to the calling authority;

and the third sending module is used for sending the target user identifier, the target authorization code and the target interface address to the client.

As an optional solution, the original interface includes: an http interface, and/or a webservice interface.

The application environment of the embodiment of the present invention may refer to the application environment in the above embodiments, but is not described herein again. The embodiment of the invention provides an optional specific application example of the connection method for implementing the real-time communication.

As an alternative embodiment, the method for calling the interface may be, but is not limited to, applied in the scenario of interface call forwarding as shown in fig. 3. In this scenario, an interface forwarding system is provided, which includes: the system comprises a resource cataloging module, an interface generating module, an application registering module, a service monitoring module, an interface testing module, a log monitoring module, an authority management module, a parameter checking module, an http interface conversion module, a webservice interface conversion module and the like.

The resource cataloging module is used for recording original interface information and comprises the following steps: original interface address, original interface parameter and original interface calling mode. The administrator can enter the original interface information into the resource cataloging module, including the access time, access mode (http, web service), calling mode, etc. of the interface. If the interface is the http interface, filling in the url address of the original interface, the name of the interface parameter, the type of the parameter, the length of the parameter, whether the interface is allowed to be empty and the like; and if the web service interface is the web service interface, adding the wsdl address, the user name, the password and the like of the web service. The interface forwarding system can analyze the wsdl file according to the wsdl address, and the interface name, the interface access parameter and the return parameter in the wsdl file are all analyzed to generate a form to be provided for an administrator. The administrator can submit the save after confirming on the form that there is no error. Before the information is stored, the interface forwarding system can also automatically call the corresponding original interface to verify the correctness of the configuration parameters, and if the verification fails, the information is not stored, and an administrator needs to revise the information again and store the information again.

The interface generation module is used for configuring and generating a new target interface and setting a calling mode and parameters of the target interface. The administrator configures information of a target interface in an interface generating module, fills in an interface name (Chinese name and English name) of a new target interface on a form, calls a mode, returns whether parameters are encrypted (the encryption mode can select DES/AES/SM2 and the like), and the like, selects an original interface recorded in a resource cataloging module to correspond to the target interface by the administrator, and generates a new url address according to the interface name (English name) of the new target interface after submitting and storing, wherein the format of the url address is as follows: http:// 127.0.0.1/getApiInterface/English name/.

The application registration module is used for registering caller information and is used for related operations such as authority control and the like. And the calling party sends a registration request to the interface forwarding system. The administrator registers the application information for the user at the application registration module, and the interface forwarding system automatically generates an application ID for the user.

And the authority management module is used for managing the authority of the calling party for calling the interface. The administrator assigns the calling authority for the user according to the application information (identity information of the application) of the user at the authority management module, wherein the calling authority comprises an interface allowing calling, an authorization duration (temporary and permanent), and if the temporary is selected, the authorization start time and the authorization end time are also selected. After configuration, the interface forwarding system automatically generates an authorization code to provide to the user. Each authorization code can only access the authorization interface configured under the authorization information. The administrator gives the application ID, the authorization code information and the interface address to the user in an offline mode for use.

The parameter checking module is used for verifying whether the transmission parameter is correct, whether the transmission parameter is tampered and whether the transmission parameter is legal when the user calls the interface. Such as: verifying whether the user signature is legal or not, verifying whether the token is invalid or not, verifying the type and length of the parameters transmitted by the user, verifying whether the mandatory fill parameters are legal or not, and the like.

The http interface conversion module and the webservice interface conversion module are used for mapping the target interface to the corresponding original interface.

The service monitoring module is used for monitoring the running state of the interface. The interface test module is used for testing the calling condition of the interface on line. The log monitoring module is used for recording the call log, including parameters, response time, success or failure and the like.

The system realizes the encapsulation of the original interface and provides the functions which the original interface does not have, including interface calling authority control, interface parameter verification, return parameter encryption and the like. On the basis of the functions, a brand-new interface address and a brand-new calling mode are provided for the outside, and the safety of the interface and the data is guaranteed.

According to still another aspect of the embodiments of the present invention, there is also provided an electronic apparatus for implementing the invocation of the interface, as shown in fig. 4, the electronic apparatus including: one or more processors (only one of which is shown) 402, in which a computer program is stored, a memory 404, a sensor 406, an encoder 408 and a transmission device 410, the processor being arranged to carry out the steps of any of the above-described method embodiments by means of the computer program.

Optionally, in this embodiment, the electronic apparatus may be located in at least one network device of a plurality of network devices of a computer network.

Optionally, in this embodiment, the processor may be configured to execute the following steps by a computer program:

s1, acquiring a first interface calling request sent by a client, wherein the first interface calling request is used for requesting to call a target interface to transmit target data, the first interface calling request carries a target interface address of the target interface and a first interface calling parameter, and the first interface calling parameter is an interface calling parameter which accords with a parameter transmission format specified by the target interface;

s2, responding to the first interface calling request, and acquiring the original interface address corresponding to the target interface address from the interface address pairs with the corresponding relation;

s3, converting the first interface calling parameter into a second interface calling parameter, wherein the second interface calling parameter is an interface calling parameter which conforms to the parameter transmission format specified by the original interface, and the original interface is the interface indicated by the original interface address;

and S4, sending a second interface calling request carrying a second interface calling parameter to the original interface address, wherein the second interface calling request is used for requesting to call the original interface to transmit target data.

Alternatively, it can be understood by those skilled in the art that the structure shown in fig. 4 is only an illustration, and the electronic device may also be a terminal device such as a smart phone (e.g., an Android phone, an iOS phone, etc.), a tablet computer, a palm computer, a Mobile Internet Device (MID), a PAD, and the like. Fig. 4 is a diagram illustrating the structure of the electronic device. For example, the electronic device may also include more or fewer components (e.g., network interfaces, display devices, etc.) than shown in FIG. 4, or have a different configuration than shown in FIG. 4.

The memory 404 may be configured to store software programs and modules, such as program instructions/modules corresponding to the interface calling method and apparatus in the embodiment of the present invention, and the processor 402 executes various functional applications and data processing by running the software programs and modules stored in the memory 404, that is, implementing the control method of the target component described above. The memory 404 may include high-speed random access memory, and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some examples, the memory 404 may further include memory located remotely from the processor 402, which may be connected to the terminal over a network. Examples of such networks include, but are not limited to, the internet, intranets, local area networks, mobile communication networks, and combinations thereof.

The transmitting device 410 is used for receiving or transmitting data via a network. Examples of the network may include a wired network and a wireless network. In one example, the transmission device 410 includes a Network adapter (NIC) that can be connected to a router via a Network cable and other Network devices to communicate with the internet or a local area Network. In one example, the transmission device 410 is a Radio Frequency (RF) module, which is used for communicating with the internet in a wireless manner.

Wherein the memory 404 is used for storing, inter alia, application programs.

Embodiments of the present invention also provide a storage medium having a computer program stored therein, wherein the computer program is arranged to perform the steps of any of the above method embodiments when executed.

Alternatively, in the present embodiment, the storage medium may be configured to store a computer program for executing the steps of:

s1, acquiring a first interface calling request sent by a client, wherein the first interface calling request is used for requesting to call a target interface to transmit target data, the first interface calling request carries a target interface address of the target interface and a first interface calling parameter, and the first interface calling parameter is an interface calling parameter which accords with a parameter transmission format specified by the target interface;

s2, responding to the first interface calling request, and acquiring the original interface address corresponding to the target interface address from the interface address pairs with the corresponding relation;

s3, converting the first interface calling parameter into a second interface calling parameter, wherein the second interface calling parameter is an interface calling parameter which conforms to the parameter transmission format specified by the original interface, and the original interface is the interface indicated by the original interface address;

and S4, sending a second interface calling request carrying a second interface calling parameter to the original interface address, wherein the second interface calling request is used for requesting to call the original interface to transmit target data.

Optionally, the storage medium is further configured to store a computer program for executing the steps included in the method in the foregoing embodiment, which is not described in detail in this embodiment.

Alternatively, in this embodiment, a person skilled in the art may understand that all or part of the steps in the methods of the foregoing embodiments may be implemented by a program instructing hardware associated with the terminal device, where the program may be stored in a computer-readable storage medium, and the storage medium may include: flash disks, Read-Only memories (ROMs), Random Access Memories (RAMs), magnetic or optical disks, and the like.

The above-mentioned serial numbers of the embodiments of the present invention are merely for description and do not represent the merits of the embodiments.

The integrated unit in the above embodiments, if implemented in the form of a software functional unit and sold or used as a separate product, may be stored in the above computer-readable storage medium. Based on such understanding, the technical solution of the present invention may be embodied in the form of a software product, which is stored in a storage medium and includes several instructions for causing one or more computer devices (which may be personal computers, servers, network devices, etc.) to execute all or part of the steps of the method according to the embodiments of the present invention.

In the above embodiments of the present invention, the descriptions of the respective embodiments have respective emphasis, and for parts that are not described in detail in a certain embodiment, reference may be made to related descriptions of other embodiments.

In the several embodiments provided in the present application, it should be understood that the disclosed client may be implemented in other manners. The above-described embodiments of the apparatus are merely illustrative, and for example, the division of the units is only one type of division of logical functions, and there may be other divisions when actually implemented, for example, a plurality of units or components may be combined or may be integrated into another system, or some features may be omitted, or not executed. In addition, the shown or discussed mutual coupling or direct coupling or communication connection may be an indirect coupling or communication connection through some interfaces, units or modules, and may be in an electrical or other form.

The units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of network units. Some or all of the units can be selected according to actual needs to achieve the purpose of the solution of the embodiment.

In addition, functional units in the embodiments of the present invention may be integrated into one processing unit, or each unit may exist alone physically, or two or more units are integrated into one unit. The integrated unit can be realized in a form of hardware, and can also be realized in a form of a software functional unit.

The foregoing is only a preferred embodiment of the present invention, and it should be noted that, for those skilled in the art, various modifications and decorations can be made without departing from the principle of the present invention, and these modifications and decorations should also be regarded as the protection scope of the present invention.

Claims (14)

1. A method for invoking an interface, comprising:

acquiring a first interface calling request sent by a client, wherein the first interface calling request is used for requesting to call a target interface to transmit target data, the first interface calling request carries a target interface address of the target interface and a first interface calling parameter, and the first interface calling parameter is an interface calling parameter which accords with a parameter transmission format specified by the target interface;

responding to the first interface calling request, and acquiring an original interface address corresponding to the target interface address from a plurality of groups of interface address pairs with corresponding relations;

converting the first interface calling parameter into a second interface calling parameter, wherein the second interface calling parameter is an interface calling parameter which conforms to a parameter transmission format specified by an original interface, and the original interface is an interface indicated by the original interface address;

and sending a second interface calling request carrying the second interface calling parameter to the original interface address, wherein the second interface calling request is used for requesting to call the original interface to transmit the target data.

2. The method of claim 1, wherein prior to obtaining the first interface call request sent by a client, the method further comprises:

receiving a third interface calling request sent by the client, wherein the third interface calling request carries a target user identifier, a target authorization code and first signature data, and the first signature data is obtained by signing the first interface calling parameter by the client;

verifying whether the first signature data is legal and verifying whether the target authorization code is expired;

under the condition that the first signature data is verified to be legal and the authorization code is verified to be unexpired, generating a token value for the target user identifier, and storing the target user identifier and the token value which have a corresponding relation;

sending the token value to the client, wherein the token value is used to prevent malicious invocation of the target interface.

3. The method of claim 2, wherein obtaining the first interface call request sent by a client comprises:

and receiving the first interface calling request which is sent by the client and carries the token value.

4. The method of claim 3, wherein receiving the first interface call request carrying the token value sent by the client comprises:

and receiving the first interface calling request sent by the client, wherein the first interface calling request carries the target interface address and second signature data, and the second signature data is obtained by the client signing data including the token value and the first interface calling parameter.

5. The method according to claim 4, wherein obtaining the original interface address corresponding to the target interface address from the plurality of sets of interface address pairs having the corresponding relationship in response to the first interface call request comprises:

responding to the first interface calling request, and verifying whether the second signature data is legal or not;

if the second signature data is verified to be legal, verifying whether the service time of the token value is within the valid period;

under the condition that the service time of the token value is verified to be within the validity period, acquiring the original interface address corresponding to the target interface address from the plurality of groups of interface address pairs with corresponding relations;

and prolonging the validity period corresponding to the token value by a target time.

6. The method according to claim 1, wherein obtaining the original interface address corresponding to the target interface address from the plurality of sets of interface address pairs having the corresponding relationship in response to the first interface call request comprises:

acquiring a target interface identifier of the target interface from the target interface address;

acquiring original interface identifications corresponding to the target interface identifications from a plurality of groups of interface identification pairs with corresponding relations;

verifying whether the first interface calling parameter meets the parameter condition corresponding to the original interface identifier;

and under the condition that the first interface calling parameter is verified to meet the parameter condition corresponding to the original interface identifier, acquiring the original interface address corresponding to the original interface identifier.

7. The method according to claim 1, wherein before obtaining the original interface address corresponding to the target interface address from a plurality of sets of corresponding interface address pairs, the method further comprises:

acquiring parameter conditions corresponding to the original interface;

verifying whether the parameter condition meets the configuration of the original interface;

under the condition that the parameter condition is verified to be in accordance with the configuration of the original interface, storing the original interface and the parameter condition which have a corresponding relationship;

and acquiring the target interface, and storing the target interface and the original interface which have a corresponding relationship.

8. The method according to claim 1, wherein after sending the second interface call request carrying the second interface call parameter to the original interface address, the method further comprises:

acquiring first response information returned by the original interface responding to the target data;

converting the first response information into second response information in a target format;

and sending the second response information to the client.

9. The method of claim 8, wherein sending the second response message to the client comprises:

encrypting the second response information;

and sending the encrypted second response information to the client.

10. The method of claim 1, wherein prior to obtaining the first interface call request sent by the client, the method further comprises:

receiving registration information sent by the client, wherein the registration information is used for requesting to acquire the calling permission of the target interface, and the registration information carries attribute information of the client;

distributing calling authority for the client according to the registration information, wherein the calling authority is used for indicating an interface allowing the client to call and the duration of allowing the client to call the interface;

generating a target user identifier for the client and generating a target authorization code corresponding to the invocation permission;

and sending the target user identification, the target authorization code and the interface address to the client.

11. The method according to any one of claims 1 to 10, wherein the original interface comprises: an http interface, and/or a webservice interface.

12. An apparatus for invoking an interface, comprising:

the system comprises a first acquisition module, a first interface calling module and a second acquisition module, wherein the first interface calling module is used for acquiring a first interface calling request sent by a client, the first interface calling request is used for requesting to call a target interface to transmit target data, the first interface calling request carries a target interface address of the target interface and a first interface calling parameter, and the first interface calling parameter is an interface calling parameter which accords with a parameter transmission format specified by the target interface;

a second obtaining module, configured to respond to the first interface call request, and obtain an original interface address corresponding to the target interface address from a plurality of sets of interface address pairs having a correspondence relationship;

a first conversion module, configured to convert the first interface call parameter into a second interface call parameter, where the second interface call parameter is an interface call parameter that conforms to a parameter transmission format specified by an original interface, and the original interface is an interface indicated by the original interface address;

and the first sending module is used for sending a second interface calling request carrying the second interface calling parameter to the original interface address, wherein the second interface calling request is used for requesting to call the original interface to transmit the target data.

13. A storage medium, in which a computer program is stored, wherein the computer program is arranged to perform the method of any of claims 1 to 11 when executed.

14. An electronic device comprising a memory and a processor, characterized in that the memory has stored therein a computer program, the processor being arranged to execute the method of any of claims 1 to 11 by means of the computer program.

Images