前后端分离场景下权限系统认证集成方式研究与实现  

Research and Implementation of Authority System Authentication Integration Mode in the Context of Front-end and Back-end Separation

作　　者：王琰洁 张晶 王树杰 利润霖 王孟强 刘雅琦 WANG Yanjie;ZHANG Jing;WANG Shujie;LI Runlin;WANG Mengqiang;LIU Yaqi(Information Communication Research Institute,State Grid Info&Telecom Group Co.,Ltd.,Xicheng District,Beijing 100052,China)

机构地区：[1]国网信息通信产业集团有限公司信通研究院,北京市西城区100052

出　　处：《电力信息与通信技术》2023年第8期84-88,共5页Electric Power Information and Communication Technology

摘　　要：近年来,微服务架构的应用在国家电网有限公司电力信息化项目中日趋普遍,采用前后端分离模式的应用场景逐渐增多。统一权限系统作为企业级信息安全访问控制平台,对前后端分离架构应用缺乏可参考复用的认证集成方式,业务应用面临集成门槛高、难度大、开发周期长等问题。文章重点研究前后端分离场景下安全认证、开放授权、微服务网关等认证鉴权关键技术,并实现了一套灵活可复用的网关认证集成组件,简化权限系统认证集成工作,降低业务应用与权限系统认证集成门槛,提升权限系统认证集成效率。In recent years,application of micro-service framework in corporation's electrical information projects is becoming more common.Use of front-end and back-end separation model gradually increases.Unified authority system acts as enterprise information security access control platform,but lack of reference and reuse implementation way for front-end and back-end separation architectural applications,business applications face problems such as high barrier of integration,very tough of practice,long duration of development,etc.Focusing on researching security authentication,open authorization,microservice gateway and other key authentication technologies related to front-end and back-end separation scenario,this paper implements a set of flexible and reusable gateway service authentication integration component,which simplifies the authorization system authentication integration,reduces the threshold of business application and authorization system authentication integration,and improves the efficiency of authorization system authentication integration.

关 键 词：前后端分离 权限系统 OAuth2.0 微服务 网关 认证 

分 类 号：TP319[自动化与计算机技术—计算机软件与理论]