WO2022262322A1

WO2022262322A1 - Authentication method, apparatus and system, electronic device, and storage medium

Info

Publication number: WO2022262322A1
Application number: PCT/CN2022/079103
Authority: WO
Inventors: 邵广玉; 韩永亮; 李文娟; 王洪
Original assignee: 京东方科技集团股份有限公司; 北京中祥英科技有限公司
Priority date: 2021-06-18
Filing date: 2022-03-03
Publication date: 2022-12-22
Also published as: CN113297562A

Abstract

The present disclosure relates to an authentication method, apparatus and system, an electronic device, and a storage medium. The method is applied to an Internet platform, and comprises: receiving a first service request sent by a first web application by means of an authentication module, wherein the first web application is any one of multiple web applications corresponding to the Internet platform; obtaining a user identity token of the first service request, wherein the user identity token is obtained after a second web application logs in to the Internet platform by means of the authentication module, and the second web application is any one of the multiple web applications; verifying the first service request according to the user identity token; and controlling, according to a verification result, the first web application to respond to the first service request.

Description

Authentication method, device, system, electronic equipment and storage medium

technical field

The present disclosure relates to the technical field of network authentication, and in particular to an authentication method, device, system, electronic equipment and storage medium.

Background technique

With the continuous development of industrial interconnection and informatization, the company has incubated product applications in multiple fields such as smart factories, smart parks, and smart IoT, which have made great contributions to the production management of the company. However, each application has mutual The independent login system requires a separate user name and password to log in to different application systems, which causes a lot of inconvenience in use, and is also not conducive to product combination promotion and marketing.

Contents of the invention

The disclosure provides an authentication method, device, system, electronic equipment and storage medium.

According to some embodiments of the present disclosure, there is provided an authentication method applied to an Internet platform, the method comprising: receiving a first service request sent by a first web application through an authentication module, wherein the first web application is the Any one of a plurality of web applications corresponding to the Internet platform; obtaining the user identity token in the first service request, wherein the user identity token is obtained after the second web application logs in to the Internet platform through an authentication module The second web application is any one of the plurality of web applications; according to the user identity token, the first service request is verified; according to the result of the verification, the control of the The first web application responds to the first service request.

In one embodiment, it also includes: receiving the login information sent by the second web application through the authentication module, wherein the login information is the second service request received by the second web application without a user identity token Afterwards, the user is prompted for input; determining whether the login information is legal and valid; in response to the login information being legal and valid, generating a user identity token according to the login information, and passing the user identity token through the second web application Return to user.

In one embodiment, the first service request is intercepted by the intercepting unit in the authentication module, and sent to the Internet platform by the forwarding unit of the authentication module according to the destination address carried in the first service request; and/or, The second service request is intercepted by the interception unit in the authentication module; and/or, the login information is intercepted by the interception unit in the authentication module, and sent by the forwarding unit of the authentication module according to the destination address carried in the login information to The interconnection platform.

In one embodiment, the returning the user identity token to the user through the second web application includes returning the user identity token and a preset identifier to the user through the second web application; The obtaining the user identity token in the first service request includes obtaining the user identity token from the first service request by using the preset identifier.

In one embodiment, the first service request is generated by the service content input by the user through the browser; and/or, the second service request is generated by the service content input by the user through the browser; and/or, the The login information is generated from the user name and password entered by the user through the browser.

In one embodiment, the returning the user identity token and the preset identifier to the user through the second web application includes returning the user identity token and the preset identifier through the authentication module to the second web application, so that the second web application returns the user identity token and preset identifier to the browser; the first service request is the service content input by the user through the browser The generating includes generating the first service request from the service content input by the user through the browser, the user identity token in the browser, and the preset identifier.

In one embodiment, the determining whether the login information is valid or not includes: if there is user information consistent with the login information in the user information stored in the user database, determining that the login information is legal and valid.

In one embodiment, the verifying the first service request according to the user identity token includes: determining whether the user identity token is legal and valid; and/or determining whether the first service request Whether the requested business content matches the business authority corresponding to the user identity token.

In one embodiment, determining whether the login information is legal and valid also includes decrypting the login information by using a preset rule; and/or, verifying the first service request according to the user identity token The verification further includes decrypting the user identity token using preset rules.

In one embodiment, the controlling the first web application to respond to the first service request according to the result of the verification includes: responding to the fact that the user identity token is legal and valid, and the first The business content of a business request matches the business authority corresponding to the user identity token, then control the first web application to process the business content, and return response data to the browser; otherwise, control the The first web application returns prompt information to the browser, where the prompt information is used to represent the verification result.

In one embodiment, it also includes: receiving a super service request sent by a third web application through the authentication module, wherein the third web application is any one of the plurality of web applications; acquiring the super service request in the super service request The super identity token, wherein, the super identity token is obtained by the super user after registering on the Internet platform through any web application and authentication module; in response to the legal validity of the super identity token, according to the super identity token The service content of the service request adjusts the user information, department information or application information stored in the Internet platform.

According to some embodiments of the present disclosure, there is provided an authentication device applied to an Internet platform, including: a receiving module, configured to receive a first service request sent by a first web application through the authentication module, wherein the first web application is the Any one of a plurality of web applications corresponding to the Internet platform; an acquisition module, configured to acquire the user identity token in the first service request, wherein the user identity token is the second web application logging in through the authentication module Obtained after the Internet platform, the second web application is any one of the plurality of web applications; a verification module is configured to verify the first service request according to the user identity token a response module, configured to control the first web application to respond to the first service request according to the verification result.

According to some embodiments of the present disclosure, an authentication system is provided, including: a plurality of web applications, the web applications are used to receive business content input by a user through a browser, and The user identity token generates a first service request, and sends the first service request to an authentication module; the authentication module is configured to receive the first service request sent by the web application, and send the first service request sent to the Internet platform; the Internet platform is configured to receive the first service request sent by the authentication module, and control the corresponding web application according to the verification result of the user identity token in the first service request Respond to the first service request.

In one embodiment, the web application is further configured to prompt the user to input login information after receiving the second service request input by the user through the browser without the user identity token, and receive the user input through the browser. the login information; the authentication module is also used to receive the login information sent by the web application, and send the login information to the Internet platform; the Internet platform is also used to receive the login information sent by the authentication module , and if the login information is valid and valid, generate a user identity token according to the login information, and return the user identity token to the browser through the authentication module and the corresponding web application.

In one embodiment, the authentication module is in the form of a plug-in; the authentication module includes an intercepting unit and a forwarding unit, wherein the intercepting unit is used to intercept information related to the Internet platform, and the forwarding unit is used to forward Information related to said internet platform.

According to some embodiments of the present disclosure, an authentication system is provided, including: an authentication module configured to receive the first service request sent by the web application, and send the first service request to an Internet platform; the The Internet platform is configured to receive the first service request sent by the authentication module, and control the corresponding web application to respond to the first service request according to the verification result of the user identity token in the first service request. to respond.

According to some embodiments of the present disclosure, there is provided an electronic device, the device includes a memory and a processor, the memory is used to store computer instructions executable on the processor, and the processor is used to execute the computer instructions When implementing the method described in the first aspect.

According to some embodiments of the present disclosure, there is provided a computer-readable storage medium, on which a computer program is stored, and when the program is executed by a processor, the method described in the first aspect is implemented.

According to the above embodiment, it can be seen that by receiving the first service request sent by the first web application through the authentication module, obtaining the user identity token in the first service request, and verifying the first service request according to the user identity token, Finally, according to the verification result, the first web application is controlled to respond to the first service request. Since the user identity token is obtained by the second web application after logging in to the Internet platform through the authentication module, and the first web application and the second web application are any one of multiple web applications corresponding to the Internet platform, that is, any web application The identity token obtained after the application logs in to the Internet platform can be carried in the service request by the web application or other web applications, so that the service request can be verified by the Internet platform, and then the web application can respond to the service request, avoiding the Applications are inconvenient to log in to different application systems independently, which improves the efficiency of business processing; at the same time, reducing the number of login times can protect user information security.

It is to be understood that both the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the present disclosure.

Description of drawings

The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the disclosure and together with the description serve to explain the principles of the disclosure.

Fig. 1 is a flowchart of an authentication method shown in some embodiments of the present disclosure;

Fig. 2 is a schematic structural diagram of an authentication system shown in some embodiments of the present disclosure;

Fig. 3 is a flowchart of an authentication method shown in other embodiments of the present disclosure;

Fig. 4 is a schematic structural diagram of an authentication device shown in some embodiments of the present disclosure;

Fig. 5 is a schematic structural diagram of an electronic device shown in some embodiments of the present disclosure.

detailed description

Reference will now be made in detail to the exemplary embodiments, examples of which are illustrated in the accompanying drawings. When the following description refers to the accompanying drawings, the same numerals in different drawings refer to the same or similar elements unless otherwise indicated. The implementations described in the following exemplary examples do not represent all implementations consistent with the present disclosure. Rather, they are merely examples of apparatuses and methods consistent with aspects of the present disclosure as recited in the appended claims.

The terminology used in the present disclosure is for the purpose of describing particular embodiments only, and is not intended to limit the present disclosure. As used in this disclosure and the appended claims, the singular forms "a", "the", and "the" are intended to include the plural forms as well, unless the context clearly dictates otherwise. It should also be understood that the term "and/or" as used herein refers to and includes any and all possible combinations of one or more of the associated listed items.

It should be understood that although the terms first, second, third, etc. may be used in the present disclosure to describe various information, the information should not be limited to these terms. These terms are only used to distinguish information of the same type from one another. For example, without departing from the scope of the present disclosure, first information may also be called second information, and similarly, second information may also be called first information. Depending on the context, the word "if" as used herein may be interpreted as "at" or "when" or

"Responsive to OK".

For an enterprise application composed of multiple subsystems, each subsystem independently stores user names and passwords. Users must register multiple times and switch logins frequently to use different subsystems. The operation process is cumbersome and the user experience is poor. To transmit user names and passwords, it is easy to leak user privacy information and security information.

Based on this, some embodiments of the present disclosure provide an authentication method, please refer to FIG. 1 , which shows the flow of the authentication method, including steps S101 to S104.

Wherein, the method can be applied to the Internet platform. As shown in Figure 2, the Internet platform 230 can be the server side of the authentication system of the enterprise, and the Internet platform corresponds to a plurality of web applications 210. The Internet platform 230 needs to be used to verify the legitimacy of the service request, that is, the web application can verify the legitimacy of the service request in a remote verification (remote) manner. The plurality of web applications 210 may be product applications in various fields such as smart factories, smart parks, and smart Internet of Things incubated within the enterprise. Users who use these web applications 210 to process business requests may be enterprise staff, managers, and the like.

In step S101, a first service request sent by a first web application through an authentication module is received, wherein the first web application is any one of multiple web applications corresponding to the Internet platform.

Wherein, the first service request can be generated by the service content input by the user through the browser, the user identity token and the preset identifier in the browser, for example, the preset identifier can be set in the cookie of the Http request header. Wherein, the user identity token and the preset identifier can be obtained after the second web application logs into the Internet platform through the authentication module, the user identity token can be generated by the Internet platform according to the logged-in user information, and the preset identifier can be It is pre-stored in the configuration file of Hualian platform. The second web application is any one of the plurality of web applications. The first web application and the second web application may be the same or different.

Please continue to refer to FIG. 2 , the authentication system includes an authentication module 220 in addition to the Internet platform 230 and its corresponding web applications 210 . The authentication module can be in the form of a plug-in, and the authentication module can have an intercepting unit and a forwarding unit, wherein the intercepting unit is used to intercept information related to the Internet platform, and the forwarding unit is used to forward information related to the Internet platform information. The authentication module in the form of a plug-in can be an SDK developed in JAVA language. The plug-in encapsulates the interception unit and the forwarding unit based on Spring Aop. The packaged plug-in can be introduced into the project service (such as the Internet platform or web application) through the project management tool Maven. Package and run in the plug-in, and then the project service can call the relevant functions in the plug-in (interception function, forwarding function, etc.). Therefore, the first service request can be intercepted by the intercepting unit in the authentication module, and sent to the Internet platform by the forwarding unit of the authentication module according to the destination address carried in the first service request. The authentication module can also have an abstract class for unified authentication and an annotation class for skipping authentication. The authentication module can intercept and forward the methods in the abstract class so that business requests can be authenticated. The authentication module can also let go of the annotation class Included business requests, because these business requests do not require authentication. The interception unit filters all business requests, intercepts the first business request, and does not intercept other business requests. The interception function of the interception unit can enable the first business request requiring Internet platform authentication to be sent to the Internet platform, and at the same time Avoid sending other business requests to the Internet platform by mistake, so that the authentication of the Internet platform is targeted and efficient.

In step S102, the user identity token in the first service request is obtained.

Wherein, the preset identifier carried by the first service request can be pre-stored in the configuration file of the Internet platform, so the user identity token can be obtained from the first service request by using the preset identifier. For example, the user identity token can be obtained from the Http request header through a preset identifier. It can be understood that, the above-mentioned manner of obtaining the user identity token in the first service request is only a realizable example, and is not a limitation to the manner of obtaining the user identity token.

In step S103, the first service request is verified according to the user identity token.

Wherein, the user identity token may first be decrypted by using a preset rule, and then the first service request is verified according to the user identity token. For example, when the Internet platform returns the user identity token to the second web application, it will use preset rules for encryption, so it can use the same rule to decrypt the user identity token before verifying the first service request. That is to say, the encryption and confidentiality rules are only stored on the Internet platform, but not in the browser, that is, the user can only carry the user identity token when initiating a business request, but cannot decrypt the user identity token, which further increases security of user information.

In one example, the Internet platform verifies the first service request in a local verification (local) manner, which can verify whether the user identity token carried by the first service request is legal and valid. For example, the Internet platform returns the user The identity token will be stored synchronously in the token database, so when verifying whether the user identity token is legal and valid, the user identity token stored in the token database can be compared with the user identity token carried in the first service request, If there is a user token consistent with the user identity token carried in the first service request among the user identity tokens stored in the token database, it can be determined that the user identity token carried in the first service request is legal and valid. Checking the first service request may also determine whether the service content of the first service request matches the service authority corresponding to the user identity token. For example, when the Internet platform stores the user's identity token, it will store the user's corresponding business authority synchronously. When the user's identity token is legal and valid, it can compare the business content of the first business request with the user's business curve. to determine whether the two match.

In step S104, the first web application is controlled to respond to the first service request according to the verification result.

In one example, in response to the legal validity of the user identity token and the service content requested by the first service matches the service authority corresponding to the user identity token, the first web application is controlled to The business content is processed, and response data is returned to the browser; otherwise, the first web application is controlled to return prompt information to the browser, wherein the prompt information is used to represent the verification result.

In some embodiments of the present disclosure, the second web application may enable the user to obtain a user identity token as shown in FIG. 3 , including steps S301 to S303.

In step S301, receiving the login information sent by the second web application through the authentication module, wherein the login information is prompting the user to input after the second web application receives a second service request without a user identity token of.

Wherein, the second service request may be generated by service content input by the user through the browser, for example, may be generated by inputting the service content in the application interface of the second web application displayed by the browser. After the second service request is generated, the authentication module intercepts and checks whether it has a user identity token. If it carries a user identity token, it forwards the second service request to the Internet platform; The application interface of the second web application function displays a login page to prompt the user to log in. The user can generate login information through the user name and password input by the browser, and encrypt the login information using preset rules, and the login information is generated and After encryption, it is intercepted by the intercepting unit in the authentication module, and sent to the Internet platform by the forwarding unit of the authentication module according to the destination address carried in the login information.

It should be noted that the rules for encrypting login information and the rules for encrypting user identity tokens may be the same or different.

In step S302, it is determined whether the login information is legal and valid.

The Internet platform can store user information of legitimate users in the user database, and user information can be generated or updated by a super user's super business request, and the super user can be an enterprise manager, etc. Therefore, when verifying the login information, the user information stored in the user database can be compared with the user information in the login information. If there is user information consistent with the login information in the user information stored in the user database, the login can be determined. The information is legal and valid. In addition, if the login information is encrypted after it is generated, it is necessary to decrypt the login information by using preset rules before determining whether the login information is legal and valid.

In step S303, in response to the login information being valid and valid, a user identity token is generated according to the login information, and the user identity token is returned to the user through the second web application.

Wherein, before returning the user identity token, the user identity token may be encrypted according to preset rules. When returning the user identity token, the preset identifier can also be returned to the user through the second web application. The encryption rule can decrypt the user identity token when receiving the service request carrying the user identity token; the preset identifier can be used to obtain the user identity token when receiving the service request carrying the user identity token Card.

The user identity token and preset identifier may be returned to the second web application through the authentication module, so that the second web application returns the user identity token and preset identifier to the browser. After the browser receives the user identity token, it can store it. For example, the user identity token and the preset identifier are stored in the browser in the form of key-value pairs through the set-cookie method of Http Respose. When the user inputs the service content through the browser to generate the first service request, the above service content, the user identity token and the preset identifier are used to generate the first service request.

In some embodiments of the present disclosure, the authentication method further includes the following management steps: first, receiving a super service request sent by a third web application through the authentication module, wherein the third web application is the plurality of web applications any one of; Next, obtain the super identity token in the super service request, wherein the super identity token is obtained by the super user after registering on the Internet platform through any web application and authentication module; Finally, in response to the legality and validity of the super identity token, the user information, department information or application information stored in the Internet platform is adjusted according to the service content requested by the super service. The super user can be the management personnel of the enterprise. After registration, the management personnel will be assigned a super user nameplate to distinguish them from ordinary users. The management personnel can manage user information, department information and application information through super business requests, which is convenient and reliable.

This embodiment combines the requirements of the industrial Internet platform to realize the unified management and authentication of users. Multiple applications can be integrated on the platform. Users only need one login authentication to access any application system authorized by single sign-on, avoiding frequent Switch login to improve work efficiency and user experience. At the same time, in the process of product application development, it can reduce the development work of the user management authentication module, and only need to focus on the development of business processes, thereby speeding up the development progress and providing better production services.

According to some embodiments of the present disclosure, an authentication device is provided, which is applied to an Internet platform. Please refer to FIG. 4 , which shows a schematic structural diagram of the device. The device includes:

The receiving module 401 is configured to receive the first service request sent by the first web application through the authentication module, wherein the first web application is any one of multiple web applications corresponding to the Internet platform;

Obtaining module 402, configured to obtain the user identity token in the first service request, wherein the user identity token is obtained after the second web application logs into the Internet platform through the authentication module, and the second web application The application is any one of the plurality of web applications;

A verification module 403, configured to verify the first service request according to the user identity token;

The response module 404 is configured to control the first web application to respond to the first service request according to the verification result.

According to some embodiments of the present disclosure, an authentication system is provided, please refer to accompanying drawing 2, which shows the structure of the authentication system, including:

A plurality of web applications 210, the web application is used to receive the service content input by the user through the browser, and generate a first service request according to the service content and the user identity token in the browser, and send the second service request A service request is sent to the authentication module;

An authentication module 220, configured to receive the first service request sent by the web application, and send the first service request to an Internet platform;

The Internet platform 230 is configured to receive the first service request sent by the authentication module, and control the corresponding web application to verify the first service request according to the verification result of the user identity token in the first service request. Respond to a business request.

In some embodiments of the present disclosure, the web application is further configured to prompt the user to input login information after receiving the second service request input by the user through the browser without the user identity token, and receive the The login information input by the browser; the authentication module is also used to receive the login information sent by the web application, and send the login information to the Internet platform; the Internet platform is also used to receive the login information sent by the authentication module login information, and generate a user identity token according to the login information when the login information is legal and valid, and return the user identity token to the browser through the authentication module and the corresponding web application .

In some embodiments of the present disclosure, the authentication module is in the form of a plug-in; the authentication module includes an intercepting unit and a forwarding unit, wherein the intercepting unit is used to intercept information related to the Internet platform, and the forwarding unit Used to forward information related to the Internet platform.

With regard to the apparatus in the above embodiment, the specific manner in which each module and network perform operations has been described in detail in the embodiment of the method in the first aspect, and will not be described in detail here.

Please refer to FIG. 5 , some embodiments of the present disclosure provide an electronic device, the device includes a memory and a processor, the memory is used to store computer instructions that can be run on the processor, and the processor is used to execute the When the above computer instructions are used, device registration is performed based on the method described in the first aspect.

Some embodiments of the present disclosure provide a computer-readable storage medium, on which a computer program is stored, and when the program is executed by a processor, the method described in the first aspect is implemented.

The various component embodiments of the present disclosure may be implemented in hardware, or in software modules running on one or more processors, or in a combination thereof.

It should be understood that although the various steps in the flow chart of the accompanying drawings are displayed sequentially according to the arrows, these steps are not necessarily executed sequentially in the order indicated by the arrows. Unless otherwise specified herein, there is no strict order restriction on the execution of these steps, and they can be executed in other orders. Moreover, at least some of the steps in the flowcharts of the accompanying drawings may include multiple sub-steps or multiple stages, and these sub-steps or stages are not necessarily executed at the same time, but may be executed at different times, and the order of execution is also It is not necessarily performed sequentially, but may be performed alternately or alternately with at least a part of other steps or sub-steps or stages of other steps.

In the present disclosure, the terms "first" and "second" are used for descriptive purposes only, and should not be understood as indicating or implying relative importance. The term "plurality" means two or more, unless otherwise clearly defined.

Other embodiments of the disclosure will be readily apparent to those skilled in the art from consideration of the specification and practice of the disclosure disclosed herein. The present disclosure is intended to cover any modification, use or adaptation of the present disclosure. These modifications, uses or adaptations follow the general principles of the present disclosure and include common knowledge or conventional technical means in the technical field not disclosed in the present disclosure. . The specification and examples are to be considered exemplary only, with a true scope and spirit of the disclosure being indicated by the following claims.

It should be understood that the present disclosure is not limited to the precise constructions which have been described above and shown in the drawings, and various modifications and changes may be made without departing from the scope thereof. The scope of the present disclosure is limited only by the appended claims.

Claims

An authentication method is characterized in that it is applied to an Internet platform, and the method comprises:

receiving a first service request sent by a first web application through an authentication module, wherein the first web application is any one of a plurality of web applications corresponding to the Internet platform;

Obtaining the user identity token in the first service request, wherein the user identity token is obtained after the second web application logs into the Internet platform through the authentication module, and the second web application is the any of the web applications;

Verifying the first service request according to the user identity token;

According to the verification result, control the first web application to respond to the first service request.
The authentication method according to claim 1, further comprising:

receiving the login information sent by the second web application through the authentication module, wherein the login information is prompted for the user to input after the second web application receives a second service request without a user identity token;

Determine whether the login information is legal and valid;

In response to the login information being legal and valid, generating a user identity token according to the login information, and returning the user identity token to the user through the second web application.
The authentication method according to claim 2, wherein the first service request is intercepted by the intercepting unit in the authentication module, and sent to the said first service request by the forwarding unit of the authentication module according to the destination address carried in the first service request. the aforementioned internet platforms; and/or,

The second service request is intercepted by an interception unit in the authentication module; and/or,

The login information is intercepted by the intercepting unit in the authentication module, and sent to the Internet platform by the forwarding unit of the authentication module according to the destination address carried in the login information.
The authentication method according to claim 2, wherein the returning the user identity token to the user through the second web application comprises:

returning the user identity token and the preset identifier to the user through the second web application;

The acquisition of the user identity token in the first service request includes:

The user identity token is obtained from the first service request by using the preset identifier.
The authentication method according to claim 4, wherein the first service request is generated by the service content input by the user through the browser; and/or,

The second service request is generated by the service content input by the user through the browser; and/or,

The login information is generated by the user name and password input by the user through the browser.
The authentication method according to claim 5, wherein the returning the user identity token and the preset identifier to the user through the second web application comprises:

returning the user identity token and preset identifier to the second web application through the authentication module, so that the second web application returns the user identity token and preset identifier to the browser;

The first service request is generated by the service content input by the user through the browser, including:

The first service request is generated by the service content input by the user through the browser, the user identity token and the preset identifier in the browser.
The authentication method according to claim 5, wherein the determining whether the login information is valid or not includes:

If there is user information consistent with the login information among the user information stored in the user database, it is determined that the login information is legal and valid.
The authentication method according to claim 7, wherein said verifying said first service request according to said user identity token comprises:

determining whether said user identity token is legally valid; and/or,

Determine whether the service content of the first service request matches the service authority corresponding to the user identity token.
The authentication method according to claim 8, wherein the determining whether the login information is valid or not further includes:

Decrypt the login information using preset rules; and/or,

The verifying the first service request according to the user identity token further includes:

The user identity token is decrypted using preset rules.
The authentication method according to claim 1 or 8, wherein the controlling the first web application to respond to the first service request according to the verification result comprises:

In response to the fact that the user identity token is legal and valid, and the service content requested by the first service matches the service authority corresponding to the user identity token, control the first web application to perform Process and return response data to the browser;

Otherwise, control the first web application to return prompt information to the browser, where the prompt information is used to represent the verification result.
The authentication method according to claim 1, further comprising:

receiving a super service request sent by a third web application through the authentication module, wherein the third web application is any one of the plurality of web applications;

Obtain the super identity token in the super service request, wherein the super identity token is obtained by the super user after registering on the Internet platform through any web application and authentication module;

In response to the legality and validity of the super identity token, adjust the user information, department information or application information stored in the Internet platform according to the service content requested by the super service.
An authentication device is characterized in that it is applied to an Internet platform, and the device includes:

A receiving module, configured to receive a first service request sent by a first web application through an authentication module, wherein the first web application is any one of a plurality of web applications corresponding to the Internet platform;

An acquisition module, configured to acquire the user identity token in the first service request, wherein the user identity token is obtained after the second web application logs into the Internet platform through the authentication module, and the second web application Any one of the plurality of web applications;

A verification module, configured to verify the first service request according to the user identity token;

A response module, configured to control the first web application to respond to the first service request according to the verification result.
An authentication system, characterized in that it includes:

A plurality of web applications, the web applications are used to receive the service content input by the user through the browser, and generate a first service request according to the service content and the user identity token in the browser, and transfer the first service request to The business request is sent to the authentication module;

An authentication module, configured to receive the first service request sent by the web application, and send the first service request to an Internet platform;

The Internet platform is configured to receive the first service request sent by the authentication module, and control the corresponding web application to verify the first service request according to the verification result of the user identity token in the first service request. Respond to business requests.
The authentication system according to claim 13, wherein the web application is further configured to prompt the user to input login information after receiving the second service request without the user identity token input by the user through the browser, and receive the the login information entered by the user through the browser;

The authentication module is also used to receive the login information sent by the web application, and send the login information to the Internet platform;

The Internet platform is also used to receive the login information sent by the authentication module, and generate a user identity token according to the login information when the login information is legal and valid, and pass the user identity token through the authentication module and the corresponding web application is returned to the browser.
The authentication system according to claim 13 or 14, wherein the authentication module is in the form of a plug-in; the authentication module includes an interception unit and a forwarding unit, wherein the interception unit is used to intercept information related to the Internet platform information, the forwarding unit is used to forward the information related to the Internet platform.
An authentication system, characterized in that it includes:

An authentication module, configured to receive the first service request sent by the web application, and send the first service request to the Internet platform;

The Internet platform is configured to receive the first service request sent by the authentication module, and control the corresponding web application to verify the first service request according to the verification result of the user identity token in the first service request. Respond to business requests.
An electronic device, characterized in that the device comprises a memory and a processor, the memory is used to store computer instructions executable on the processor, and the processor is used to implement claim 1 when executing the computer instructions The method described in any one of to 11.
A computer-readable storage medium, on which a computer program is stored, wherein, when the program is executed by a processor, the method according to any one of claims 1 to 11 is implemented.