CN113778389A - Interface idempotent judging method, device, equipment and storage medium - Google Patents

Interface idempotent judging method, device, equipment and storage medium Download PDF

Info

Publication number
CN113778389A
CN113778389A CN202011010062.2A CN202011010062A CN113778389A CN 113778389 A CN113778389 A CN 113778389A CN 202011010062 A CN202011010062 A CN 202011010062A CN 113778389 A CN113778389 A CN 113778389A
Authority
CN
China
Prior art keywords
interface
server
token
idempotent
calling request
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN202011010062.2A
Other languages
Chinese (zh)
Inventor
宋茜
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Beijing Jingdong Century Trading Co Ltd
Beijing Wodong Tianjun Information Technology Co Ltd
Original Assignee
Beijing Jingdong Century Trading Co Ltd
Beijing Wodong Tianjun Information Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Beijing Jingdong Century Trading Co Ltd, Beijing Wodong Tianjun Information Technology Co Ltd filed Critical Beijing Jingdong Century Trading Co Ltd
Priority to CN202011010062.2A priority Critical patent/CN113778389A/en
Publication of CN113778389A publication Critical patent/CN113778389A/en
Pending legal-status Critical Current

Links

Images

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F8/00Arrangements for software engineering
    • G06F8/30Creation or generation of source code
    • G06F8/37Compiler construction; Parser generation
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/20Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
    • G06F16/24Querying
    • G06F16/245Query processing
    • G06F16/2455Query execution
    • G06F16/24552Database cache management

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • Databases & Information Systems (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Software Systems (AREA)
  • Computational Linguistics (AREA)
  • Data Mining & Analysis (AREA)
  • Computer And Data Communications (AREA)

Abstract

The embodiment of the invention provides a method, a device, equipment and a storage medium for judging interface idempotency, wherein a client is provided with an annotation resolver according to annotation information configured for a target interface of a server, the server is provided with an interceptor, the annotation resolver generates a token according to the annotation information and an interface calling request, adds the token into an implicit parameter of the interface calling request, sends the interface calling request to the server in an implicit parameter transmission mode, and the interceptor judges the interface idempotency according to the interface calling request and a preset idempotency rule. The embodiment of the invention hides the idempotent parameters to the server interface based on the implicit parameter transmission mode, thereby reducing the intrusion to the interface codes; in addition, the decoupling of the idempotent function is realized by using the configuration of the annotation and annotation resolver and the interceptor, the client only needs to add annotation information to the interface without extra coding, the server-side interface does not sense the idempotent judgment process, the server-side interface can focus the logic of the server-side interface, and the reliability of the interface is improved.

Description

Interface idempotent judging method, device, equipment and storage medium
Technical Field
The embodiment of the invention relates to the technical field of computers, in particular to a method, a device, equipment and a storage medium for judging interface idempotency.
Background
A business system is usually split into a plurality of distributed microservices, each service provides a functional interface related to its responsibility for a business line, there are a lot of interface calls between services, each microservice is a system capable of operating independently, each system is a distributed system that needs to provide reliable services, and interface idempotency must be realized no matter the microservices inside the business or the interfaces providing services to third parties.
The conventional idempotent judgment method generally comprises the steps that a server interface is accessed into a field reserved for receiving a token; before calling an interface, a client needs to generate and set a token into a reference according to a convention; after receiving the call request, the server-side interface needs to inquire the cache according to the token, and returns a result to the client side if the result is inquired according to whether the result corresponding to the token exists in the inquiry; if the result is not inquired, the participation request is indicated to be the initial call, the called interface is executed, and the processing result is cached and returned to the client side.
In the existing interface idempotent judgment method, an idempotent function needs to be realized by an interface code, the intrusion to the interface code is serious, the realization of the idempotent function is highly coupled with a service logic code, the cost for accessing the idempotent logic is high, and the reliability of an interface is poor.
Disclosure of Invention
The embodiment of the invention provides a method, a device, equipment and a storage medium for judging interface idempotency, which are used for reducing the invasion of idempotency to interface codes, realizing the decoupling of idempotency functions and improving the reliability of an interface.
In a first aspect, an embodiment of the present invention provides an interface idempotent determining method, which is applied to a client, and the method includes:
determining a target interface of a server to be called according to an interface calling request, and acquiring annotation information configured for the target interface of the server;
generating a token according to the annotation information and the interface calling request through an annotation parser configured on the client, and adding the token into an implicit parameter of the interface calling request;
and sending the interface calling request to a server side in an implicit parameter transmission mode, and judging the interface power according to the interface calling request and a preset power rule by an interceptor configured by the server side.
In a second aspect, an embodiment of the present invention provides an interface idempotent determining method, which is applied to a server, and the method includes:
receiving an interface calling request sent by the client in an implicit parameter transmission mode, wherein the interface calling request is used for calling a target interface of a server, and implicit parameters of the interface calling request comprise a token;
and judging the interface idempotency according to the interface calling request and a preset idempotency rule by an interceptor configured on the server.
In a third aspect, an embodiment of the present invention provides an interface idempotent determining apparatus, which is applied to a client, where the apparatus includes:
the interface annotation module is used for determining a target interface of a server to be called according to the interface calling request and acquiring annotation information configured for the target interface of the server;
the annotation analysis module is used for generating a token according to the annotation information and the interface calling request through an annotation analyzer configured on the client, and adding the token into an implicit parameter of the interface calling request;
and the communication module is used for sending the interface calling request to a server side in an implicit parameter transmission mode so that an interceptor configured by the server side judges the interface power according to the interface calling request and a preset power rule.
In a fourth aspect, an embodiment of the present invention provides an interface idempotent determining apparatus, which is applied to a server, and the apparatus includes:
the receiving module is used for receiving an interface calling request sent by the client in an implicit parameter transmission mode, wherein the interface calling request is used for calling a target interface of a server, and implicit parameters of the interface calling request comprise a token;
and the interception module is used for judging the interface power according to the interface calling request and a preset power rule through an interceptor configured on the server.
In a fifth aspect, an embodiment of the present invention provides a client, including: at least one processor and memory;
the memory stores computer-executable instructions;
the at least one processor executing the computer-executable instructions stored by the memory causes the at least one processor to perform the method of the first aspect.
In a sixth aspect, an embodiment of the present invention provides a server, including: at least one processor and memory;
the memory stores computer-executable instructions;
the at least one processor executing the computer-executable instructions stored by the memory causes the at least one processor to perform the method of the second aspect.
In a seventh aspect, an embodiment of the present invention provides a computer-readable storage medium, where computer-executable instructions are stored, and when executed by a processor, the computer-executable instructions are configured to implement the method according to the first aspect.
In an eighth aspect, the present invention provides a computer-readable storage medium, in which computer-executable instructions are stored, and when executed by a processor, the computer-executable instructions are used to implement the method according to the second aspect.
According to the interface idempotent judgment method, the device, the equipment and the storage medium provided by the embodiment of the invention, annotation information is configured on a target interface of a server side at a client side, an annotation resolver is configured on the client side, an interceptor is configured on the server side, the annotation resolver generates a token according to the annotation information and an interface calling request, the token is added into an implicit parameter of the interface calling request, the interface calling request is sent to the server side in an implicit parameter transmission mode, and then the interceptor of the server side judges the interface idempotent according to the interface calling request and a preset idempotent rule. The embodiment of the invention is based on the implicit parameter transmission mode, realizes hiding the idempotent parameters of the token to the interface of the server, and reduces the intrusion to the interface codes; in addition, the decoupling of the idempotent function is realized by using the configurations of the annotation and annotation resolvers and the interceptors, the client only needs to add annotation information to the interface without extra coding, the server-side interface does not sense the idempotent judgment process, the server-side interface can focus the logic of the server-side interface, and the reliability of the interface is improved.
Drawings
The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present disclosure and together with the description, serve to explain the principles of the disclosure.
Fig. 1 is a schematic diagram of a system architecture of a method for determining an interface idempotency according to an embodiment of the present invention;
fig. 2 is a flowchart of an interface idempotent determination method according to an embodiment of the present invention;
fig. 3 is a flowchart of an interface idempotent determination method according to another embodiment of the present invention;
fig. 4 is a flowchart of an interface idempotent determination method according to another embodiment of the present invention;
fig. 5 is a flowchart of an interface idempotent determination method according to another embodiment of the present invention;
fig. 6 is a flowchart of an interface idempotent determination method according to another embodiment of the present invention;
fig. 7 is a flowchart of an interface idempotent determination method according to another embodiment of the present invention;
fig. 8 is a structural diagram of an interface idempotent determination apparatus according to an embodiment of the present invention;
fig. 9 is a structural diagram of an interface idempotent determination apparatus according to another embodiment of the present invention;
FIG. 10 is a block diagram of a client according to an embodiment of the present invention;
fig. 11 is a structural diagram of a server according to an embodiment of the present invention.
With the foregoing drawings in mind, certain embodiments of the disclosure have been shown and described in more detail below. These drawings and written description are not intended to limit the scope of the disclosed concepts in any way, but rather to illustrate the concepts of the disclosure to those skilled in the art by reference to specific embodiments.
Detailed Description
Reference will now be made in detail to the exemplary embodiments, examples of which are illustrated in the accompanying drawings. When the following description refers to the accompanying drawings, like numbers in different drawings represent the same or similar elements unless otherwise indicated. The implementations described in the exemplary embodiments below are not intended to represent all implementations consistent with the present disclosure. Rather, they are merely examples of apparatus and methods consistent with certain aspects of the present disclosure, as detailed in the appended claims.
The conventional idempotent judgment method generally comprises the steps that a server interface is accessed into a field reserved for receiving a token; before calling an interface, a client needs to generate and set a token into a reference according to a convention; after receiving the call request, the server-side interface needs to inquire the cache according to the token, and returns a result to the client side if the result is inquired according to whether the result corresponding to the token exists in the inquiry; if the result is not inquired, the participation request is indicated to be the initial call, the called interface is executed, and the processing result is cached and returned to the client side.
The existing interface idempotent judgment method has the problem of repeated coding, each interface needing idempotent needs to be realized, a client needs to compile a code for generating a set token before calling, and each called server interface also needs to repeatedly realize the code for receiving and verifying the token; if the service is maliciously called, the cost of skipping verification by simulating the filling token is low, and the pressure of the service end is increased; the idempotent realization is highly coupled with the service logic code, no matter the client sets the token or the server acquires the token and realizes the idempotent strategy, the token logic and the service data are highly coupled, and the logic cost of accessing the idempotent is high; in addition, the token production strategy of the service interface is single and is easy to crack.
In order to solve at least one of the problems in the prior art, in the embodiment of the invention, an annotation parser is added at a client in a plug-in mode, an interceptor is added at a server in a plug-in mode, annotation information is configured at a client at a server interface, a token is generated by the annotation parser according to the annotation information and an interface calling request, the token is added into an implicit parameter of the interface calling request, the interface calling request is sent to the server in an implicit parameter transferring mode, the interface idempotent judgment is carried out by the interceptor at the server according to the interface calling request and a preset idempotent rule, and the hiding of the idempotent parameters of the token at the server interface is realized based on the implicit parameter transferring mode, so that the intrusion to interface codes is reduced; in addition, the decoupling of the idempotent function is realized by using the configurations of the annotation and annotation resolvers and the interceptors, the client only needs to add annotation information to the interface without extra coding, the server-side interface does not sense the idempotent judgment process, the server-side interface can focus the logic of the server-side interface, and the reliability of the interface is improved.
The system architecture of the interface idempotent judgment method provided by the embodiment of the invention is shown in fig. 1 and comprises a client 11 and a server 12, wherein the client 11 is configured with an annotation parser, the server 12 is configured with an interceptor, the client 11 generates a token according to the annotation information and an interface calling request for the configured annotation information by the annotation parser, adds the token into an implicit parameter of the interface calling request, sends the interface calling request to the server 12 in an implicit parameter transmission manner, and then carries out the judgment according to the interface calling request and a preset idempotent rule by the interceptor of the server 12. In the embodiment of the invention, the client can be any electronic equipment, such as a mobile phone, a tablet computer, a notebook computer, wearable equipment and the like; the server can be a server, a server cluster composed of a plurality of servers, or a cloud computing service center.
The following describes the technical solutions of the present invention and how to solve the above technical problems with specific embodiments. The following several specific embodiments may be combined with each other, and details of the same or similar concepts or processes may not be repeated in some embodiments. Embodiments of the present invention will be described below with reference to the accompanying drawings.
Fig. 2 is a flowchart of an interface idempotent determination method according to an embodiment of the present invention. The embodiment provides an interface idempotent judgment method, an execution main body of which can be a client, and the interface idempotent judgment method specifically comprises the following steps:
s201, determining a target interface of a server to be called according to the interface calling request, and acquiring annotation information configured for the target interface of the server.
In this embodiment, the client side may configure annotation information for each interface of the server in advance according to an agreement with the server side, and optionally, the annotation information may include, but is not limited to, a target attribute for generating a Token (Token) and a Token generation policy. It should be noted that the client may pre-configure fixed annotation information for each server interface, and certainly, may reconfigure the annotation information each time the interface needs to be called. Optionally, a plug-in with annotation capability may be configured to implement configuration of annotation information for the interface.
The target attribute for generating the token is used to indicate which attributes in the interface call request may serve as basic data for generating the token, for example, a field with an attribute name "a" serves as basic data for generating the token, or an attribute "B" with an nth parameter serves as basic data for generating the token, or which attribute combinations serve as basic data for generating the token.
The token generation policy may include, but is not limited to, a concatenation rule and/or an encryption algorithm, so as to perform concatenation and/or encryption on the value of the target attribute for generating the token according to the concatenation rule and/or the encryption algorithm to obtain the token, and optionally, in this embodiment, different token generation policies may be configured for different interfaces to implement personalized token generation.
In this embodiment, when a user needs to use a certain service of a server, an interface call request may be generated by a client, a target interface of the server to be called is determined according to the interface call request, and annotation information configured for the target interface of the server in advance is acquired. Or, the annotation information can be configured for the target interface of the server after the target interface of the server to be called is determined.
S202, generating a token according to the annotation information and the interface calling request through an annotation resolver configured on the client, and adding the token into an implicit parameter of the interface calling request.
In this embodiment, an annotation parser is configured on a client, the annotation parser can generate a token according to annotation information and an interface Call request, and add the token into an implicit parameter RpcContext of the interface Call request, so as to rely on an Rpc (Remote Procedure Call Protocol) frame for implicit parameter transfer, thereby hiding the token from a target interface of a server, and not needing to express idempotent related parameters such as the token in the entry and exit parameters and logic processing of a client interface and a server interface, so as to reduce intrusion of interface codes.
Optionally, the annotation parser may write a custom processor for an API provided by Java, and dynamically parse annotation information and interface call requests.
Optionally, as shown in fig. 3, when the annotation information includes a target attribute for generating the token and a token generation policy, S202 may specifically include:
s2021, acquiring a corresponding value of the target attribute from the interface calling request according to the target attribute for generating the token through the annotation parser;
s2022, processing the corresponding value of the target attribute according to the token generation strategy to generate the token.
In this embodiment, the annotation parser may obtain corresponding values of the target attributes according to the target attributes used for generating the token in the annotation information, if there are a plurality of target attributes, the corresponding values of the target attributes are spliced according to a splicing rule in the token generation policy, if there is only one target attribute, splicing is not required, further, if the token generation policy further includes an encryption algorithm, the corresponding values of the target attributes are encrypted according to the encryption algorithm, and if there is no encryption algorithm, encryption is not required, and the token is finally obtained.
S203, sending the interface calling request to a server side in an implicit parameter transmission mode, and judging the interface power according to the interface calling request and a preset power rule by an interceptor configured by the server side.
In this embodiment, the implicit transfer of the parameter (interface call request) between the client and the server can be performed through setAttachment and getAttachment on RpcContext in the Rpc frame. In this embodiment, an interceptor is set on the server, and after receiving the interface call request, the server can intercept the interface call request by the interceptor and perform interface idempotent judgment according to the interface call request and a preset idempotent rule. Optionally, the interceptor may be a custom JSF interceptor, where JSF (jingdong Service framework) is a jingdong Service framework and a high performance Service framework independently developed by jingdong. Of course, it is also possible to replace JSF with Dubbo, a high performance and excellent service framework sourced by the company arizoba.
Optionally, the specific process of the interface idempotent judgment may be: inquiring result data corresponding to the token in a database according to the token through an interceptor; if the result data corresponding to the token can be inquired, directly returning the result data to the client; or if the result data corresponding to the token cannot be inquired, directly calling the target interface of the server according to the interface calling request, returning the result data output by the target interface of the server to the client, and caching the result data in the database. The DataBase may be any DataBase, such as a Remote Dictionary Server (Redis) or a JimDB (Jingdong In Memory DataBase, kyoto Memory DataBase), which is a clustering scheme for the native Redis (2.8).
Optionally, interface idempotency judgment needs to be performed on all the interfaces configured on the interceptor in advance, or interface idempotency judgment needs to be performed on part of the interfaces, and an interface list needing the interface idempotency judgment needs to be preset for part of the interfaces, so that when the interceptor performs the interface idempotency judgment according to an interface calling request and a preset idempotency rule, the interceptor firstly obtains interface information of a target interface of the service end, and then judges whether the interface calling request needs to perform the interface idempotency judgment according to the interface information and the preset interface list needing the interface idempotency; if the idempotent judgment is needed, the interface idempotent judgment is carried out through an interceptor according to an interface calling request and a preset idempotent rule; or if the idempotent judgment is needed, the target interface of the server side is called directly according to the interface calling request. This embodiment accessible sets up the interface list that needs the interface idempotent, can realize increasing or deleting idempotent performance ability to arbitrary interface, and the server end interface does not have the perception, and the realization that can be nimble is to the plug nature of interface idempotent judgement.
On the basis of any of the above embodiments, optionally, the client side may further add an authorization code for the client to call the server to an implicit parameter of the interface call request, so that an interceptor of the server verifies the client permission according to the authorization code, where the authorization code is pre-allocated by the server to the client, so that the client can call an interface corresponding to the server according to the authorization code, and further, when the interceptor verifies the client permission according to the authorization code, if the verification fails, error information is returned to the client, and the subsequent interface power and the like judgment is ended, and if the verification passes, the subsequent interface power and the like judgment is continued. In this embodiment, the security level of the interface is realized through the authority code, the reliability of the interface is improved, and meanwhile, the subsequent judgment of the power of the interface and the like can be stopped under the condition that the authority check does not pass, so that the consumption of server resources is avoided.
On the basis of any of the above embodiments, optionally, the interceptor may further determine whether the token format is legal, for example, whether the token format satisfies a format agreed with the server, for example, whether the token is defined as first of a method name, whether a token generation algorithm is reasonable, or the like; if the token format is illegal, returning error information to the client, finishing the subsequent interface power and the like judgment, and caching the token in the database so as to be convenient for directly intercepting when receiving the token next time and prevent from consuming server resources. And if the token format is legal, the subsequent interface power and the like are continuously judged.
According to the interface power equal judgment method provided by the embodiment, annotation information configured on a target interface of a server is configured on a client, an annotation resolver is configured on the client, an interceptor is configured on the server, the annotation resolver generates a token according to the annotation information and an interface calling request, the token is added into an implicit parameter of the interface calling request, the interface calling request is sent to the server in an implicit parameter transmission mode, and then the interceptor of the server judges the interface power equal according to the interface calling request and a preset power equal rule. The embodiment is based on the implicit parameter transmission mode, so that idempotent parameters of the token are hidden for the server interface, and the intrusion of interface codes is reduced; in addition, the decoupling of the idempotent function is realized by using the configurations of the annotation and annotation resolvers and the interceptors, the client only needs to add annotation information to the interface without extra coding, the server-side interface does not sense the idempotent judgment process, the server-side interface can focus the logic of the server-side interface, and the reliability of the interface is improved.
Fig. 4 is a flowchart of an interface idempotent determination method according to an embodiment of the present invention. The embodiment provides an interface idempotent judgment method, an execution main body of which can be a server, and the interface idempotent judgment method specifically comprises the following steps:
s301, receiving an interface calling request sent by the client in an implicit parameter transmission mode, wherein the interface calling request is used for calling a target interface of the server, and implicit parameters of the interface calling request comprise a token.
In this embodiment, the process of generating and adding the token to the interface invocation request by the client and sending the interface invocation request in an implicit reference manner may refer to the foregoing embodiment, and details are not described here.
And S302, judging the interface power according to the interface calling request and a preset power rule through an interceptor configured on the server.
In this embodiment, an interceptor is configured on the server, and after receiving the interface call request at the server, the interceptor intercepts the interface call request, and the interceptor determines the interface power based on the interface call request and a preset power rule. Optionally, the preset idempotent rule may be configured in an interface configuration file.
Optionally, as shown in fig. 5, a specific process of the interface idempotent judgment may be:
s401, inquiring result data corresponding to the token in a database according to the token through the interceptor;
s402, if the result data corresponding to the token can be inquired, directly returning the result data to the client; or
And S403, if the result data corresponding to the token cannot be inquired, directly calling the target interface of the server according to the interface calling request, returning the result data output by the target interface of the server to the client, and caching the result data and the token in the database in a correlation manner.
In this embodiment, for the result data returned to the client after the server interface is successfully called each time, the result data is stored in the database in association with the token in the interface calling request for calling the server interface, and because the idempotent principle is that the token is used as the unique mark of each interface calling request, and the request of the same token calls any one time to return the same result data, the interceptor can inquire whether the result data corresponding to the token exists in the database according to the token; if the result data corresponding to the token can be inquired, the interface calling request is not called for the first time, and the stored result data can be directly returned to the client; if the result data corresponding to the token cannot be inquired, the interface calling request is called for the first time, the target interface of the server can be directly called according to the interface calling request, the result data output by the target interface of the server is returned to the client, and the result data and the token are associated and cached in the database.
On the basis of any of the foregoing embodiments, optionally, as shown in fig. 6, the performing, by an interceptor configured on the server, interface idempotent judgment according to the interface call request and a preset idempotent rule may specifically further include:
s501, acquiring interface information of the target interface of the server side through the interceptor;
s502, the interceptor judges whether the interface calling request needs to carry out interface power judgment or not according to the interface information and a preset interface list needing interface power;
s503, if the idempotent judgment is needed, judging the interface idempotent through the interceptor according to the interface calling request and a preset idempotent rule; or
And S504, if the idempotent judgment is needed, directly calling the target interface of the server according to the interface calling request.
In this embodiment, interface idempotency judgment needs to be performed on all interfaces configured for the interceptor in advance, or interface idempotency judgment needs to be performed on part of the interfaces, and an interface list needing interface idempotency needs to be preset, for example, configured in an interface configuration file, for the part of the interfaces, so that when the interceptor performs interface idempotency judgment according to an interface calling request and a preset idempotency rule, the interceptor first obtains interface information of a target interface of the service end, and then judges whether the interface calling request needs to perform interface idempotency judgment according to the interface information and the preset interface list needing interface idempotency; if the idempotent judgment is needed, the interface idempotent judgment is carried out through an interceptor according to an interface calling request and a preset idempotent rule; or if the idempotent judgment is needed, the target interface of the server side is called directly according to the interface calling request. This embodiment accessible sets up the interface list that needs the interface idempotent, can realize increasing or deleting idempotent performance ability to arbitrary interface, and the server end interface does not have the perception, and the realization that can be nimble is to the plug nature of interface idempotent judgement.
On the basis of any of the above embodiments, optionally, the client side may further add an authorization code for the client to call the server to an implicit parameter of the interface call request, so that an interceptor of the server verifies the client permission according to the authorization code, where the authorization code is pre-allocated by the server to the client, so that the client can call an interface corresponding to the server according to the authorization code, and further, when the interceptor verifies the client permission according to the authorization code, if the verification fails, error information is returned to the client, and the subsequent interface power and the like judgment is ended, and if the verification passes, the subsequent interface power and the like judgment is continued. In this embodiment, the security level of the interface is realized through the authority code, the reliability of the interface is improved, and meanwhile, the subsequent judgment of the power of the interface and the like can be stopped under the condition that the authority check does not pass, so that the consumption of server resources is avoided.
On the basis of any of the above embodiments, optionally, the interceptor may further determine whether the token format is legal, for example, whether the token format satisfies a format agreed with the server, for example, whether the token is defined as first of a method name, whether a token generation algorithm is reasonable, or the like; if the token format is illegal, returning error information to the client, finishing the subsequent interface power and the like judgment, and caching the token in the database so as to be convenient for directly intercepting when receiving the token next time and prevent from consuming server resources. And if the token format is legal, the subsequent interface power and the like are continuously judged. Optionally, in this embodiment, the token format and the token generation algorithm may be configured in the interface configuration file in advance.
According to the interface power equal judgment method provided by the embodiment, annotation information configured on a target interface of a server is configured on a client, an annotation resolver is configured on the client, an interceptor is configured on the server, the annotation resolver generates a token according to the annotation information and an interface calling request, the token is added into an implicit parameter of the interface calling request, the interface calling request is sent to the server in an implicit parameter transmission mode, and then the interceptor of the server judges the interface power equal according to the interface calling request and a preset power equal rule. The embodiment is based on the implicit parameter transmission mode, so that idempotent parameters of the token are hidden for the server interface, and the intrusion of interface codes is reduced; in addition, the decoupling of the idempotent function is realized by using the configurations of the annotation and annotation resolvers and the interceptors, the client only needs to add annotation information to the interface without extra coding, the server-side interface does not sense the idempotent judgment process, the server-side interface can focus the logic of the server-side interface, and the reliability of the interface is improved.
Fig. 7 is a flowchart of an interface idempotent determination method according to an embodiment of the present invention. On the basis of the foregoing embodiments, the present embodiment provides an interface idempotent determination method, which specifically includes the following steps:
s601, the client determines a server target interface to be called according to an interface calling request and acquires annotation information configured for the server target interface;
s602, the client generates a token according to the annotation information and the interface calling request through an annotation resolver configured on the client, and adds the token to an implicit parameter of the interface calling request;
s603, the client sends the interface calling request to a server in an implicit parameter transmission mode;
s604, the server intercepts the interface calling request through an interceptor configured on the server;
s605, the server side obtains interface information of a target interface of the server side through the interceptor;
s606, the server side judges whether the interface calling request needs to carry out interface power judgment or not according to the interface information and a preset interface list needing interface power and the like by the interceptor;
if the idempotent determination is necessary, S607 is executed, and if the idempotent determination is not necessary, S611 is executed (where the caching of the result data may or may not be executed)
S607, the server side verifies the client side authority through the interceptor according to the authorization code of the client side calling server side included in the implicit parameter of the interface calling request;
if the verification is passed, executing S608, otherwise executing S612;
s608, the server judges whether the token format is legal or not through the interceptor;
if the code is legal, executing S609, otherwise executing S612;
s609, the server side inquires result data corresponding to the token in a database according to the token through the interceptor;
if the result data corresponding to the token is queried, executing S610, and if the result data corresponding to the token cannot be queried, then S611.
S610, the server side directly returns the result data corresponding to the token to the client side;
s611, the server calls the target interface of the server directly according to the interface calling request, returns result data output by the target interface of the server to the client, and caches the result data and the token in the database in a correlated manner.
And S612, the server returns error information to the client and ends the subsequent interface idempotent judgment.
The implementation principle and technical effect of the interface idempotent determination method provided in this embodiment can be referred to the above embodiments, and are not described in detail here.
According to the interface power equal judgment method provided by the embodiment, annotation information configured on a target interface of a server is configured on a client, an annotation resolver is configured on the client, an interceptor is configured on the server, the annotation resolver generates a token according to the annotation information and an interface calling request, the token is added into an implicit parameter of the interface calling request, the interface calling request is sent to the server in an implicit parameter transmission mode, and then the interceptor of the server judges the interface power equal according to the interface calling request and a preset power equal rule. The embodiment is based on the implicit parameter transmission mode, so that idempotent parameters of the token are hidden for the server interface, and the intrusion of interface codes is reduced; in addition, the decoupling of the idempotent function is realized by using the configurations of the annotation and annotation resolvers and the interceptors, the client only needs to add annotation information to the interface without extra coding, the server-side interface does not sense the idempotent judgment process, the server-side interface can focus the logic of the server-side interface, and the reliability of the interface is improved; and whether the interface power is needed to be judged by configuration, the performance capability of the interface power can be added or deleted for the interface, the pluggable performance of the power judgment is realized, the reliability of the interface can be improved by the legality verification of the authorization code and the token format, meanwhile, the subsequent interface power judgment can be stopped under the condition that the authority verification is not passed or the token format is illegal, and the consumption of service end resources is avoided.
Fig. 8 is a block diagram of an interface idempotent determination apparatus according to an embodiment of the present invention. The interface power determination apparatus provided in this embodiment can execute the processing flow provided in the embodiment of the interface power determination method on the client side, and as shown in fig. 8, the interface power determination apparatus 700 includes an interface annotation module 701, an annotation analysis module 702, and a communication module 703.
The interface annotation module 701 is used for determining a target interface of a server to be called according to an interface calling request and acquiring annotation information configured for the target interface of the server;
an annotation parsing module 702, configured to generate a token according to the annotation information and the interface call request through an annotation parser configured on the client, and add the token to an implicit parameter of the interface call request;
the communication module 703 is configured to send the interface call request to the server in an implicit parameter transmission manner, so that an interceptor configured by the server performs interface idempotent judgment according to the interface call request and a preset idempotent rule.
In a possible implementation manner, the annotation information configured in advance for the target interface of the server includes: target attributes for generating tokens and a token generation policy;
the annotation parsing module 702 is configured to, when generating a token according to the annotation information and the interface call request through an annotation parser configured on the client,:
and processing the corresponding value of the target attribute according to the token generation strategy and the annotation analyzer, wherein the corresponding value of the target attribute is obtained from the interface calling request according to the target attribute for generating the token.
In a possible implementation manner, the annotation parsing module 702, when processing the corresponding value of the target attribute according to the token generation policy to generate the token, is configured to:
and splicing and/or encrypting the corresponding values of the target attributes through the annotation parser according to a splicing rule and/or an encryption algorithm included in the token generation strategy to generate the token.
In one possible implementation, the annotation parsing module 702 is further configured to:
and adding the authorization code of the client calling server to the implicit parameter of the interface calling request so that an interceptor configured by the server checks the client permission according to the authorization code.
The interface idempotent determination apparatus provided in the embodiments of the present invention may be specifically configured to execute the method embodiments provided in fig. 2 to 3, and specific functions are not described herein again.
The interface idempotent judgment device provided by the embodiment of the invention is characterized in that annotation information configured on a target interface of a server side at a client side is provided, an annotation resolver is configured on the client side, an interceptor is configured on the server side, the annotation resolver generates a token according to the annotation information and an interface calling request, the token is added into an implicit parameter of the interface calling request, the interface calling request is sent to the server side in an implicit parameter transmission mode, and then the interceptor of the server side judges the interface idempotent according to the interface calling request and a preset idempotent rule. The embodiment is based on the implicit parameter transmission mode, so that idempotent parameters of the token are hidden for the server interface, and the intrusion of interface codes is reduced; in addition, the decoupling of the idempotent function is realized by using the configurations of the annotation and annotation resolvers and the interceptors, the client only needs to add annotation information to the interface without extra coding, the server-side interface does not sense the idempotent judgment process, the server-side interface can focus the logic of the server-side interface, and the reliability of the interface is improved.
Fig. 9 is a block diagram of an interface idempotent determination apparatus according to an embodiment of the present invention. The interface power determination apparatus provided in this embodiment can execute the processing flow provided in the embodiment of the interface power determination method on the server side, as shown in fig. 9, the interface power determination apparatus 800 includes a receiving module 801 and an intercepting module 802.
A receiving module 801, configured to receive an interface call request sent by the client in an implicit parameter transfer manner, where the interface call request is used to call a target interface of a server, and an implicit parameter of the interface call request includes a token;
and the interception module 802 is configured to perform interface idempotent judgment according to the interface call request and a preset idempotent rule by using an interceptor configured on the server.
In a possible implementation manner, when the interception module 802 performs interface idempotent judgment according to the interface call request and a preset idempotent rule through an interceptor configured on the server, the interception module is configured to:
acquiring interface information of the target interface of the server side through the interceptor;
judging whether the interface calling request needs to carry out interface power judgment or not by the interceptor according to the interface information and a preset interface list needing interface power;
if the idempotent judgment is needed, the interceptor judges the interface idempotent according to the interface calling request and a preset idempotent rule; or
And if the idempotent judgment is needed, directly calling the target interface of the server according to the interface calling request.
In a possible implementation manner, when the interceptor determines the interface idempotent according to the interface call request and a preset idempotent rule, the intercepting module 802 is configured to:
inquiring result data corresponding to the token in a database according to the token through the interceptor;
if the result data corresponding to the token can be inquired, directly returning the result data to the client; or
If the result data corresponding to the token cannot be inquired, the server target interface is directly called according to the interface calling request, the result data output by the server target interface is returned to the client, and the result data and the token are associated and cached in the database.
In a possible implementation manner, before the performing, by the interceptor, the interface idempotent determination according to the interface call request and the preset idempotent rule, the intercepting module 802 is further configured to:
judging whether the token format is legal or not through the interceptor;
and if the token format is illegal, returning error information to the client, finishing subsequent interface power and the like judgment, and caching the token in the database.
In a possible implementation manner, the implicit parameter of the interface call request further includes an authorization code of the client calling the server;
the interception module 802 is further configured to, before the interceptor determines the interface idempotent according to the interface call request and a preset idempotent rule:
verifying the client side authority according to the authorization code through the interceptor;
and if the verification fails, returning error information to the client side, and finishing the subsequent interface idempotent judgment.
The interface idempotent determination apparatus provided in the embodiments of the present invention may be specifically configured to execute the method embodiments provided in fig. 4 to 6, and specific functions are not described herein again.
The interface idempotent judgment device provided by the embodiment of the invention is characterized in that annotation information configured on a target interface of a server side at a client side is provided, an annotation resolver is configured on the client side, an interceptor is configured on the server side, the annotation resolver generates a token according to the annotation information and an interface calling request, the token is added into an implicit parameter of the interface calling request, the interface calling request is sent to the server side in an implicit parameter transmission mode, and then the interceptor of the server side judges the interface idempotent according to the interface calling request and a preset idempotent rule. The embodiment is based on the implicit parameter transmission mode, so that idempotent parameters of the token are hidden for the server interface, and the intrusion of interface codes is reduced; in addition, the decoupling of the idempotent function is realized by using the configurations of the annotation and annotation resolvers and the interceptors, the client only needs to add annotation information to the interface without extra coding, the server-side interface does not sense the idempotent judgment process, the server-side interface can focus the logic of the server-side interface, and the reliability of the interface is improved.
Fig. 10 is a schematic structural diagram of a client according to an embodiment of the present invention. The client provided in the embodiment of the present invention may execute the processing flow provided in the embodiment of the client-side interface power idempotent determination method, as shown in fig. 10, the client 900 may be any computer device, including a memory 901, a processor 902, and a computer program; wherein a computer program is stored in the memory 901 and configured to be executed by the processor 902 for the method for idempotent determination as described in the above embodiments. In addition, the client 900 may further have a communication interface 903 for receiving a control command.
The client in the embodiment shown in fig. 10 may be configured to execute the technical solution of the above-mentioned method embodiment at the client side, and the implementation principle and the technical effect are similar, which are not described herein again.
Fig. 11 is a schematic structural diagram of a server according to an embodiment of the present invention. As shown in fig. 11, the server 910 may be any computer device, including a memory 911, a processor 912, and a computer program; wherein a computer program is stored in the memory 911 and is configured to be executed by the processor 912 to perform the idempotent determination method described in the above embodiments. In addition, the server 910 may further have a communication interface 913 for receiving a control command.
The server side in the embodiment shown in fig. 11 may be configured to execute the technical solution of the method embodiment of the server side, and the implementation principle and the technical effect are similar, which are not described herein again.
In addition, the present embodiment also provides a computer-readable storage medium, on which a computer program is stored, the computer program being executed by a processor to implement the method for determining an idempotent of an interface on the client side according to the above embodiment.
In addition, the present embodiment also provides a computer-readable storage medium, on which a computer program is stored, where the computer program is executed by a processor to implement the method for determining interface idempotency on the server side according to the foregoing embodiment.
In the embodiments provided in the present invention, it should be understood that the disclosed apparatus and method may be implemented in other ways. For example, the above-described apparatus embodiments are merely illustrative, and for example, the division of the units is only one logical division, and other divisions may be realized in practice, for example, a plurality of units or components may be combined or integrated into another system, or some features may be omitted, or not executed. In addition, the shown or discussed mutual coupling or direct coupling or communication connection may be an indirect coupling or communication connection through some interfaces, devices or units, and may be in an electrical, mechanical or other form.
The units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of network units. Some or all of the units can be selected according to actual needs to achieve the purpose of the solution of the embodiment.
In addition, functional units in the embodiments of the present invention may be integrated into one processing unit, or each unit may exist alone physically, or two or more units are integrated into one unit. The integrated unit can be realized in a form of hardware, or in a form of hardware plus a software functional unit.
The integrated unit implemented in the form of a software functional unit may be stored in a computer readable storage medium. The software functional unit is stored in a storage medium and includes several instructions to enable a computer device (which may be a personal computer, a server, or a network device) or a processor (processor) to execute some steps of the methods described in the embodiments of the present invention. And the aforementioned storage medium includes: various media capable of storing program codes, such as a usb disk, a removable hard disk, a Read-Only Memory (ROM), a Random Access Memory (RAM), a magnetic disk, or an optical disk.
It is obvious to those skilled in the art that, for convenience and simplicity of description, the foregoing division of the functional modules is merely used as an example, and in practical applications, the above function distribution may be performed by different functional modules according to needs, that is, the internal structure of the device is divided into different functional modules to perform all or part of the above described functions. For the specific working process of the device described above, reference may be made to the corresponding process in the foregoing method embodiment, which is not described herein again.
Finally, it should be noted that: the above embodiments are only used for illustrating the technical solutions of the embodiments of the present invention, and are not limited thereto; although embodiments of the present invention have been described in detail with reference to the foregoing embodiments, those skilled in the art will understand that: the technical solutions described in the foregoing embodiments may still be modified, or some or all of the technical features may be equivalently replaced; and the modifications or the substitutions do not make the essence of the corresponding technical solutions depart from the scope of the technical solutions of the embodiments of the present invention.

Claims (15)

1. An interface idempotent judgment method is applied to a client, and comprises the following steps:
determining a target interface of a server to be called according to an interface calling request, and acquiring annotation information configured for the target interface of the server;
generating a token according to the annotation information and the interface calling request through an annotation parser configured on the client, and adding the token into an implicit parameter of the interface calling request;
and sending the interface calling request to a server side in an implicit parameter transmission mode, and judging the interface power according to the interface calling request and a preset power rule by an interceptor configured by the server side.
2. The method according to claim 1, wherein the pre-configured annotation information for the target interface of the server comprises: target attributes for generating tokens and a token generation policy;
the generating a token according to the annotation information and the interface call request by an annotation parser configured on the client includes:
and processing the corresponding value of the target attribute according to the token generation strategy and the annotation analyzer, wherein the corresponding value of the target attribute is obtained from the interface calling request according to the target attribute for generating the token.
3. The method of claim 2, wherein processing the corresponding value of the target attribute according to the token generation policy to generate the token comprises:
and splicing and/or encrypting the corresponding values of the target attributes through the annotation parser according to a splicing rule and/or an encryption algorithm included in the token generation strategy to generate the token.
4. The method according to any one of claims 1-3, further comprising:
and adding the authorization code of the client calling server to the implicit parameter of the interface calling request so that an interceptor configured by the server checks the client permission according to the authorization code.
5. An interface idempotent judgment method is applied to a server side, and the method comprises the following steps:
receiving an interface calling request sent by the client in an implicit parameter transmission mode, wherein the interface calling request is used for calling a target interface of a server, and implicit parameters of the interface calling request comprise a token;
and judging the interface idempotency according to the interface calling request and a preset idempotency rule by an interceptor configured on the server.
6. The method according to claim 5, wherein the performing, by an interceptor configured on the server, an interface idempotent judgment according to the interface call request and a preset idempotent rule comprises:
acquiring interface information of the target interface of the server side through the interceptor;
judging whether the interface calling request needs to carry out interface power judgment or not by the interceptor according to the interface information and a preset interface list needing interface power;
if the idempotent judgment is needed, the interceptor judges the interface idempotent according to the interface calling request and a preset idempotent rule; or
And if the idempotent judgment is needed, directly calling the target interface of the server according to the interface calling request.
7. The method according to claim 6, wherein the performing, by the interceptor, an interface idempotent determination according to the interface call request and a preset idempotent rule comprises:
inquiring result data corresponding to the token in a database according to the token through the interceptor;
if the result data corresponding to the token can be inquired, directly returning the result data to the client; or
If the result data corresponding to the token cannot be inquired, the server target interface is directly called according to the interface calling request, the result data output by the server target interface is returned to the client, and the result data and the token are associated and cached in the database.
8. The method according to claim 7, before the performing, by the interceptor, an interface idempotent determination according to the interface call request and a preset idempotent rule, further comprising:
judging whether the token format is legal or not through the interceptor;
and if the token format is illegal, returning error information to the client, finishing subsequent interface power and the like judgment, and caching the token in the database.
9. The method according to any one of claims 6 to 8, wherein the implicit parameter of the interface call request further includes an authorization code of the client calling the server;
before the interface idempotent judgment is carried out by the interceptor according to the interface calling request and a preset idempotent rule, the method further comprises the following steps:
verifying the client side authority according to the authorization code through the interceptor;
and if the verification fails, returning error information to the client side, and finishing the subsequent interface idempotent judgment.
10. An apparatus for determining an interface idempotent, applied to a client, the apparatus comprising:
the interface annotation module is used for determining a target interface of a server to be called according to the interface calling request and acquiring annotation information configured for the target interface of the server;
the annotation analysis module is used for generating a token according to the annotation information and the interface calling request through an annotation analyzer configured on the client, and adding the token into an implicit parameter of the interface calling request;
and the communication module is used for sending the interface calling request to a server side in an implicit parameter transmission mode so that an interceptor configured by the server side judges the interface power according to the interface calling request and a preset power rule.
11. An apparatus for determining interface idempotency, applied to a server, the apparatus comprising:
the receiving module is used for receiving an interface calling request sent by the client in an implicit parameter transmission mode, wherein the interface calling request is used for calling a target interface of a server, and implicit parameters of the interface calling request comprise a token;
and the interception module is used for judging the interface power according to the interface calling request and a preset power rule through an interceptor configured on the server.
12. A client, comprising: at least one processor and memory;
the memory stores computer-executable instructions;
the at least one processor executing the computer-executable instructions stored by the memory causes the at least one processor to perform the method of any one of claims 1-4.
13. A server, comprising: at least one processor and memory;
the memory stores computer-executable instructions;
the at least one processor executing the computer-executable instructions stored by the memory causes the at least one processor to perform the method of any one of claims 5-9.
14. A computer-readable storage medium having computer-executable instructions stored thereon, which when executed by a processor, perform the method of any one of claims 1-4.
15. A computer-readable storage medium having computer-executable instructions stored thereon, which when executed by a processor, perform the method of any one of claims 5-9.
CN202011010062.2A 2020-09-23 2020-09-23 Interface idempotent judging method, device, equipment and storage medium Pending CN113778389A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202011010062.2A CN113778389A (en) 2020-09-23 2020-09-23 Interface idempotent judging method, device, equipment and storage medium

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202011010062.2A CN113778389A (en) 2020-09-23 2020-09-23 Interface idempotent judging method, device, equipment and storage medium

Publications (1)

Publication Number Publication Date
CN113778389A true CN113778389A (en) 2021-12-10

Family

ID=78835069

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202011010062.2A Pending CN113778389A (en) 2020-09-23 2020-09-23 Interface idempotent judging method, device, equipment and storage medium

Country Status (1)

Country Link
CN (1) CN113778389A (en)

Citations (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103838747A (en) * 2012-11-22 2014-06-04 富士通株式会社 Network service construction method and device and webpage data extraction method and device
US20140344453A1 (en) * 2012-12-13 2014-11-20 Level 3 Communications, Llc Automated learning of peering policies for popularity driven replication in content delivery framework
CN106302546A (en) * 2016-10-18 2017-01-04 青岛海信电器股份有限公司 The method and apparatus realizing server access
US20180039494A1 (en) * 2016-08-05 2018-02-08 Oracle International Corporation Zero down time upgrade for a multi-tenant identity and data security management cloud service
CN107924502A (en) * 2016-03-01 2018-04-17 华为技术有限公司 Multistage high-effect Business Process Management engine
CN109039687A (en) * 2017-06-12 2018-12-18 北京信威通信技术股份有限公司 Load-balancing method, device, system, equipment and the storage medium of request
CN111026465A (en) * 2019-11-15 2020-04-17 北京三快在线科技有限公司 Program processing method, program processing device, electronic device, and storage medium
US20200125455A1 (en) * 2018-10-19 2020-04-23 Oracle International Corporation Assured Lazy Rollback for a Multi-Tenant Identity Cloud Service

Patent Citations (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103838747A (en) * 2012-11-22 2014-06-04 富士通株式会社 Network service construction method and device and webpage data extraction method and device
US20140344453A1 (en) * 2012-12-13 2014-11-20 Level 3 Communications, Llc Automated learning of peering policies for popularity driven replication in content delivery framework
CN107924502A (en) * 2016-03-01 2018-04-17 华为技术有限公司 Multistage high-effect Business Process Management engine
US20180039494A1 (en) * 2016-08-05 2018-02-08 Oracle International Corporation Zero down time upgrade for a multi-tenant identity and data security management cloud service
CN106302546A (en) * 2016-10-18 2017-01-04 青岛海信电器股份有限公司 The method and apparatus realizing server access
CN109039687A (en) * 2017-06-12 2018-12-18 北京信威通信技术股份有限公司 Load-balancing method, device, system, equipment and the storage medium of request
US20200125455A1 (en) * 2018-10-19 2020-04-23 Oracle International Corporation Assured Lazy Rollback for a Multi-Tenant Identity Cloud Service
CN111026465A (en) * 2019-11-15 2020-04-17 北京三快在线科技有限公司 Program processing method, program processing device, electronic device, and storage medium

Non-Patent Citations (2)

* Cited by examiner, † Cited by third party
Title
彭凌;曾凡平;严俊;汤杨;: "一种检测Android应用程序隐式权限的方法", 小型微型计算机系统, no. 03, 15 March 2016 (2016-03-15) *
魏达, 刘衍珩, 李晓东: "基于Diffie-Hellman密钥交换的Web安全传输", 吉林大学学报(信息科学版), no. 03, 30 June 2005 (2005-06-30) *

Similar Documents

Publication Publication Date Title
JP7069286B2 (en) Privacy data processing methods, privacy data processing devices, devices and media
CN110521182B (en) Method and system for protocol level identity mapping
CN113239377B (en) Authority control method, device, equipment and storage medium
CN112788031B (en) Micro-service interface authentication system, method and device based on Envoy architecture
CN110839087B (en) Interface calling method and device, electronic equipment and computer readable storage medium
CN111740826B (en) Encryption method, decryption method, device and equipment based on encryption proxy gateway
CN112131021A (en) Access request processing method and device
CN1930850A (en) An apparatus, computer-readable memory and method for authenticating and authorizing a service request sent from a service client to a service provider
CN114745431B (en) Non-invasive authority authentication method, system, medium and equipment based on side car technology
EP3869374A2 (en) Method, apparatus and electronic device for processing user request and storage medium
US10218700B2 (en) Authorizations for computing devices to access a protected resource
CN112702336A (en) Security control method and device for government affair service, security gateway and storage medium
CN112511316A (en) Single sign-on access method and device, computer equipment and readable storage medium
KR20130077433A (en) System and method for authority management in the mobile cloud service
CN111970254A (en) Access control and configuration method, device, electronic equipment and storage medium
CN107181802A (en) Intelligent hardware control method and device, server, storage medium
CN110493236B (en) Communication method, computer equipment and storage medium
CN114428661A (en) Mirror image management method and device
CN109726592B (en) Data sandbox processing method and device
CN109726593B (en) Method and device for realizing data sandbox
CN116032627A (en) Unified authentication and authorization method and device based on micro-service architecture
CN113778389A (en) Interface idempotent judging method, device, equipment and storage medium
CN114598520B (en) Method, device, equipment and storage medium for controlling resource access
CN113784354B (en) Request conversion method and device based on gateway
WO2023024057A1 (en) Cross-domain authorization processing method and cross-domain call processing method

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination