CN114430340A - Cross-domain single sign-on method, device and equipment - Google Patents

Abstract

Embodiments of the present invention provide a method, device, and device for cross-domain single sign-on. The method includes: receiving a login request from a user; sending an ajax request for querying the user's login status to an authentication system, where the ajax request is used to extract all The identity authentication information of the user; if the user's login status is logged in, obtain an identity verification token fed back by the authentication system based on the identity authentication information; perform identity authentication on the user based on the identity verification token; If the identity authentication is passed, the user is allowed to log in. The present invention extracts the user's identity authentication information through the ajax request, and generates the identity authentication token correspondingly, thereby avoiding the defects of repeated jumping of the application system and the authentication system and the loss of the data data of the post request after page redirection.

Description

A cross-domain single sign-on method, device and device

technical field

The invention relates to the technical field of network information security, in particular to a cross-domain single sign-on method, device and equipment.

Background technique

With the rapid development of Internet technology, various network application systems emerge as the times require. The same user has different account passwords in different systems, resulting in the proliferation of user names and passwords, and also brings security risks.

The emergence of single sign-on (Single Sign-On, SSO) technology solves the login problem of the same user in different systems on the Internet. This technology transfers the identity authentication to a unified authentication server, and the authentication server generates a unified authentication certificate to realize the authentication and verification of the user's identity.

However, the existing single sign-on technology has the following problems in the actual application process: the single sign-on technology based on browser redirection, the application system and the authentication system jump repeatedly, which affects the user experience; after the page is redirected, the data of the post request Data loss is not conducive to the exchange of information and data between application systems.

SUMMARY OF THE INVENTION

Therefore, the technical problem to be solved by the present invention is to overcome the defects in the prior art that the application system and the authentication system are repeatedly jumped and the data data of the post request is lost after page redirection, thereby providing a cross-domain single sign-on method, device and method. equipment.

According to a first aspect, an embodiment of the present invention provides a cross-domain single sign-on method, which is applied to an application system and includes the following steps: receiving a user's login request; sending an Ajax request for querying the user's login status to an authentication system, so The ajax request is used to extract the user's identity authentication information; if the user's login status is logged in, obtain the identity verification token fed back by the authentication system based on the identity authentication information; based on the identity verification token pair The user performs identity authentication; if the identity authentication is passed, the user is allowed to log in.

Optionally, the cross-domain single sign-on method further includes: if the user's login status is not logged in, acquiring user login information input by the user, so that the user can log in to the application system; Send a login ajax request, so that the authentication system generates the user's login credential authentication token based on the user's second identity authentication information included in the login ajax request, and stores the second identity authentication information The mapping relationship with the login credential authentication token; confirming that the user has successfully logged in, and returning to the step of executing the step of receiving the user's login request to the step of sending an ajax request to query the user's login status to the authentication system to query the user's login state.

According to a second aspect, an embodiment of the present invention further provides a cross-domain single sign-on device, including: a login receiving module, configured to receive a login request; and a request sending module, configured to send an ajax query for querying the user's login status to an authentication system request, the ajax request is used to extract the identity authentication information of the user; the information verification module is used to obtain the authentication token fed back by the authentication system based on the identity authentication information if the user's login status is logged in an authentication module for performing identity authentication on the user based on the identity verification token; a communication module for allowing the user to log in if the identity authentication is passed.

According to a third aspect, an embodiment of the present invention further provides a cross-domain single sign-on method, which is applied to an authentication system and includes the following steps: acquiring an ajax request sent by an application system to query the user's login status, where the ajax request is used for Extract the identity authentication information of the user; if the login status of the user is logged in, feedback the identity authentication token generated based on the identity authentication information to the application system, so that the application system can make the authentication token based on the identity authentication token The card authenticates the user.

Optionally, the cross-domain single sign-on method further includes: if the user's login status is not logged in, acquiring a login ajax request sent by the application system based on the user's login information; the login ajax request includes: The second identity authentication information of the user; a second identity authentication token is obtained based on the second identity authentication information, and the mapping relationship between the second identity authentication information and the second identity authentication token is stored.

Optionally, the process of judging whether the user is in a logged-in state, the method includes: extracting an authentication token based on the identity authentication information of the user, the login state of the user is logged in; If no authentication token is extracted from the user's identity authentication information, the user's login status is not logged in.

According to a fourth aspect, an embodiment of the present invention further provides a cross-domain single sign-on device, which is applied to an authentication system, including: a request receiving module, configured to obtain an Ajax request sent by an application system to query the user's login status, the The ajax request is used to extract the identity authentication information of the user; the judgment module is used to feed back the authentication token generated based on the identity authentication information to the application system if the user's login status is logged in, so that all The application system performs identity authentication on the user based on the identity verification token.

According to a fifth aspect, an embodiment of the present invention further provides a cross-domain single sign-on system, including an authentication system and an application system, where the application system is configured to receive a user's login request, and send a query to the user based on the login request The ajax request in the login state is sent to the authentication system; the authentication system is configured to extract the user's identity authentication information based on the ajax request, obtain an authentication token based on the identity authentication information, and feed back to the application system the identity verification token; the application system is configured to perform identity authentication on the user based on the identity verification token, and if the identity authentication is passed, the user is allowed to log in.

According to a sixth aspect, an embodiment of the present invention provides a cross-domain single sign-on device, including: a memory and a processor, the memory and the processor are connected in communication with each other, the memory stores computer instructions, and the The processor executes the method described in any one of the first aspect or any optional manner by executing the computer instructions.

According to a seventh aspect, a computer-readable storage medium, characterized in that, the computer-readable storage medium stores computer instructions, and the computer instructions are used to cause the computer to execute the first aspect or any optional implementation. method described in the method.

The technical scheme of the present invention has the following advantages:

An embodiment of the present invention provides a cross-domain single sign-on method, which is applied to an application system. The method includes the following steps: receiving a user's login request; sending an ajax request to query the user's login status to an authentication system, and the ajax request uses to extract the identity authentication information of the user; if the login status of the user is logged in, obtain the identity authentication token fed back by the authentication system based on the identity authentication information; Authentication. The present invention extracts the user's identity authentication information through ajax request, and generates an identity authentication token correspondingly, thereby avoiding the defects of repeated jumping of the application system and the authentication system and the loss of data data of the post request after page redirection.

An embodiment of the present invention also provides a cross-domain single sign-on method, which is applied to an authentication system. The method includes the following steps: acquiring an Ajax request sent by an application system to query the login status of a user, and extracting the user's login status according to the Ajax request. Identity authentication information, if the user's login status is logged in, feedback the authentication token generated based on the identity authentication information to the application system, so that the application system can identify the user based on the authentication token Authenticate. The present invention extracts the user's identity authentication information through the ajax request, and generates the identity authentication token correspondingly, thereby avoiding the defects of repeated jumping of the application system and the authentication system and the loss of the data data of the post request after page redirection.

An embodiment of the present invention further provides a cross-domain single sign-on system, and the workflow of the system includes the following steps: first, the application system receives a user's login request, and based on the login request, sends an ajax request for querying the user's login status to the authentication system; then the authentication system extracts the identity authentication information of the user based on the ajax request, obtains an authentication token based on the identity authentication information, and feeds back the authentication token to the application system; the application The system is used to authenticate the user based on the identity verification token, and if the identity authentication is passed, the user is allowed to log in. The present invention extracts the user's identity authentication information through ajax request, generates an identity authentication token correspondingly, and saves the mapping relationship between the identity authentication information and the identity authentication token, thereby avoiding repeated jumps and page redirection between the application system and the authentication system The defect that the data data requested by the post is lost later, and at the same time, it is convenient for users to quickly access the application system based on the mapping relationship when they subsequently access the application system, which improves the user login speed.

Description of drawings

In order to illustrate the specific embodiments of the present invention or the technical solutions in the prior art more clearly, the following briefly introduces the accompanying drawings that need to be used in the description of the specific embodiments or the prior art. Obviously, the accompanying drawings in the following description The drawings are some embodiments of the present invention. For those of ordinary skill in the art, other drawings can also be obtained based on these drawings without creative efforts.

1 is an interactive flowchart of a cross-domain single sign-on system according to an embodiment of the present invention;

2 is a specific example flowchart of a cross-domain single sign-on method according to an embodiment of the present invention;

3 is a flowchart of another specific example of a cross-domain single sign-on method according to an embodiment of the present invention;

4 is a schematic block diagram of a specific example device of a cross-domain single sign-on device according to an embodiment of the present invention;

5 is a flowchart of another specific example of a cross-domain single sign-on method according to an embodiment of the present invention;

6 is a schematic block diagram of another specific example device of a cross-domain single sign-on device according to an embodiment of the present invention;

FIG. 7 is a specific example structure diagram of a cross-domain single sign-on device according to an embodiment of the present invention.

Detailed ways

The technical solutions of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are a part of the embodiments of the present invention, but not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

In addition, the technical features involved in the different embodiments of the present invention described below can be combined with each other as long as they do not conflict with each other.

The embodiment of the present invention enables the application system and the authentication system to complete the authentication of the user information in the interaction process based on the ajax request, so that the user can log in successfully.

An embodiment of the present invention provides a cross-domain single sign-on system, including an authentication system 1 and an application system 2, and an interaction process between the authentication system 1 and the application system 2 is shown in FIG. 1 .

After the application system 1 receives the user's login request, step S10 is performed: sending an ajax request for querying the user's login status to the authentication system 1, where the ajax request is used to extract the user's identity authentication information.

In an optional embodiment, after sending an ajax request to the authentication system 1 for querying the login status of the user, if the login status of the user is not logged in, the user login information input by the user is obtained to enable the user to log in. The application system 1 sends a login ajax request to the authentication system 2 .

The authentication system 1 executes step S11 : acquiring the ajax request sent by the application system 2 for querying the login status of the user, where the ajax request is used to extract the identity authentication information of the user.

In an optional embodiment, the authentication system 1 generates the user's login credential authentication token based on the user's identity authentication information included in the login ajax request, and the authentication token is based on ajax Request the generated Token corresponding to the user's identity authentication information, and store the mapping relationship between the second identity authentication information and the login credential authentication token, confirm that the user's login is successful, and return to executing the steps of receiving the user's login request. The authentication system 1 sends an ajax request for querying the login status of the user, so as to query the login status of the user. In practical applications, in order to improve the security of identity verification, the Token can be set with an expiration date, and the expiration date can be saved, and the expiration time of the Token is automatically refreshed every time the user operates.

The application system 2 performs step S12: if the user's login status is logged in, obtain the identity verification token fed back by the authentication system 1 based on the identity authentication information.

The authentication system 1 performs step S13 : feeding back the identity verification token generated based on the identity authentication information to the application system 2 .

Specifically, the authentication system 1 generates a corresponding identity verification token based on the identity authentication information, and saves the mapping relationship between the identity authentication information and the identity verification token. Based on the user's identity authentication information, it is determined whether the user's login status is logged in, and if a corresponding identity verification token can be extracted based on the user's identity authentication information, the user is in a logged-in status. In practical applications, the authentication token may be, for example, a Token and an expiration time of the Token.

The application system 2 performs step S14: performing identity authentication on the user based on the identity verification token.

The application system 2 executes step S15: if the identity authentication is passed, the user is allowed to log in.

In an optional embodiment, as shown in FIG. 2 , if the user login status is not logged in, the application system 2 executes step S16 : obtains the user login information input by the user, so that the user logs in to the application system. 2.

Specifically, the ajax-based login page automatically jumps to the login interface, and obtains the user name and password input by the user, so that the user logs in to the application system 2 .

The authentication system 1 executes step S17: obtains the login ajax request sent by the application system 2 based on the user's login information.

Specifically, the authentication system 1 obtains a login ajax request sent by the application system 2, the ajax request includes the second identity authentication information of the user, obtains a second identity authentication token based on the second identity authentication information, and stores The mapping relationship between the second identity authentication information and the second identity authentication token.

In the cross-domain single sign-on method provided by the embodiment of the present invention, the user's login request is received through the application system 2, and an Ajax request for querying the user's login status is sent to the authentication system 1, and the authentication system 2 extracts all the data based on the Ajax request. the identity authentication information of the user, obtain the corresponding identity authentication token according to the identity authentication information, determine whether the user's login status is logged in based on the acquisition of the identity authentication token, and feed back to the application system 2 based on the identity The identity verification token generated by the authentication information completes the identity authentication of the user, allows the user to log in and saves the mapping relationship between the identity authentication information and the identity verification token, thereby avoiding repeated jumps between the application system 2 and the authentication system 1 , After the page is redirected, the data data of the post request is lost, and at the same time, it is convenient for the user to access the application system 2 later based on the mapping relationship, which improves the user's login speed.

The embodiment of the present invention also provides a cross-domain single sign-on method, which is applied to the application system 2, as shown in FIG. 3, including:

Step S20: receiving a login request from the user;

Step S21: Send an Ajax request for querying the login status of the user to the authentication system, where the Ajax request is used to extract the identity authentication information of the user. For details, refer to the description of Step S10 in the above embodiment;

Step S22: if the user's login status is logged in, obtain the identity verification token fed back by the authentication system based on the identity authentication information. For details, refer to the description of step S12 in the above embodiment;

Step S23: Perform identity authentication on the user based on the identity verification token. For details, refer to the description of step S14 in the above embodiment;

Step S24: If the identity authentication is passed, the user is allowed to log in. For details, refer to the description of step S15 in the above embodiment.

The present invention provides a cross-domain single sign-on method, which is applied to the application system 2. The method includes the following steps: receiving a user's login request; sending an ajax request for querying the user's login status to the authentication system 1; The request is used to extract the identity authentication information of the user; if the login status of the user is logged in, obtain the identity authentication token fed back by the authentication system 1 based on the identity authentication information; The user is authenticated. The present invention extracts the user's identity authentication information through the ajax request, and generates the identity authentication token correspondingly, thereby avoiding the defect of repeated jumping of the application system 2 and the authentication system 1 and the loss of the data data of the post request after page redirection.

In an optional embodiment, the cross-domain single sign-on method further includes the following steps:

(1) If the user login status is not logged in, obtain the user login information input by the user, so that the user logs in to the application system 2;

(2) Send a login ajax request to the authentication system 1, so that the authentication system 1 generates the user's login credential authentication token based on the user's second identity authentication information included in the login ajax request , and store the mapping relationship between the second identity authentication information and the login credential authentication token;

(3) Confirm that the user has successfully logged in, and return to the step of receiving the user's login request to the step of sending an ajax request for querying the user's login status to the authentication system 1 to query the user's login status.

In the embodiment of the present invention, if the login status of the user is not logged in, the login information input by the user is re-acquired, and a login ajax request is sent to the authentication system 1, and the login ajax request is used by the authentication system 1 based on the login Ajax requests to obtain the user's second identity authentication information to generate the user's login credential authentication token, and stores the mapping relationship between the second identity authentication information and the login credential authentication token, confirms that the user has successfully logged in, and Return to the step of receiving the user's login request, and re-send the ajax request for querying the user's login status to the authentication system 1, so as to query the user's login status. Through the ajax request, the mapping relationship between the second identity authentication information and the login credential authentication token is re-established for the user who is not logged in, so that the user can quickly access the application system 2 based on the mapping relationship when accessing the application system 2 later. User login speed.

As shown in FIG. 4 , an embodiment of the present invention also provides a cross-domain single sign-on device, which is applied to an application system and includes: a login receiving module 3, a request sending module 4, an information verification module 5, an authentication module 6, and a communication module 7 and so on.

The login receiving module 3 is used to receive a login request, and for details, refer to the description of step S20 in the above-mentioned embodiment;

The request sending module 4 is used to send an Ajax request for querying the login status of the user to the authentication system, and the Ajax request is used to extract the identity authentication information of the user. For details, refer to the description of step S21 in the above embodiment;

The information verification module 5 is configured to obtain the identity verification token fed back by the authentication system based on the identity authentication information if the user's login status is logged in. For details, refer to the description of step S22 in the above embodiment;

An authentication module 6, configured to perform identity authentication on the user based on the identity verification token. For details, refer to the description of step S23 in the above embodiment;

The communication module 7 is configured to allow the user to log in if the identity authentication is passed. For details, please refer to the description of step S24 in the above embodiment.

The present invention provides a cross-domain single sign-on method, which is applied to the application system 2. The method includes the following steps: receiving a user's login request; sending an ajax request for querying the user's login status to the authentication system 1; The request is used to extract the identity authentication information of the user; if the login status of the user is logged in, obtain the identity authentication token fed back by the authentication system 1 based on the identity authentication information; The user is authenticated. The present invention extracts the user's identity authentication information through the ajax request, and generates the identity authentication token correspondingly, thereby avoiding the defect of repeated jumping of the application system 2 and the authentication system 1 and the loss of the data data of the post request after page redirection.

For the specific limitations and beneficial effects of the cross-domain single sign-on apparatus, reference may be made to the above limitations on the cross-domain single sign-on method, which will not be repeated here. Each module of the above-mentioned cross-domain single sign-on device may be implemented in whole or in part by software, hardware and combinations thereof. The above modules can be embedded in or independent of the processor in the electronic device in the form of hardware, or stored in the memory in the electronic device in the form of software, so that the processor can call and execute the operations corresponding to the above modules.

As shown in FIG. 5 , an embodiment of the present invention further provides a cross-domain single sign-on method, which is applied to the authentication system 1 and includes the following steps:

Step S30: Obtain the ajax request sent by the application system 2 for querying the login status of the user, where the ajax request is used to extract the identity authentication information of the user. For details, refer to the description of step S11 in the above embodiment.

Step S31: If the user's login status is logged in, feedback the identity verification token generated based on the identity verification information to the application system 2, so that the application system 2 can verify the identity verification token based on the identity verification token. The user performs identity authentication. For details, refer to the description of step S12 in the foregoing embodiment.

The embodiment of the present invention also provides a cross-domain single sign-on method, which is applied to the authentication system 1. The method includes the following steps: acquiring an ajax request sent by the application system 2 to query the user's login status, and extracting the ajax request according to the ajax request. The user's identity authentication information, if the user's login status is logged in, the identity authentication token generated based on the identity authentication information is fed back to the application system 2, so that the application system 2 is based on the identity authentication token. The user is authenticated. The present invention extracts the user's identity authentication information through the ajax request, and generates the identity authentication token correspondingly, thereby avoiding the defect of repeated jumping of the application system 2 and the authentication system 1 and the loss of the data data of the post request after page redirection.

In an optional embodiment, the cross-domain single sign-on method further includes the following steps:

(1) If the login status of the user is not logged in, obtain the login ajax request sent by the application system 2 based on the login information of the user;

(2) The login ajax request contains the second identity authentication information of the user;

(3) Obtaining a second identity verification token based on the second identity verification information, and storing the mapping relationship between the second identity verification information and the second identity verification token.

In this embodiment of the present invention, if the user's login status is not logged in, the authentication system 1 sends a login ajax request again, and the login ajax request is used for the authentication system 1 to obtain the user's first login based on the login ajax request. The second identity authentication information generates the user's login credential authentication token, and stores the mapping relationship between the second identity authentication information and the login credential authentication token. Through the ajax request, the mapping relationship between the second identity authentication information and the login credential authentication token is re-established for the user who is not logged in, so that the user can quickly access the application system 2 based on the mapping relationship when accessing the application system 2 later. User login speed.

In an optional embodiment, after the ajax request is used to extract the identity authentication information of the user, the following steps are included:

(1) Based on the identity authentication information of the user, determine whether the login status of the user is logged in, and if an identity verification token is extracted based on the identity authentication information of the user, the login status of the user is logged in;

(2) If the identity authentication token is not extracted based on the identity authentication information of the user, the user login status is not logged in.

In this embodiment of the present invention, it is determined whether the user is in a logged-in state according to whether the identity authentication information can extract the corresponding authentication token. If the identity authentication token is extracted based on the user's identity authentication information, the user The login state is logged in, and if no authentication token is extracted based on the user's identity authentication information, the user login state is not logged in. In practical applications, the authentication token can be a Token. After the user successfully logs in with his account and password, a Token and Token expiration time are generated correspondingly and returned to the application system. When logging in again, the mapping relationship of the Token can be used. There is no need to enter the account password again. If you do not log in, the Token and Token expiration time will not be generated. Whether the user is logged in can be more accurately determined by whether the authentication token is generated, and the user can log in quickly according to the corresponding relationship between the authentication token and the identity authentication information.

As shown in FIG. 6 , an embodiment of the present invention also provides a cross-domain single sign-on device, which is applied to an authentication system and includes: a request receiving module 8 and a judging module 9, wherein:

The request receiving module 8 is configured to obtain the ajax request sent by the application system to query the login status of the user, and the ajax request is used to extract the identity authentication information of the user. For details, refer to the description of step S30 in the above embodiment;

Judgment module 9, configured to feed back the authentication token generated based on the identity authentication information to the application system if the user's login status is logged in, so that the application system can identify all users based on the authentication token. The user performs identity authentication. For details, refer to the description of step S31 in the above embodiment.

The embodiment of the present invention also provides a cross-domain single sign-on method, which is applied to the authentication system 1. The method includes the following steps: acquiring an ajax request sent by the application system 2 to query the user's login status, and extracting the ajax request according to the ajax request. The user's identity authentication information, if the user's login status is logged in, the identity authentication token generated based on the identity authentication information is fed back to the application system 2, so that the application system 2 is based on the identity authentication token. The user is authenticated. The present invention extracts the user's identity authentication information through the ajax request, and generates the identity authentication token correspondingly, thereby avoiding the defect of repeated jumping of the application system 2 and the authentication system 1 and the loss of the data data of the post request after page redirection.

For the specific limitations and beneficial effects of the cross-domain single sign-on apparatus, reference may be made to the above limitations on the cross-domain single sign-on method, which will not be repeated here. Each module of the above-mentioned cross-domain single sign-on device may be implemented in whole or in part by software, hardware and combinations thereof. The above modules can be embedded in or independent of the processor in the electronic device in the form of hardware, or stored in the memory in the electronic device in the form of software, so that the processor can call and execute the operations corresponding to the above modules.

An embodiment of the present invention further provides a cross-domain single sign-on device, as shown in FIG. 7, which is a schematic structural diagram of a cross-domain single sign-on device provided by an optional embodiment of the present invention. The device may include at least one processor 41, at least one communication interface 42, at least one communication bus 43, and at least one memory 44, wherein the communication interface 42 may include a display screen (Display), a keyboard (Keyboard), and the optional communication interface 42 may also Can include standard wired interface, wireless interface. The memory 44 may be a high-speed RAM memory (Random Access Memory, volatile random access memory), or may be a non-volatile memory (non-volatile memory), such as at least one disk memory. The memory 44 can optionally also be at least one storage device located away from the aforementioned processor 41 . The processor 41 may be combined with the devices described in FIG. 4 and FIG. 6 , the memory 44 stores application programs, and the processor 41 calls the program codes stored in the memory 44 to execute the cross-domain single point of any of the above method embodiments. The steps of the login method.

The communication bus 43 may be a peripheral component interconnect (PCI for short) bus or an extended industry standard architecture (EISA for short) bus or the like. The communication bus 43 can be divided into an address bus, a data bus, a control bus, and the like. For ease of presentation, only one thick line is used in FIG. 7, but it does not mean that there is only one bus or one type of bus.

The memory 44 may include volatile memory (English: volatile memory), such as random-access memory (English: random-access memory, abbreviation: RAM); the memory may also include non-volatile memory (English: non-volatile memory) memory), such as flash memory (English: flash memory), hard disk (English: hard diskdrive, abbreviation: HDD) or solid-state drive (English: solid-state drive, abbreviation: SSD); the memory 44 may also include the above-mentioned types of memory The combination.

The processor 41 may be a central processing unit (English: central processing unit, abbreviation: CPU), a network processor (English: network processor, abbreviation: NP), or a combination of CPU and NP.

The processor 41 may further include a hardware chip. The above-mentioned hardware chip may be an application-specific integrated circuit (English: application-specific integrated circuit, abbreviation: ASIC), a programmable logic device (English: programmable logic device, abbreviation: PLD) or a combination thereof. The above-mentioned PLD may be a complex programmable logic device (English: complex programmable logic device, abbreviation: CPLD), a field programmable gate array (English: field-programmable gate array, abbreviation: FPGA), a general-purpose array logic (English: generic arraylogic , abbreviation: GAL) or any combination thereof.

Optionally, memory 44 is also used to store program instructions. The processor 41 may invoke program instructions to implement the cross-domain single sign-on method as shown in the embodiment of FIG. 3 of the present invention.

Embodiments of the present invention further provide a non-transitory computer storage medium, where the computer storage medium stores computer-executable instructions, where the computer-executable instructions can execute the cross-domain single sign-on method in any of the foregoing method embodiments. Wherein, the storage medium may be a magnetic disk, an optical disk, a read-only memory (Read-Only Memory, ROM), a random access memory (Random Access Memory, RAM), a flash memory (Flash Memory), a hard disk (Hard) DiskDrive, abbreviation: HDD) or solid-state drive (Solid-State Drive, SSD), etc.; the storage medium may also include a combination of the above-mentioned types of memories.

Obviously, the above-mentioned embodiments are only examples for clear description, and are not intended to limit the implementation manner. For those of ordinary skill in the art, changes or modifications in other different forms can also be made on the basis of the above description. There is no need and cannot be exhaustive of all implementations here. And the obvious changes or changes derived from this are still within the protection scope of the present invention.

Claims (10)

1. a cross-domain single sign-on method, applied to an application system, is characterized in that, comprises the steps: Receive the user's login request; Send an Ajax request for querying the login status of the user to the authentication system, where the Ajax request is used to extract the identity authentication information of the user; If the user's login status is logged in, obtain the authentication token fed back by the authentication system based on the identity authentication information; Authenticating the user based on the authentication token; If the identity authentication is passed, the user is allowed to log in. 2. The cross-domain single sign-on method according to claim 1, wherein the method further comprises: If the user login status is not logged in, obtain the user login information input by the user, so that the user logs in to the application system; Send a login ajax request to the authentication system, so that the authentication system generates the user's login credential authentication token based on the user's second identity authentication information included in the login ajax request, and stores the The mapping relationship between the second identity authentication information and the login credential authentication token; Confirm that the user has successfully logged in, and return to the step of receiving the user's login request to the step of sending an ajax request for querying the user's login status to the authentication system, so as to query the user's login status. 3. A cross-domain single sign-on device, applied to an application system, characterized in that, comprising: The login receiving module is used to receive the login request; A request sending module, configured to send an Ajax request for querying the login status of the user to the authentication system, where the Ajax request is used to extract the identity authentication information of the user; an information verification module, configured to obtain an identity verification token fed back by the authentication system based on the identity authentication information if the user's login status is logged in; an authentication module, configured to authenticate the user based on the authentication token; The communication module is used for allowing the user to log in if the identity authentication is passed. 4. A cross-domain single sign-on method, applied to an authentication system, is characterized in that, comprising the following steps: Obtain the ajax request sent by the application system to query the login status of the user, where the ajax request is used to extract the user's identity authentication information; If the user's login status is logged in, an authentication token generated based on the identity authentication information is fed back to the application system, so that the application system authenticates the user based on the identity authentication token. 5. The cross-domain single sign-on method according to claim 4, further comprising: If the login status of the user is not logged in, obtain the login ajax request sent by the application system based on the login information of the user; The login ajax request includes the user's second identity authentication information; Obtain a second identity verification token based on the second identity verification information, and store the mapping relationship between the second identity verification information and the second identity verification token. 6. The cross-domain single sign-on method according to any one of claims 1-5, wherein the process of judging whether the user is in a logged-in state comprises: An identity verification token is extracted based on the identity authentication information of the user, and the login status of the user is logged in; If no authentication token is extracted based on the identity authentication information of the user, the login status of the user is not logged in. 7. A cross-domain single sign-on device, applied to an authentication system, characterized in that, comprising: a request receiving module, configured to obtain an Ajax request sent by an application system to query the login status of the user, where the Ajax request is used to extract the user's identity authentication information; A judgment module, configured to feed back an authentication token generated based on the identity authentication information to the application system if the user's login status is logged in, so that the application system can identify the authentication token based on the authentication token to the application system. User authenticates. 8. A cross-domain single sign-on system, comprising an authentication system and an application system, The application system is configured to receive a user's login request, and send an Ajax request for querying the user's login status to the authentication system based on the login request; The authentication system is configured to extract the identity authentication information of the user based on the ajax request, obtain an authentication token based on the identity authentication information, and feed back the authentication token to the application system; The application system is configured to perform identity authentication on the user based on the identity verification token, and if the identity authentication is passed, the user is allowed to log in. 9. A cross-domain single sign-on device, comprising: A communication unit, a memory, and a processor, the memory and the processor are connected in communication with each other, and computer instructions are stored in the memory, and the processor executes any of claims 1-7 by executing the computer instructions. A step of the method. 10. A computer-readable storage medium, wherein the computer-readable storage medium stores computer instructions, and the computer instructions are used to cause the computer to execute the method according to any one of claims 1-7 A step of.

Images