WO2015096569A1

WO2015096569A1 - Resource gateway and resource access authorization method

Info

Publication number: WO2015096569A1
Application number: PCT/CN2014/091649
Authority: WO
Inventors: 孙立军
Original assignee: 华为技术有限公司
Priority date: 2013-12-25
Filing date: 2014-11-19
Publication date: 2015-07-02
Also published as: CN103716317A

Abstract

A resource gateway, comprising a first network interface and a second network interface; a memory which is used for storing a program code; and a processor which is connected to the memory, the first network interface and the second network interface and is used for reading the program code in the memory. The processor: receives a first request which is sent by a resource user for requesting to acquire an access code of a first resource via the first network interface, the first request being generated by the resource user according to a first API provided by the resource gateway; according to the first request, acquires from a resource owner of the first resource an authorization code of the first resource via the second network interface; according to the authorization code of the first resource which is provided by the resource owner, acquires from the resource owner of the first resource the access code of the first resource via the second network interface; and returns the access code of the first resource to the resource user via the first network interface. Also disclosed at the same time is a resource access authorization method.

Description

Resource gateway and resource access authorization method

Technical field

The present invention relates to the field of network technologies, and in particular, to a resource gateway and a resource access authorization method.

Background technique

Today, many resource owners open their own resources to provide access to resource users. For example, a social application (eg, Weibo) as a resource owner opens its own specific API (Application Programming Interface) to enable other applications that are resource consumers to call that particular API. To publish information through social applications.

For information security reasons, many resource owners are based on the OAUTH protocol. After confirming that the resource user is a legitimate user, the resource user is provided with the resource access code to enable the resource user to use the resource owner based on the access code. Resources provided.

When the resource user obtains the access code of the resource from the resource owner based on the OAUTH protocol, the resource user needs to make two API calls to the resource owner (the first call to the API for obtaining the authorization code of the resource, the second call) The API for obtaining access codes for resources, which brings inconvenience to resource users.

Summary of the invention

The embodiment of the present application solves the technical problem that the resource user needs to perform two API calls when acquiring the access code of the resource in the prior art by providing a resource gateway and a resource access authorization method.

In a first aspect, a resource gateway is provided, including:

a first network interface and a second network interface;

a memory for storing program code;

a processor, configured to interface with the memory, the first network interface, and the second network, to read the program code in the memory, and execute:

Receiving, by the first network interface, a first request for requesting to acquire an access code of the first resource, where the first request is a first API provided by the resource user according to the resource gateway Generating; according to the first request, obtaining an authorization code of the first resource from a resource owner of the first resource by using the second network interface; according to the first provided by the resource owner An authorization code of the resource, and obtaining, by the second network interface, an access code of the first resource from a resource owner of the first resource; returning an access code of the first resource by using the first network interface To the resource user.

In conjunction with the first aspect, in a first possible implementation manner of the first aspect, the processor is further configured to:

Generating, according to the first request, and the second API provided by the resource owner of the first resource, a second request for requesting to acquire an authorization code of the first resource; Transmitting the second request to the resource owner; receiving, by the second network interface, an authorization code of the first resource returned by the resource owner.

With reference to the first aspect, or the first possible implementation manner of the first aspect, in the second possible implementation manner of the first aspect, the processor is further configured to:

Generating, according to the authorization code of the first resource and the third API provided by the resource owner of the first resource, a third request for requesting to acquire an access code of the first resource, where the third The request includes an authorization code of the first resource; the third request is sent to the resource owner by the second network interface; and the returned by the resource owner is received by the second network interface The access code of the first resource.

With reference to the first aspect, or the first possible implementation manner of the first aspect, or the second possible implementation manner of the first aspect, in a third possible implementation manner of the first aspect, the processor, Also used for:

Before the access code of the first resource is returned to the resource user by using the first network interface, when the format of the access code of the first resource is the first format, the first The format of the access code of the resource is converted from the first format to a first predetermined format, wherein the first format is any format different from the first predetermined format.

In combination with the first aspect, or the first possible implementation of the first aspect, or the second possible implementation of the first aspect, or the third possible implementation of the first aspect, in the first aspect In four possible implementation manners, the processor is further configured to:

After obtaining the authorization code of the first resource from the resource owner of the first resource according to the first request, according to the authorization code of the first resource provided by the resource owner, and passing The second network interface acquires a refresh code of the first resource from a resource owner of the first resource, and returns a refresh code of the first resource to the resource user by using the first network interface.

In a fifth possible implementation manner of the first aspect, the processor is further configured to:

Before the refresh code of the first resource is returned to the resource user by using the first network interface, when the format of the refresh code of the first resource is the second format, the first The format of the refresh code of the resource is converted from the second format to a second predetermined format, wherein the second format is any format different from the second predetermined format.

With reference to the fourth possible implementation manner of the first aspect, or the fifth possible implementation manner of the first aspect, in a sixth possible implementation manner of the first aspect, the processor is further configured to:

Receiving, by the first network interface, the refresh code of the first resource to the resource user, receiving, by the resource user, a fourth request for refreshing an access code of the first resource a request, the fourth request is generated by the resource user according to the refresh code of the first resource, and a fourth API provided by the resource gateway, where the fourth request includes the first resource Refreshing code; after determining that the resource owner supports refreshing the access code of the first resource, acquiring, according to the fourth request, the first resource that is refreshed from the resource owner by using the second network interface And accessing the updated access code of the first resource to the resource user by using the first network interface.

In conjunction with the sixth possible implementation of the first aspect, in a seventh possible implementation of the first aspect, the processor is further configured to:

Generating a fifth request for requesting to refresh an access code of the first resource according to a refresh code of the first resource and a fifth API provided by a resource owner of the first resource, where the fifth The request includes a refresh code of the first resource; the fifth request is sent to the resource owner by using the second network interface; and the refreshed by the resource owner is received by the second network interface The access code of the first resource.

In conjunction with the seventh possible implementation of the first aspect, in the eighth possible implementation manner of the first aspect, the processor is further configured to:

Before generating the fifth request for requesting to refresh the access code of the first resource, according to the refresh code of the first resource and the fifth API provided by the resource owner of the first resource, The format of the refresh code of the first resource is converted into the second format by the second predetermined format.

Based on the same inventive concept, the second aspect provides a resource access authorization method, including:

Receiving, by the resource gateway, a first request for requesting to acquire an access code of the first resource, where the first request is generated by the resource user according to the first API provided by the resource gateway;

And obtaining, by the resource gateway, an authorization code of the first resource from a resource owner of the first resource according to the first request;

The resource gateway acquires an access code of the first resource from a resource owner of the first resource according to an authorization code of the first resource provided by the resource owner;

The resource gateway returns an access code of the first resource to the resource user.

With reference to the second aspect, in a first possible implementation manner of the second aspect, the resource gateway acquires an authorization code of the first resource from a resource owner of the first resource according to the first request, include:

The resource gateway generates a second request for requesting to acquire an authorization code of the first resource according to the first request and a second API provided by a resource owner of the first resource;

Transmitting, by the resource gateway, the second request to the resource owner;

The resource gateway receives an authorization code of the first resource returned by the resource owner.

With reference to the second aspect, or the first possible implementation manner of the second aspect, in the second possible implementation manner of the second aspect, the resource gateway is configured according to the first resource provided by the resource owner The authorization code, the access code of the first resource is obtained from the resource owner of the first resource, and includes:

The resource gateway generates a third request for requesting to acquire an access code of the first resource, according to the authorization code of the first resource and the third API provided by the resource owner of the first resource, where The third request includes an authorization code of the first resource;

Transmitting, by the resource gateway, the third request to the resource owner;

The resource gateway receives an access code of the first resource returned by the resource owner.

With reference to the second aspect, or the first possible implementation of the second aspect, or the second possible implementation of the second aspect, in a third possible implementation of the second aspect, in the resource Before the gateway returns the access code of the first resource to the resource user, the method further includes:

When the format of the access code of the first resource is the first format, the resource gateway converts the format of the access code of the first resource from the first format to a first predetermined format, where the One format is any format that is different from the first predetermined format.

With reference to the second aspect, or the first possible implementation of the second aspect, or the second possible implementation of the second aspect, or the third possible implementation of the second aspect, in the second aspect In the four possible implementation manners, after the resource gateway obtains the authorization code of the first resource from the resource owner of the first resource according to the first request, the method further includes:

The resource gateway acquires a refresh code of the first resource from a resource owner of the first resource according to an authorization code of the first resource provided by the resource owner;

The resource gateway returns a refresh code of the first resource to the resource user.

With reference to the fourth possible implementation of the second aspect, in a fifth possible implementation manner of the second aspect, before the resource gateway returns the refresh code of the first resource to the resource user, The method also includes:

When the format of the refresh code of the first resource is the second format, the resource gateway converts the format of the refresh code of the first resource from the second format to a second predetermined format, where the The second format is any format different from the second predetermined format.

With reference to the fourth possible implementation manner of the second aspect, or the fifth possible implementation manner of the second aspect, in a sixth possible implementation manner of the second aspect, the first After the refresh code of the resource is returned to the resource user, the method further includes:

Receiving, by the resource user, a fourth request for requesting to refresh an access code of the first resource, where the fourth request is a refresh code of the resource resource according to the first resource, and The fourth API provided by the resource gateway, where the fourth request includes a refresh code of the first resource;

After the resource gateway determines that the resource owner supports the refresh of the access code of the first resource, the resource gateway acquires the access code of the first resource after the refresh from the resource owner according to the fourth request;

The resource gateway returns an access code of the refreshed first resource to the resource user.

With reference to the sixth possible implementation of the second aspect, in a seventh possible implementation manner of the second aspect, the resource gateway obtains a refresh from the resource owner of the first resource according to the fourth request After the access code of the first resource, including:

The resource gateway generates a fifth request for requesting to refresh an access code of the first resource according to the refresh code of the first resource and the fifth API provided by the resource owner of the first resource, where The fifth request includes a refresh code of the first resource;

Sending, by the resource gateway, the fifth request to the resource owner;

The resource gateway receives the refreshed access code of the first resource returned by the resource owner.

With reference to the seventh possible implementation of the second aspect, in an eighth possible implementation manner of the second aspect, the resource gateway is configured according to the refresh code of the first resource, and the resource of the first resource The fifth API provided by the owner, before generating the fifth request for requesting to refresh the access code of the first resource, the method further includes:

The resource gateway converts a format of a refresh code of the first resource from the second predetermined format to the second format.

The beneficial effects of the technical solution in the embodiments of the present application are as follows:

In the embodiment of the present application, a resource gateway is disclosed, including: a first network interface and a second network interface; a memory for storing program code; a processor, a memory, a first network interface, and a second network interface The connection is used to read the program code in the memory, and execute: receiving, by the first network interface, a first request sent by the resource user for requesting to acquire an access code of the first resource, where the first request is a resource user according to the resource And generating, by the first API provided by the gateway, the authorization code of the first resource from the resource owner of the first resource by using the second network interface; and the authorization code of the first resource provided by the resource owner, and Acquiring an access code of the first resource from the resource owner of the first resource by using the second network interface; and returning the access code of the first resource to the resource user by using the first network interface. Because the resource gateway opens its first API to the resource user, when the resource user needs to obtain the access code of the first resource, the resource user only needs to generate the first request based on the first API and send it to the resource gateway (ie, only the An API call) implements the access code for the first resource. Therefore, the technical problem that the resource user needs to perform two API calls when acquiring the access code of the resource in the prior art is effectively solved, and the resource user only needs to target the resource network. By performing an API call, the access code of the resource can be obtained through the resource gateway, thereby reducing the number of times the resource user makes API calls, and bringing a convenient technical effect to the resource user.

DRAWINGS

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, a brief description of the drawings used in the embodiments or the prior art description will be briefly described below. Obviously, the drawings in the following description It is a certain embodiment of the present invention, and other drawings can be obtained from those skilled in the art without any creative work.

1 is a schematic structural diagram of a resource gateway in an embodiment of the present application;

2 to 7 are flowcharts of a resource access authorization method in an embodiment of the present application.

detailed description

The embodiment of the present application solves the technical problem that the resource user needs to make two API calls to the resource owner when acquiring the access code of the resource in the prior art by providing a resource gateway and a resource access authorization method.

The technical solution of the embodiment of the present application is to solve the above technical problem, and the general idea is as follows:

A resource gateway includes: a first network interface and a second network interface; a memory for storing program code; a processor, connected to the memory, the first network interface, and the second network interface, for reading in the memory The program code is configured to: receive, by using the first network interface, a first request for requesting to acquire an access code of the first resource, where the first request is generated by the resource user according to the first API provided by the resource gateway. Obtaining, according to the first request, the authorization code of the first resource from the resource owner of the first resource through the second network interface; according to the authorization code of the first resource provided by the resource owner, and from the first through the second network interface The resource owner of the resource obtains the access code of the first resource; and returns the access code of the first resource to the resource user through the first network interface.

Because the resource gateway opens its first API to the resource user, when the resource user needs to obtain the access code of the first resource, the resource user only needs to generate the first request based on the first API and send it to the resource gateway (ie, only the An API call) implements the access code for the first resource. Therefore, the technical problem that the resource user needs to perform two API calls when acquiring the access code of the resource in the prior art is effectively solved, and the resource user only needs to make an API call to the resource gateway, and then the resource gateway can be used. Obtain the access code of the resource, thereby reducing the number of times the resource user makes API calls, and bringing convenient technical effects to the resource user.

In order to make the objectives, technical solutions, and advantages of the embodiments of the present application more clearly, the technical solutions in the embodiments of the present application will be clearly and completely described in conjunction with the drawings in the embodiments of the present application. Examples are some embodiments of the present application, and not all of the embodiments. All other embodiments obtained by a person of ordinary skill in the art based on the embodiments of the present application without departing from the inventive scope are the scope of the present invention.

First of all, the term "first resource" or "resource" as used herein refers to a specific API capable of implementing a specific service, and when the specific API is called, an application providing the specific API can implement the specific service. .

Secondly, the term "resource owner" as used in this article refers to an application that can provide the specific API, such as a social application, a shopping application, etc., and what kind of application is specific to the resource owner, The embodiments of the present application are not specifically limited.

Again, the term "resource consumer" as used in this article refers to other applications that call that particular API.

Embodiment 1

As shown in FIG. 1 , this embodiment provides a resource gateway, including:

a first network interface 110, and a second network interface 120;

a memory 130, configured to store program code;

One or more processors 140 are coupled to the memory 130, the first network interface 110, and the second network interface 120 for reading program code in the memory 130, and executing:

Receiving, by the first network interface 110, a first request for requesting to acquire an access code of the first resource, where the first request is generated by the resource user according to the first API provided by the resource gateway; according to the first request Obtaining, by the second network interface 120, the authorization code of the first resource from the resource owner of the first resource; the resource of the first resource according to the authorization code of the first resource provided by the resource owner, and the resource of the first resource by using the second network interface 120 The owner obtains the access code of the first resource; and returns the access code of the first resource to the resource user through the first network interface 110.

In a specific implementation process, the first resource is a specific API provided by the resource owner for the resource user and capable of implementing a specific service. The resource consumer can call this particular API to implement that particular service through the resource owner. For example, when the resource owner is a Weibo-like application, the first resource may be an API for publishing information through a Weibo-like application.

In this embodiment, since the resource gateway opens its first API to the resource user, the resource enables When the user needs to obtain the access code of the first resource, the user only needs to generate the first request based on the first API and send it to the resource gateway (ie, only one API call is made), thereby realizing the access code for acquiring the first resource. Therefore, the technical problem that the resource user needs to perform two API calls when acquiring the access code of the resource in the prior art is effectively solved, and the resource user can pass the resource by only making an API call to the resource gateway. The gateway obtains the access code of the resource, thereby reducing the number of times the resource user makes the API call, and brings a convenient technical effect to the resource user.

In a specific implementation process, the resource gateway may be connected to multiple resource users through the first network interface, and connected to multiple resource owners through the second network interface. The first request sent by the resource owner should include the label of the resource owner of the first resource. In this case, the processor 140 is further configured to: determine, by using the label, the resource owner of the first resource, thereby The resource owner obtains the access code of the first resource.

For resource users, in the prior art, one resource user needs to connect multiple resource owners to obtain different resources provided by different resource owners, but this brings a large number of interfaces to resource users. maintenance work. In this embodiment, the resource user only needs to connect with the resource gateway, thereby reducing the interface maintenance work of the resource user, reducing the access difficulty, and reducing the technical effect of the docking risk.

For resource owners, in the prior art, a resource owner needs to connect multiple resource users to provide resources to different resource users, but this brings a lot of interface maintenance work to resource owners. However, in this embodiment, the resource owner only needs to connect with the resource gateway, thereby reducing the technical maintenance effect of reducing the resource owner's interface maintenance work and reducing the docking risk.

In the specific implementation process, different resource owners may have different protocols when providing access codes to resource users (for example, some resource owners follow the OAUTH 1.0 protocol, and some resource owners follow the OAUTH 2.0 protocol). . Therefore, the memory 130 is further configured with different protocols that the resource owners respectively follow. In this case, the processor 140 is further configured to: after receiving the first request sent by the resource user, based on the resources in the first request. The owner's tag retrieves the protocol followed by the resource owner from the memory 130 and, based on the protocol, obtains the access code of the resource from the resource owner.

In this embodiment, the resource user only needs to send the first request to the resource gateway based on the first API provided by the resource gateway when acquiring the access code of the resource, and does not need the resource user to understand different resource owners. The protocols followed provide convenience to resource users.

Optionally, in this embodiment, the processor 140 is further configured to:

Generating a second request for requesting acquisition of an authorization code of the first resource according to the first request and the second API provided by the resource owner of the first resource; transmitting the second request to the resource owner through the second network interface 120 Receiving, by the second network interface 120, an authorization code of the first resource returned by the resource owner.

In a specific implementation process, after receiving the second request, the resource owner obtains an authentication information (for example, a user name and a corresponding user password) from the resource user, and verifies whether the authentication information is stored with the resource owner. The authentication information is consistent. If they are consistent, the resource user is determined to be a legitimate user, and the authorization code of the first resource is returned to the resource gateway.

Optionally, in this embodiment, the processor 140 is further configured to:

Generating, according to the authorization code of the first resource and the third API provided by the resource owner of the first resource, a third request for requesting to acquire an access code of the first resource, where the third request includes the authorization of the first resource And transmitting, by the second network interface 120, the third request to the resource owner; and receiving, by the second network interface 120, the access code of the first resource returned by the resource owner.

In the prior art, the resource user directly communicates with the resource owner, and the resource user first sends a request for acquiring the authorization code of the first resource to the resource owner based on the second API provided by the resource user (ie, : performing the first API call), after the resource user obtains the authorization code of the first resource, the resource user sends the resource identifier to the resource owner based on the authorization code of the first resource and the third API provided by the resource owner. A request for acquiring an access code of the first resource (ie, making a second API call), thereby obtaining an access code of the first resource.

In this embodiment, the resource gateway generates a second request for requesting to acquire the authorization code of the first resource based on the second API provided by the resource owner (ie, calling the second API by the resource gateway to obtain After the resource gateway obtains the authorization code of the first resource, the resource gateway sends the resource identifier to the resource owner based on the authorization code of the first resource and the third API provided by the resource owner. The request for the access code of the first resource (ie, the third API is invoked by the resource gateway to obtain the access code of the first resource), and the obtained access code of the first resource is returned to the resource user, thereby reducing resources. The number of times the user makes API calls brings convenience to resource users.

Optionally, in this embodiment, the processor 140 is further configured to:

Before returning the access code of the first resource to the resource user through the first network interface 110, And when the format of the access code of the first resource is the first format, converting the format of the access code of the first resource from the first format to the first predetermined format, where the first format is any one different from the first predetermined format format.

In the prior art, the access codes of the resources provided by the resource owners may have multiple different formats, which brings inconvenience to the resource users in resolving the access codes of the resources. In this embodiment, the resource gateway converts the format of the access code of the first resource returned by the resource owner into the first predetermined format, thereby unifying the format of the access code of the resource, and realizing that the resource user can be different. The resource owner obtains the access code of the resource with the same format, thereby facilitating the technical effect of the resource user analyzing the access code of the resource.

Optionally, in this embodiment, the processor 140 is further configured to:

After obtaining the authorization code of the first resource from the resource owner of the first resource according to the first request, according to the authorization code of the first resource provided by the resource owner, and from the resource of the first resource through the second network interface 120 The method obtains a refresh code of the first resource, and returns a refresh code of the first resource to the resource user through the first network interface 110.

In a specific implementation process, the access of the first resource may have an expiration date (for example: 24 hours, or 48 hours, etc.), so that the resource user must access the resource owner based on the access code of the first resource during the validity period. And use the first resource. If the access code of the first resource exceeds the validity period, the access code of the first resource needs to be refreshed according to the refresh code of the first resource to obtain an access code of the first resource after the refresh.

In a specific implementation process, when the resource gateway receives the access code of the first resource returned by the resource owner, the resource gateway also receives the refresh code of the first resource provided by the resource owner, and the resource gateway will use the first resource. The refresh code is sent to the resource user along with the access code of the first resource, thereby implementing the technical effect that the resource user can refresh the access code of the first resource according to the refresh code of the first resource.

Optionally, in this embodiment, the processor 140 is further configured to:

Before returning the refresh code of the first resource to the resource user through the first network interface 110, when the format of the refresh code of the first resource is the second format, converting the format of the refresh code of the first resource by the second format Is a second predetermined format, wherein the second format is any format different from the second predetermined format.

In the prior art, the refresh code of the resources provided by each resource owner may have multiple types. The same format, which brings inconvenience to the resource user in resolving the refresh code of the resource. In the embodiment of the present application, the resource gateway converts the format of the refresh code of the first resource returned by the resource owner into a second predetermined format, thereby unifying the format of the refresh code of the first resource, thereby realizing that the resource user can The refresh code of the first resource with the same format is obtained from different resource owners, thereby facilitating the technical effect of the resource user analyzing the refresh code of the first resource.

Optionally, in this embodiment, the processor 140 is further configured to:

After returning the refresh code of the first resource to the resource user through the first network interface 110, receiving a fourth request sent by the resource user for requesting to refresh the access code of the first resource, where the fourth request is a resource user And generating, according to the refresh code of the first resource, and the fourth API provided by the resource gateway, where the fourth request includes a refresh code of the first resource; after determining that the resource owner supports updating the access code of the first resource, And requesting, by using the second network interface 120, the access code of the refreshed first resource from the resource owner; and returning, by the first network interface 110, the updated access code of the first resource to the resource user.

In the specific implementation process, the resource gateway further opens its fourth API to the resource user, and the fourth API is used to control the resource gateway to refresh the access code of the first resource, thereby realizing that the resource user can rely on the first resource. The technical effect of refreshing the access code of the first resource by the refresh code.

Optionally, in this embodiment, the processor 140 is further configured to:

Generating, according to the refresh code of the first resource, and the fifth API provided by the resource owner of the first resource, a fifth request for requesting to refresh the access code of the first resource, where the fifth request includes the refresh of the first resource And transmitting, by the second network interface 120, the fifth request to the resource owner; and receiving, by the second network interface 120, the access code of the refreshed first resource returned by the resource owner.

Optionally, in this embodiment, the processor 140 is further configured to:

Before generating the fifth request for requesting to refresh the access code of the first resource according to the refresh code of the first resource and the fifth API provided by the resource owner of the first resource, the format of the refresh code of the first resource is determined by The second predetermined format is converted to the second format.

In a specific implementation process, since the format of the refresh code of the first resource that the resource owner can identify is the second format, the format of the refresh code of the first resource of the resource gateway is converted from the second predetermined format to the second format. And generating, according to the refresh code of the first resource and the fifth API provided by the resource owner of the first resource, a fifth request for requesting to refresh the access code of the first resource.

Embodiment 2

Based on the same inventive concept, the present application provides a resource access authorization method, as shown in FIG. 2, including:

Step 101: The resource gateway receives a first request for requesting to acquire an access code of the first resource, where the first request is generated by the resource user according to the first API provided by the resource gateway.

Step 102: The resource gateway acquires an authorization code of the first resource from a resource owner of the first resource according to the first request.

Step 103a: The resource gateway acquires an access code of the first resource from a resource owner of the first resource according to an authorization code of the first resource provided by the resource owner.

Step 104b: The resource gateway returns the access code of the first resource to the resource user.

Optionally, in this embodiment, as shown in FIG. 3, step 102 includes:

Step 201: The resource gateway generates a second request for requesting to acquire an authorization code of the first resource according to the first request and the second API provided by the resource owner of the first resource.

Step 202: The resource gateway sends the second request to the resource owner.

Step 203: The resource gateway receives an authorization code of the first resource returned by the resource owner.

Optionally, in this embodiment, as shown in FIG. 4, step 103a includes:

Step 301: The resource gateway generates a third request for requesting to acquire an access code of the first resource according to the authorization code of the first resource and the third API provided by the resource owner of the first resource, where the third request includes The authorization code of the first resource;

Step 302: The resource gateway sends the third request to the resource owner.

Step 303: The resource gateway receives an access code of the first resource returned by the resource owner.

Optionally, in this embodiment, before step 104a, the method further includes:

When the format of the access code of the first resource is the first format, the resource gateway converts the format of the access code of the first resource from the first format to the first predetermined format, where the first format is different from the first predetermined format. Any format.

Optionally, in this embodiment, as shown in FIG. 5, after step 102, the method further includes:

Step 103b: The resource gateway acquires a refresh code of the first resource from the resource owner of the first resource according to the authorization code of the first resource provided by the resource owner.

Step 104b: The resource gateway returns the refresh code of the first resource to the resource user.

Optionally, in this embodiment, before step 104b, the method further includes:

When the format of the refresh code of the first resource is the second format, the resource gateway converts the format of the refresh code of the first resource from the second format to the second predetermined format, where the second format is different from the second predetermined format. Any format.

Optionally, in this embodiment, as shown in FIG. 6, after step 104b, the method further includes:

Step 105: The resource gateway receives a fourth request sent by the resource user for requesting to refresh the access code of the first resource, where the fourth request is a refresh code of the resource resource according to the first resource, and a fourth API provided by the resource gateway. The generated, wherein the fourth request includes a refresh code of the first resource;

Step 106: After the resource gateway determines that the resource owner supports the refreshing of the access code of the first resource, the resource gateway acquires the access code of the refreshed first resource from the resource owner according to the fourth request.

Step 107: The resource gateway returns the refreshed access code of the first resource to the resource user.

Optionally, in this embodiment, as shown in FIG. 7, step 106 includes:

Step 401: The resource gateway generates a fifth request for requesting to refresh the access code of the first resource according to the refresh code of the first resource and the fifth API provided by the resource owner of the first resource, where the fifth request includes The refresh code of the first resource;

Step 402: The resource gateway sends the fifth request to the resource owner.

Step 403: The resource gateway receives the access code of the refreshed first resource returned by the resource owner.

Optionally, in this embodiment, before step 401, the method further includes:

The resource gateway converts the format of the refresh code of the first resource from the second predetermined format to the second format.

Those skilled in the art will appreciate that embodiments of the present invention can be provided as a method, system, or computer program product. Accordingly, the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment, or a combination of software and hardware. Moreover, the invention can take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) including computer usable program code.

The present invention has been described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (system), and computer program products according to embodiments of the invention. It will be understood that each flow and/or block of the flowchart illustrations and/or FIG. These computer program instructions can be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing device to produce a machine for the execution of instructions for execution by a processor of a computer or other programmable data processing device. Yu Shi A flow diagram of a process or a plurality of processes and/or a block diagram of a function of a function specified in a block or blocks.

The computer program instructions can also be stored in a computer readable memory that can direct a computer or other programmable data processing device to operate in a particular manner, such that the instructions stored in the computer readable memory produce an article of manufacture comprising the instruction device. The apparatus implements the functions specified in one or more blocks of a flow or a flow and/or block diagram of the flowchart.

These computer program instructions can also be loaded onto a computer or other programmable data processing device such that a series of operational steps are performed on a computer or other programmable device to produce computer-implemented processing for execution on a computer or other programmable device. The instructions provide steps for implementing the functions specified in one or more of the flow or in a block or blocks of a flow diagram.

While the preferred embodiment of the invention has been described, it will be understood that Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and the modifications and

It is apparent that those skilled in the art can make various modifications and variations to the invention without departing from the spirit and scope of the invention. Thus, it is intended that the present invention cover the modifications and modifications of the invention

Claims

A resource gateway, comprising:

a first network interface and a second network interface;

a memory for storing program code;

a processor, configured to interface with the memory, the first network interface, and the second network, to read the program code in the memory, and execute:

Receiving, by the first network interface, a first request for requesting to acquire an access code of the first resource, where the first request is a first API provided by the resource user according to the resource gateway Generating; according to the first request, obtaining an authorization code of the first resource from a resource owner of the first resource by using the second network interface; according to the first provided by the resource owner An authorization code of the resource, and obtaining, by the second network interface, an access code of the first resource from a resource owner of the first resource; returning an access code of the first resource by using the first network interface To the resource user.
The resource gateway according to claim 1, wherein the processor is further configured to:

Generating, according to the first request, and the second API provided by the resource owner of the first resource, a second request for requesting to acquire an authorization code of the first resource; Transmitting the second request to the resource owner; receiving, by the second network interface, an authorization code of the first resource returned by the resource owner.
The resource gateway according to any one of claims 1 to 2, wherein the processor is further configured to:

Generating, according to the authorization code of the first resource and the third API provided by the resource owner of the first resource, a third request for requesting to acquire an access code of the first resource, where the third The request includes an authorization code of the first resource; the third request is sent to the resource owner by the second network interface; and the returned by the resource owner is received by the second network interface The access code of the first resource.
The resource gateway according to any one of claims 1 to 3, wherein the processor is further configured to:

Before the access code of the first resource is returned to the resource user by using the first network interface, when the format of the access code of the first resource is the first format, the first The format of the access code of the resource is converted from the first format to a first predetermined format, wherein the first The format is any format different from the first predetermined format.
The resource gateway according to any one of claims 1 to 4, wherein the processor is further configured to:

After obtaining the authorization code of the first resource from the resource owner of the first resource according to the first request, according to the authorization code of the first resource provided by the resource owner, and passing The second network interface acquires a refresh code of the first resource from a resource owner of the first resource, and returns a refresh code of the first resource to the resource user by using the first network interface.
The resource gateway according to claim 5, wherein the processor is further configured to:

Before the refresh code of the first resource is returned to the resource user by using the first network interface, when the format of the refresh code of the first resource is the second format, the first The format of the refresh code of the resource is converted from the second format to a second predetermined format, wherein the second format is any format different from the second predetermined format.
The resource gateway according to any one of claims 5 to 6, wherein the processor is further configured to:

Receiving, by the first network interface, the refresh code of the first resource to the resource user, receiving, by the resource user, a fourth request for refreshing an access code of the first resource a request, the fourth request is generated by the resource user according to the refresh code of the first resource, and a fourth API provided by the resource gateway, where the fourth request includes the first resource Refreshing code; after determining that the resource owner supports refreshing the access code of the first resource, acquiring, according to the fourth request, the first resource that is refreshed from the resource owner by using the second network interface And accessing the updated access code of the first resource to the resource user by using the first network interface.
The resource gateway according to claim 7, wherein the processor is further configured to:

Generating a fifth request for requesting to refresh an access code of the first resource according to a refresh code of the first resource and a fifth API provided by a resource owner of the first resource, where the fifth The request includes a refresh code of the first resource; the fifth request is sent to the resource owner by using the second network interface; and the refreshed by the resource owner is received by the second network interface The access code of the first resource.
The resource gateway according to claim 8, wherein the processor is further configured to:

Before generating the fifth request for requesting to refresh the access code of the first resource, according to the refresh code of the first resource and the fifth API provided by the resource owner of the first resource, The format of the refresh code of the first resource is converted into the second format by the second predetermined format.
A resource access authorization method, comprising:

Receiving, by the resource gateway, a first request for requesting to acquire an access code of the first resource, where the first request is generated by the resource user according to the first API provided by the resource gateway;

And obtaining, by the resource gateway, an authorization code of the first resource from a resource owner of the first resource according to the first request;

The resource gateway acquires an access code of the first resource from a resource owner of the first resource according to an authorization code of the first resource provided by the resource owner;

The resource gateway returns an access code of the first resource to the resource user.
The method according to claim 10, wherein the resource gateway acquires an authorization code of the first resource from a resource owner of the first resource according to the first request, including:

The resource gateway generates a second request for requesting to acquire an authorization code of the first resource according to the first request and a second API provided by a resource owner of the first resource;

Transmitting, by the resource gateway, the second request to the resource owner;

The resource gateway receives an authorization code of the first resource returned by the resource owner.
The method according to any one of claims 10 to 11, wherein the resource gateway acquires the resource owner of the first resource according to an authorization code of the first resource provided by the resource owner. The access code of the first resource, including:

The resource gateway generates a third request for requesting to acquire an access code of the first resource, according to the authorization code of the first resource and the third API provided by the resource owner of the first resource, where The third request includes an authorization code of the first resource;

Transmitting, by the resource gateway, the third request to the resource owner;

The resource gateway receives an access code of the first resource returned by the resource owner.
The method according to any one of claims 10 to 12, wherein before the resource gateway returns the access code of the first resource to the resource user, the method further includes:

When the format of the access code of the first resource is the first format, the resource gateway converts the format of the access code of the first resource from the first format to a first predetermined format, where the One format is any format that is different from the first predetermined format.
The method according to any one of claims 10 to 13, wherein after the resource gateway acquires an authorization code of the first resource from a resource owner of the first resource according to the first request, The method further includes:

The resource gateway acquires a refresh code of the first resource from a resource owner of the first resource according to an authorization code of the first resource provided by the resource owner;

The resource gateway returns a refresh code of the first resource to the resource user.
The method of claim 14, wherein before the resource gateway returns the refresh code of the first resource to the resource user, the method further includes:

When the format of the refresh code of the first resource is the second format, the resource gateway converts the format of the refresh code of the first resource from the second format to a second predetermined format, where the The second format is any format different from the second predetermined format.
The method according to any one of claims 14 to 15, wherein after the resource gateway returns the refresh code of the first resource to the resource user, the method further includes:

Receiving, by the resource user, a fourth request for requesting to refresh an access code of the first resource, where the fourth request is a refresh code of the resource resource according to the first resource, and The fourth API provided by the resource gateway, where the fourth request includes a refresh code of the first resource;

After the resource gateway determines that the resource owner supports the refresh of the access code of the first resource, the resource gateway acquires the access code of the first resource after the refresh from the resource owner according to the fourth request;

The resource gateway returns an access code of the refreshed first resource to the resource user.
The method of claim 16, wherein the resource gateway obtains the access code of the refreshed first resource from the resource owner of the first resource according to the fourth request, including:

The resource gateway generates a fifth request for requesting to refresh an access code of the first resource according to the refresh code of the first resource and the fifth API provided by the resource owner of the first resource, where The fifth request includes a refresh code of the first resource;

Sending, by the resource gateway, the fifth request to the resource owner;

The resource gateway receives the refreshed access code of the first resource returned by the resource owner.
The method according to claim 17, wherein the resource gateway generates a request for refreshing according to a refresh code of the first resource and a fifth API provided by a resource owner of the first resource. Before the fifth request for the access code of the first resource, the method further includes:

The resource gateway converts a format of a refresh code of the first resource from the second predetermined format to the second format.