CN114237558A - Method for controlling Web interface access by JWT - Google Patents

Abstract

The invention provides a method for controlling Web interface access by using JWT, which comprises the following steps: s1: connecting the endpoint name of the interface URL with the interface request method to form an interface authority identifier; s2: assigning interface rights to the user; s3: after the user login authentication is passed, storing the authority identification in the JWT and returning the authority identification to the user, wherein the JWT is carried by the user in the subsequent interface request; s4: setting an interface request interceptor, judging whether an endpoint name of an interface and an identifier formed by a request method are in the JWT, if so, passing the request, and if not, rejecting the request. The method reduces interface authority identifier hard coding, the authority identifier is from the endpoint name of the interface URL and the interface method, and the work that whether the authority identifier is repeated or not needs to be additionally carried out in a common method is omitted; meanwhile, the interface request interceptor is not used for displaying the transmission authority identifier, so that a certain code amount is saved; if the authority identification needs to be changed, only the name of the interface endpoint needs to be changed, so that the maintenance is easier.

Description

Method for controlling Web interface access by JWT

Technical Field

The invention relates to a method for controlling Web interface access by using JWT (just-through-the-word).

Background

The common method for controlling Web interface access by using JWT is to define an interface authority identifier and bind the identifier and the interface, then to distribute the interface authority identifier as authority to the user, after the user passes the login authentication, to store the authority identifier in JWT, and then to determine whether the authority identifier exists in JWT or not in the interface, so as to achieve the purpose of controlling interface access.

The method has certain disadvantages that 1, the authority identification bound with the interface needs to be realized by hard coding, if the rule of the hard coding is not well designed, the hard coding is often difficult to understand, and then extra work is needed to ensure that the hard coding identification cannot be repeated; 2. when designing an interface interceptor, the access control judgment can be carried out only by displaying and transmitting the authority identification into the interceptor in a parameter form; 3. in the later maintenance, the operation is relatively troublesome, for example, a certain authority identifier "xxx" needs to be changed into "xxxx", the position of the defined identifier needs to be modified, the positions where the interface interceptors refer to the identifier need to be modified, and other positions where the identifier has reference need to be modified.

Disclosure of Invention

The present invention is directed to a method for controlling Web interface access by JWT, which can solve the above problems.

In order to meet the requirements, the technical scheme adopted by the invention is as follows: provided is a method for Web interface access control by JWT, which comprises the following steps:

s1: connecting the endpoint name of the interface URL with the interface request method to form an interface authority identifier;

s2: assigning interface rights to the user;

s3: after the user login authentication is passed, storing the authority identification in the JWT and returning the authority identification to the user, wherein the JWT is carried by the user in the subsequent interface request;

s4: setting an interface request interceptor, judging whether an endpoint name of an interface and an identifier formed by a request method are in the JWT, if so, passing the request, and if not, rejecting the request.

The method for controlling the Web interface access by using the JWT has the following advantages:

hard coding of the interface authority identifier is reduced, the authority identifier is from the endpoint name of the interface URL and the interface method, theoretically, whether the authority identifier is repeated or not can be automatically judged when the endpoint name of the interface URL is defined, and the work that whether the authority identifier is repeated or not needs to be additionally carried out in a common method is omitted; meanwhile, the interface request interceptor is not used for displaying the transmission authority identifier, so that a certain code amount is saved; if the authority identification needs to be changed, only the name of the interface endpoint needs to be changed, so that the maintenance is easier.

Drawings

The accompanying drawings, which are included to provide a further understanding of the application and are incorporated in and constitute a part of this application, illustrate embodiment(s) of the application and together with the description serve to explain the application and not to limit the application. In the drawings:

FIG. 1 schematically shows a flowchart of a method for Web interface access control using JWT according to one embodiment of the present application.

Detailed Description

In order to make the objects, technical solutions and advantages of the present application more apparent, the present application will be described in further detail with reference to the accompanying drawings and specific embodiments.

In the following description, references to "one embodiment," "an embodiment," "one example," "an example," etc., indicate that the embodiment or example so described may include a particular feature, structure, characteristic, property, element, or limitation, but every embodiment or example does not necessarily include the particular feature, structure, characteristic, property, element, or limitation. Moreover, repeated use of the phrase "in accordance with an embodiment of the present application" although it may possibly refer to the same embodiment, does not necessarily refer to the same embodiment.

Certain features that are well known to those skilled in the art have been omitted from the following description for the sake of simplicity.

According to an embodiment of the present application, there is provided a method for controlling Web interface access by using JWT, as shown in fig. 1, including the steps of:

s1: connecting the endpoint name of the interface URL with the interface request method to form an interface authority identifier;

s2: assigning interface rights to the user;

s3: after the user login authentication is passed, storing the authority identification in the JWT and returning the authority identification to the user, wherein the JWT is carried by the user in the subsequent interface request;

s4: setting an interface request interceptor, judging whether an endpoint name of an interface and an identifier formed by a request method are in the JWT, if so, passing the request, and if not, rejecting the request.

According to an embodiment of the application, the method solves the defects of the existing method, provides a method for using the combination of the interface endpoint name and the interface request method as the interface access control identifier, and solves the problems that the readability of a hard code identifier is poor, an interface interceptor needs to explicitly transmit the authority identifier, the later maintenance is complex, and whether the identifier is repeated needs to be additionally judged in the definition process of the authority identifier in the existing method.

The above-mentioned embodiments only show some embodiments of the present invention, and the description thereof is more specific and detailed, but should not be construed as limiting the scope of the present invention. It should be noted that, for a person skilled in the art, several variations and modifications can be made without departing from the inventive concept, which falls within the scope of the present invention. Therefore, the protection scope of the present invention should be subject to the claims.

Claims (1)

1. A method for Web interface access control using JWT, comprising the steps of:

s1: connecting the endpoint name of the interface URL with the interface request method to form an interface authority identifier;

s2: assigning interface rights to the user;

s3: after the user login authentication is passed, storing the authority identification in the JWT and returning the authority identification to the user, wherein the JWT is carried by the user in the subsequent interface request;

s4: setting an interface request interceptor, judging whether an endpoint name of an interface and an identifier formed by a request method are in the JWT, if so, passing the request, and if not, rejecting the request.

Images