CN113010238A - Permission determination method, device and system for micro application call interface - Google Patents

Abstract

The invention discloses a method, device and system for determining the authority of a micro-application calling interface, and relates to the technical field of mobile interconnection. A specific implementation of the method includes: obtaining a first timestamp corresponding to the client authority data table, and obtaining a second timestamp corresponding to the server authority data table from a server; judging according to the first timestamp and the second timestamp Whether to update the client permission data table; if so, send a permission update request to the server to obtain the server permission data table, and determine the permission result corresponding to the micro-application calling interface according to the server permission data table, according to the server permission data table to update the client permissions data table. This embodiment improves the security of the called interface, reduces the cost of determining the authority and the maintenance cost of the calling interface, improves the fault tolerance rate of the processing method, improves the scalability of the calling interface, simplifies the process of determining the authority, and improves the user experience. experience.

Description

Permission determination method, device and system for micro-application calling interface

technical field

The invention relates to the technical field of mobile interconnection, and in particular, to a method, device and system for determining the authority of a micro-application calling interface.

Background technique

Under the microservice architecture, each microapplication needs to authenticate access, and each microapplication needs to identify the current access user and its permissions. Under the microservice architecture, various authentication scenarios such as external application access scenarios, user-service authentication, and service-service authentication should be considered.

In the existing methods, the methods for determining the authority of the micro-application calling interface mainly include: 1. All micro-applications have the authority to call all APIs, and the specific calls are controlled by developers according to their needs; 2. All micro-applications are divided into two parts : Internal Microapps and External Microapps. Internal micro-applications can call all APIs, while external micro-applications can only call some APIs, and then differentiate internal micro-applications and external micro-applications according to the micro-application attributes; third, construct an authorization model of "user-role-permission", and use this model Associate users with permissions through roles to set bulk user permissions for roles.

There are at least the following problems in the prior art:

In the existing authorization determination method of the calling interface of the micro-application, the security of the calling interface is low, the cost of authorization determination is high, the fault tolerance rate of the processing method is low, the maintenance cost of the calling interface is high, the scalability of the calling interface is poor, and the authorization determination The process is complicated and the user experience is poor.

SUMMARY OF THE INVENTION

In view of this, the embodiments of the present invention provide a method, device and system for determining the authority of a micro-application calling interface, which can improve the security of the called interface, reduce the cost of authority determination and the maintenance cost of the calling interface, and improve the fault tolerance rate of the processing method. , to improve the scalability of the calling interface, simplify the authorization determination process, and improve the user experience.

In order to achieve the above object, according to the first aspect of the embodiments of the present invention, a method for determining permissions of a micro-application calling interface is provided, which is applied to a client and includes:

Obtain the first timestamp corresponding to the client permission data table, and obtain the second timestamp corresponding to the server permission data table from the server;

Judging whether to update the client authority data table according to the first timestamp and the second timestamp; wherein, the second timestamp is the timestamp corresponding to when the management system operates the server authority data table;

If so, send a permission update request to the server to obtain the server permission data table, determine the permission result corresponding to the micro-application calling interface according to the server permission data table, and update the client permission data table according to the server permission data table.

Further, after the step of updating the client authority data table according to the server authority data table, the method further includes:

Obtain the corresponding update timestamp when updating the client permission data table;

Replace the first timestamp with the update timestamp.

Further, before the step of acquiring the first timestamp corresponding to the client authority data table, the method further includes:

Send the calling interface information to the management system, so that: the management system sets the interface calling authority according to the first business requirement and the calling interface information, and sends the interface calling authority to the server; the server determines the server authority data table according to the interface calling authority , and record the current timestamp as the second timestamp.

According to a second aspect of the embodiments of the present invention, a method for determining permissions for a micro-application calling interface is provided, applied to a server, including:

In response to the second timestamp acquisition request sent by the client, the second timestamp corresponding to the server permission data table is sent to the client;

Receive a permission update request sent by the micro-application based on the client, wherein the permission update request is generated after the client determines that the client permission data table needs to be updated according to the second timestamp and the first timestamp corresponding to the client permission data table of;

Send the server-side permission data table to the client, so that the micro-application determines the permission result corresponding to the micro-application calling interface according to the server-side permission data table, and updates the client-side permission data table; wherein, the server-side permission data table is based on The interface calling authority sent by the management system is determined.

Further, the step of determining the server authority data table according to the interface calling authority sent by the management system also includes:

Receive the interface invocation authority sent by the management system; wherein, the interface invocation authority is set by the management system according to the first business requirement and the invocation interface information sent by the micro-application;

Determine the server permission data table according to the interface calling permission, and record the current timestamp as the second timestamp.

According to a third aspect of the embodiments of the present invention, there is provided a method for determining the authority of a micro-application calling interface, which is applied to a management system, including:

Receive call interface information sent by at least one micro-application;

Setting the interface invocation authority according to the first business requirement and invocation interface information sent by at least one micro-application;

Send the interface call permission to the server, so that: after the server receives the permission update request sent by the micro-application based on the client, it sends the server-side permission data table to the micro-application, and the micro-application determines the micro-application call according to the server-side permission data table The permission result corresponding to the interface; wherein, the server permission data table is determined by the server according to the interface calling permission.

Further, the invocation interface information includes an interface number, interface functional characteristics and a micro-application number; the interface invocation authority is set according to the first business requirement and the invocation interface information sent by at least one micro-application, and further includes:

Group the calling interfaces according to the interface number and interface functional characteristics;

Set the API call permissions corresponding to the micro-app IDs in batches according to the grouping results and business requirements.

Further, the calling interface information also includes micro-application attributes; before the step of sending the interface calling authority to the server, the method further includes:

The micro-application type is determined according to the micro-application attribute, and the interface calling authority corresponding to the micro-application number is determined according to the micro-application type.

Further, setting the interface invocation authority according to the first service requirement and invocation interface information sent by at least one micro-application, further includes:

Determine whether the called interface is the target interface according to the business requirements and the interface number in the calling interface information;

If so, according to the first service requirement and the interface function feature corresponding to the interface number, the interface calling authority is respectively set for different interface functions of the target interface.

Further, it also includes:

The second business requirement is received, and the calling interface and the interface calling authority corresponding to the calling interface are updated according to the second business requirement.

According to a fourth aspect of the embodiments of the present invention, a device for determining permissions for a micro-application calling interface is provided, which is set on a client and includes:

a timestamp obtaining module, configured to obtain the first timestamp corresponding to the client permission data table, and obtain the second timestamp corresponding to the server permission data table from the server;

The judgment module is used to judge whether to update the client authority data table according to the first time stamp and the second time stamp; wherein, the second time stamp is the corresponding time stamp when the management system operates the server authority data table;

The permission determination module is used to send a permission update request to the server when the client permission data table needs to be updated to obtain the server permission data table, and determine the corresponding micro application calling interface according to the server permission data table. According to the permission result, the client permission data table is updated according to the server permission data table.

According to a fifth aspect of the embodiments of the present invention, a device for determining permissions for a micro-application calling interface is provided, which is set on a server and includes:

a first sending module, configured to send the second timestamp corresponding to the server permission data table to the client in response to the second timestamp acquisition request sent by the client;

The request receiving module is configured to receive a permission update request sent by the micro-application based on the client, wherein the permission update request is that the client determines that the client needs the permission according to the second timestamp and the first timestamp corresponding to the client permission data table Generated after the data table is updated;

The second sending module is configured to send the server-side permission data table to the client, so that the micro-application determines the permission result corresponding to the micro-application calling interface according to the server-side permission data table, and updates the client-side permission data table; wherein , the server permission data table is determined according to the interface calling permission sent by the management system.

According to a sixth aspect of the embodiments of the present invention, a device for determining permissions for a micro-application calling interface is provided, which is set in a management system and includes:

a call interface information receiving module, configured to receive call interface information sent by at least one micro-application;

a permission setting module, configured to set the interface calling permission according to the first business requirement and the calling interface information sent by the at least one micro-application;

The permission sending module is used to send the interface calling permission to the server, so that: after the server receives the permission update request sent by the micro application based on the client, it sends the server permission data table to the micro application, and the micro application according to the server permission The data table determines the permission result corresponding to the calling interface of the micro-application; wherein, the server permission data table is determined by the server according to the interface calling permission.

According to a seventh aspect of the embodiments of the present invention, a system for determining permissions for a micro-application calling interface is provided, including a client, a server, and a management system; wherein,

The client is used to obtain the first timestamp corresponding to the client permission data table, and obtain the second timestamp corresponding to the server permission data table from the server; according to the first timestamp and the second timestamp, determine whether the client The permission data table is updated; wherein, the second timestamp is the timestamp corresponding to when the management system operates the server permission data table; if so, send a permission update request to the server to obtain the server permission data table, according to the server The permission data table determines the permission result corresponding to the calling interface of the micro-application, and updates the client permission data table according to the server permission data table;

The server is used to send the second timestamp corresponding to the permission data table of the server to the client in response to the second timestamp acquisition request sent by the client; receive the permission update request sent by the micro-application based on the client; The permission data table is sent to the client;

The management system is configured to receive invocation interface information sent by at least one micro-application; set the interface invocation authority according to the first service requirement and the invocation interface information sent by the at least one micro-application; and send the interface invocation authority to the server.

According to an eighth aspect of the embodiments of the present invention, an electronic device is provided, including:

one or more processors;

storage means for storing one or more programs,

When one or more programs are executed by one or more processors, the one or more processors implement any one of the above-mentioned methods for determining permission of a micro-application calling interface.

According to a ninth aspect of the embodiments of the present invention, there is provided a computer-readable medium on which a computer program is stored, and when the program is executed by a processor, implements any of the above methods for determining permission of a micro-application calling interface.

An embodiment of the above invention has the following advantages or beneficial effects: because the first time stamp corresponding to the client authority data table is obtained, and the second time stamp corresponding to the server authority data table is obtained from the server; The stamp and the second timestamp determine whether to update the client authority data table; wherein, the second timestamp is the timestamp corresponding to when the management system operates the server authority data table; if so, send a permission update request to the server, In order to obtain the server-side permission data table, determine the permission result corresponding to the micro-application calling interface according to the server-side permission data table, and update the client-side permission data table according to the technical means of the server-side permission data table, so it overcomes the existing micro-application In the authorization determination method of the application calling interface, the security of the calling interface is low, the cost of authorization determination is high, the fault tolerance rate of the processing method is low, the maintenance cost of the calling interface is high, the scalability of the calling interface is poor, and the authorization determination process is complicated. The technical problem of poor user experience, thereby improving the security of the called interface, reducing the cost of authorization determination and the maintenance cost of the calling interface, improving the fault tolerance rate of the processing method, improving the scalability of the calling interface, simplifying the authorization determination process, and improving the user Experience the technical effects.

Further effects of the above non-conventional alternatives will be described below in conjunction with specific embodiments.

Description of drawings

The accompanying drawings are used for better understanding of the present invention and do not constitute an improper limitation of the present invention. in:

1 is a schematic diagram of the main flow of a method for determining permissions for a micro-application calling interface provided according to a first embodiment of the present invention;

2 is a schematic diagram of the main flow of a method for determining permissions for a micro-application calling interface provided according to a second embodiment of the present invention;

3 is a schematic diagram of the main flow of a method for determining the authority of a micro-application calling interface provided according to a third embodiment of the present invention;

4 is a schematic diagram of main modules of an apparatus for determining authority of a micro-application calling interface provided according to a fourth embodiment of the present invention;

5 is a schematic diagram of main modules of an apparatus for determining authority of a micro-application calling interface provided according to a fifth embodiment of the present invention;

6 is a schematic diagram of main modules of an apparatus for determining authority of a micro-application calling interface provided according to a sixth embodiment of the present invention;

7 is an interactive schematic diagram of a main framework of a system for determining permissions for a micro-application calling interface provided according to a seventh embodiment of the present invention;

FIG. 8 is an exemplary system architecture diagram to which an embodiment of the present invention may be applied;

FIG. 9 is a schematic structural diagram of a computer system suitable for implementing a terminal device or a server according to an embodiment of the present invention.

Detailed ways

Exemplary embodiments of the present invention are described below with reference to the accompanying drawings, which include various details of the embodiments of the present invention to facilitate understanding and should be considered as exemplary only. Accordingly, those of ordinary skill in the art will recognize that various changes and modifications of the embodiments described herein can be made without departing from the scope and spirit of the invention. Also, descriptions of well-known functions and constructions are omitted from the following description for clarity and conciseness.

FIG. 1 is a schematic diagram of the main process of the method for determining the authority of the micro-application calling interface provided according to the first embodiment of the present invention; as shown in FIG. 1 , the method for determining the authority of the micro-application calling interface provided by the embodiment of the present invention is mainly applied to customers end, including:

Step S101, obtaining a first timestamp corresponding to the client authority data table, and obtaining a second timestamp corresponding to the server authority data table from the server; wherein, the second timestamp is that the management system operates on the server authority data table corresponding timestamp.

Specifically, according to the embodiment of the present invention, the first timestamp corresponding to the above-mentioned client permission data table is the timestamp corresponding to when the client operates the data table, including the client operation including the storage operation and the update operation.

Step S102: Determine whether to update the client authority data table according to the first timestamp and the second timestamp. If so, the client authority data table needs to be updated; if not, it means that the client authority data table does not need to be updated.

Specifically, according to the embodiment of the present invention, if the client permission data table does not need to be updated, it indicates that the client permission data table is the latest permission data, and the micro-application call can be determined directly according to the client permission data table stored locally on the client The permission result corresponding to the interface, and then update the client permission data table according to the server permission data table.

With the above settings, the client locally stores the permission data table corresponding to the micro-application calling interface. When determining the result of the micro-application calling interface permission, only the timestamp of the client operating the data table and the permission data table corresponding to the server are needed. By comparing the operation timestamps, the authority result can be quickly determined, avoiding the situation that the latest authority data is obtained from the server every time in the existing method, which occupies a lot of server resources, thereby improving the efficiency of determining the authority result and reducing the It reduces the occupation of server resources by data transmission.

Further, according to the embodiment of the present invention, judging whether to update the client authority data table according to the first timestamp and the second timestamp further includes:

It is judged whether the first timestamp is earlier than the second timestamp, and if so, the client authority data table needs to be updated; if not, the client authority data table does not need to be updated.

Among them, if the first timestamp is earlier than the second timestamp, it indicates that after the client stores or updates the client permission data table, the server permission data table has been updated. The server-side permission data table is updated to the client-side permission data table, so as to ensure the timeliness of the determined permission results, simplify the permission determination process, and improve the technical effect of user experience.

Step S103: Send a permission update request to the server to obtain the server permission data table, determine the permission result corresponding to the micro-application calling interface according to the server permission data table, and update the client permission data table according to the server permission data table .

Through the above settings, the authority data table is obtained from the server only after the server authority data table is updated (it can be determined whether the server authority data table has been updated according to the comparison between the second timestamp and the first timestamp), otherwise , the permission result can be determined directly according to the client permission data table stored locally on the client.

Further, according to the embodiment of the present invention, after the step of updating the client authority data table according to the server authority data table, the above method further includes: obtaining an update time stamp corresponding to the updating of the client authority data table; The stamp replaces the first timestamp.

If it is necessary to re-acquire the server-side permission data table, when updating the client-side permission data table, update the first timestamp, so that when subsequent calls are made, it is determined whether or not it is based on the timestamp corresponding to the latest operation of the permission data table. The client permissions data table needs to be updated.

Preferably, according to the embodiment of the present invention, before the step of acquiring the first timestamp corresponding to the client authority data table, the above method further includes: sending the calling interface information to the management system, so that the management system can meet the first service requirements according to the first service requirements. Set the interface calling permission with the calling interface information, and send the interface calling permission to the server; the server determines the server permission data table according to the interface calling permission, and records the current timestamp as the second timestamp.

Through the above settings, the management system is used to uniformly set the calling interface authority for the micro-application, which ensures the security of the called interface and reduces the cost of determining the authority and the maintenance cost of the calling interface.

According to the technical solution of the embodiment of the present invention, because the first timestamp corresponding to the client permission data table is obtained, and the second timestamp corresponding to the server permission data table is obtained from the server; according to the first timestamp and the second time Stamp to determine whether to update the client permission data table; wherein, the second timestamp is the timestamp corresponding to when the management system operates the server permission data table; if so, send a permission update request to the server to obtain the server permission Data table, according to the server-side permission data table to determine the permission result corresponding to the micro-application calling interface, and the technical means to update the client-side permission data table according to the server-side permission data table, so it overcomes the existing permission of the micro-application calling interface In the determination method, the security of the call interface is low, the cost of authorization determination is high, the fault tolerance rate of the processing method is low, the maintenance cost of the call interface is high, the scalability of the call interface is poor, the authorization determination process is complicated, and the user experience is poor. In order to improve the security of the called interface, reduce the cost of authorization determination and the maintenance cost of the calling interface, improve the fault tolerance rate of the processing method, improve the scalability of the calling interface, simplify the authorization determination process, and improve the technical effect of user experience.

FIG. 2 is a schematic diagram of the main process of the method for determining the authority of the micro-application calling interface provided according to the second embodiment of the present invention; as shown in FIG. 2 , the method for determining the authority of the micro-application calling interface provided by the embodiment of the present invention is applied to the server ,mainly include:

Step S201, in response to the second timestamp acquisition request sent by the client, sending the second timestamp corresponding to the server permission data table to the client.

Specifically, according to the embodiment of the present invention, specifically, according to the embodiment of the present invention, the first timestamp corresponding to the above-mentioned client permission data table is the timestamp corresponding to when the client operates the data table, including the client operation including the storage operation and update operations. When the client wants to determine the calling interface permission corresponding to the micro-application, the client needs to send a second timestamp obtaining request to the server, so as to obtain the second timestamp corresponding to the server permission data table from the server. It is used to determine whether the client authority data table needs to be updated according to the first timestamp corresponding to the client authority data table and the above-mentioned second timestamp.

Step S202: Receive a permission update request sent by the micro-application based on the client, wherein the permission update request is that the client determines that the client permission data table needs to be updated according to the second timestamp and the first timestamp corresponding to the client permission data table. generated after the update.

According to the embodiment of the present invention, when the client determines that the client authority data table needs to be updated according to the first timestamp and the second timestamp, the client needs to send an authority update request to the server to update the server authority data table with the latest , which is used to determine the micro-app permission result and update the locally stored client permission data table.

With the above settings, the client locally stores the permission data table corresponding to the micro-application calling interface. When determining the result of the micro-application calling interface permission, only the timestamp of the client operating the data table and the permission data table corresponding to the server are needed. By comparing the operation timestamps, the authority result can be quickly determined, avoiding the situation that the latest authority data is obtained from the server every time in the existing method, which occupies a lot of server resources, thereby improving the efficiency of determining the authority result and reducing the It reduces the occupation of server resources by data transmission.

Step S203, sending the server-side permission data table to the client, so that the micro-application determines the permission result corresponding to the calling interface of the micro-application according to the server-side permission data table, and updates the client-side permission data table; The data table is determined according to the interface calling authority sent by the management system.

Through the above settings, the authority data table is obtained from the server only after the server authority data table is updated (it can be determined whether the server authority data table has been updated according to the comparison between the second timestamp and the first timestamp), otherwise , the permission result can be determined directly according to the client permission data table stored locally on the client.

Further, according to the embodiment of the present invention, the above-mentioned step of determining the server authority data table according to the interface calling authority sent by the management system further includes: receiving the interface calling authority sent by the management system; wherein, the interface calling authority is the management system according to the first Set by business requirements and the calling interface information sent by the micro-application;

Determine the server permission data table according to the interface calling permission, and record the current timestamp as the second timestamp.

Through the above settings, the management system is used to uniformly set the calling interface authority for the micro-application, which ensures the security of the called interface and reduces the cost of determining the authority and the maintenance cost of the calling interface. According to a specific implementation of the embodiment of the present invention, the management system may be independent of the server, or may be set within the server.

According to the technical solution of the embodiment of the present invention, the second timestamp corresponding to the server permission data table is sent to the client in response to the second timestamp acquisition request sent by the client; the receiving micro-application is based on the permission sent by the client An update request, wherein the authority update request is generated after the client determines that the client authority data table needs to be updated according to the second timestamp and the first timestamp corresponding to the client authority data table; send the server authority data table to the client, so that the micro-application determines the permission result corresponding to the micro-application calling interface according to the server-side permission data table, and updates the client-side permission data table; wherein, the server-side permission data table is based on the interface calling permission sent by the management system. Therefore, it overcomes the low security of the calling interface in the existing authorization determination method of the calling interface of the micro-application, the high cost of authorization determination, the low fault tolerance rate of the processing method, and the high maintenance cost of the calling interface. The scalability of the calling interface is poor, the authorization determination process is complicated, and the user experience is poor, which can improve the security of the called interface, reduce the cost of authorization determination and the maintenance cost of the calling interface, improve the fault tolerance rate of the processing method, and improve the calling interface. The scalability of the system simplifies the authorization determination process and improves the technical effect of the user experience.

FIG. 3 is a schematic diagram of the main flow of the method for determining the authority of the micro-application calling interface provided according to the third embodiment of the present invention; as shown in FIG. 3 , the method for determining the authority of the micro-application calling interface provided by the embodiment of the present invention is applied to the management system ,mainly include:

Step S301: Receive call interface information sent by at least one micro-application.

Specifically, according to the embodiment of the present invention, the above-mentioned invocation interface information includes an interface number, interface functional characteristics and a micro-application number; setting the interface invocation authority according to the first service requirement and the invocation interface information sent by at least one micro-application, further includes: according to the interface The calling interfaces are grouped according to the number and interface function characteristics; the interface calling permissions corresponding to the micro-application number are set in batches according to the grouping results and business requirements.

Through the above settings, the management system obtains the calling interface information sent by multiple micro-applications, and then sets the permissions of the calling interfaces corresponding to the micro-applications in batches according to the interface number, interface functional characteristics and business requirements, etc., which ensures the security of the called interfaces. , which reduces the cost of authorization determination and the maintenance cost of calling interfaces.

Step S302, setting the interface calling authority according to the first service requirement and the calling interface information sent by at least one micro-application.

Further, according to the embodiment of the present invention, the above-mentioned calling interface information further includes the micro-application attribute; before the step of sending the interface calling authority to the server, the method further includes: determining the micro-application type according to the micro-application attribute, and determining the micro-application type according to the micro-application type. The API call permission corresponding to the application ID.

Through the above settings, the interface invocation authority can be determined according to the type of the micro-application, so as to avoid setting the invocation authority corresponding to a special type of micro-application incorrectly due to an operation error when the developer sets the invocation authority through the management system. According to the embodiment of the present invention, a list of micro-application management terminals is constructed, and the micro-applications in the list are uniformly set or not set with corresponding calling interface permissions, so as to improve the security of the called interface.

Preferably, according to the embodiment of the present invention, the above-mentioned setting of the interface invocation authority according to the first service requirement and the invocation interface information sent by the at least one micro-application further includes: judging whether the invoked interface is based on the service requirement and the interface number in the invocation interface information. is the target interface; if so, according to the first service requirement and the interface function characteristics corresponding to the interface number, the interface calling authority is respectively set for different interface functions of the target interface.

According to a specific implementation of the embodiment of the present invention, a micro-application can add a special API (Application Program Interface) that can be used. When adding a special API (that is, the above-mentioned target interface), it is necessary to set whether the special API is required Verify parameter permissions. To verify parameter permissions, you need to configure the parameter key and allowable parameter value to be verified at the same time.

For example, if you jump to the specified channel client API: openClientFunction, assuming that the interface id assigned during API registration is 1002, this API has the channel field and needs to verify the parameter permission. The currently provided parameters are: 1: Mobile Banking; 2: Corporate Banking; 3: payment channel c; 4: payment channel d; 5: payment channel e; 6: payment channel f.

When only configuring the special permission to use this API for a micro-application, if only parameters 1 and 5 are allowed (that is, the calling permission corresponding to the two interface features of the API is only set for the micro-application), the configuration will be finally generated. The permission check data is:

{

"1002": {"channel":["1","5"]}

}

Exemplarily, according to the embodiment of the present invention, the above further includes: receiving the second service requirement, and updating the calling interface and the interface calling authority corresponding to the calling interface according to the second service requirement.

Through the above settings, developers can add, delete, and modify the calling interface APIs according to the real-time updated business requirements (that is, the above-mentioned second business requirements); they can also adjust the calling permissions corresponding to each API, which improves the calling interface. Scalability.

Step S303, sending the interface calling permission to the server, so that: after receiving the permission update request sent by the micro-application based on the client, the server sends the server-side permission data table to the micro-application, and the micro-application determines according to the server-side permission data table The permission result corresponding to the micro-app calling interface; wherein, the server-side permission data table is determined by the server-side according to the interface calling permission.

According to the technical solution of the embodiment of the present invention, because of the adoption of receiving the calling interface information sent by at least one micro-application; setting the interface calling authority according to the first service requirement and the calling interface information sent by the at least one micro-application; sending the interface calling authority to the server , so that: after receiving the permission update request sent by the micro-application based on the client, the server sends the server-side permission data table to the micro-application, and the micro-application determines the permission result corresponding to the micro-application calling interface according to the server-side permission data table; wherein , the server-side permission data table is a technical means for the server to determine according to the interface calling permission, so it overcomes the low security of the calling interface in the existing permission determination method of the micro-application calling interface, and the cost of determining the permission is high. The fault tolerance rate of the method is low, the maintenance cost of the calling interface is high, the scalability of the calling interface is poor, the authorization determination process is complicated, and the user experience is poor. It reduces the maintenance cost, improves the fault tolerance rate of the processing method, improves the scalability of the calling interface, simplifies the authorization determination process, and improves the technical effect of the user experience.

4 is a schematic diagram of the main modules of the apparatus for determining the authority of the micro-application calling interface provided according to the fourth embodiment of the present invention; as shown in FIG. 4 , the apparatus 400 for determining the authority of the micro-application calling interface provided by the embodiment of the present invention is set in Clients, mainly including:

The timestamp obtaining module 401 is configured to obtain the first timestamp corresponding to the client permission data table, and obtain the second timestamp corresponding to the server permission data table from the server.

Specifically, according to the embodiment of the present invention, the first timestamp corresponding to the above-mentioned client permission data table is the timestamp corresponding to when the client operates the data table, including the client operation including the storage operation and the update operation.

The judgment module 402 is configured to judge whether to update the client authority data table according to the first time stamp and the second time stamp; wherein the second time stamp is a corresponding time stamp when the management system operates the server authority data table.

Specifically, according to the embodiment of the present invention, if the client permission data table does not need to be updated, it indicates that the client permission data table is the latest permission data, and the micro-application call can be determined directly according to the client permission data table stored locally on the client The permission result corresponding to the interface, and then update the client permission data table according to the server permission data table.

With the above settings, the client locally stores the permission data table corresponding to the micro-application calling interface. When determining the result of the micro-application calling interface permission, only the timestamp of the client operating the data table and the permission data table corresponding to the server are needed. By comparing the operation timestamps, the authority result can be quickly determined, avoiding the situation that the latest authority data is obtained from the server every time in the existing method, which occupies a lot of server resources, thereby improving the efficiency of determining the authority result and reducing the It reduces the occupation of server resources by data transmission.

Further, according to the embodiment of the present invention, the above judgment module 402 is further configured to: judge whether the first time stamp is earlier than the second time stamp, if so, the client authority data table needs to be updated; if not, it is not necessary Updates to Client Permissions data table.

Among them, if the first timestamp is earlier than the second timestamp, it indicates that after the client stores or updates the client permission data table, the server permission data table has been updated. The server-side permission data table is updated to the client-side permission data table, so as to ensure the timeliness of the determined permission results, simplify the permission determination process, and improve the technical effect of user experience.

The permission determination module 403 is used to send a permission update request to the server when the client permission data table needs to be updated, so as to obtain the server permission data table, and determine the corresponding interface of the micro-application calling interface according to the server permission data table According to the permission result of the server, update the client permission data table according to the server permission data table.

Through the above settings, the authority data table is obtained from the server only after the server authority data table is updated (it can be determined whether the server authority data table has been updated according to the comparison between the second timestamp and the first timestamp), otherwise , the permission result can be determined directly according to the client permission data table stored locally on the client.

Further, according to the embodiment of the present invention, the apparatus 400 for determining the authority of the micro-application calling interface further includes a timestamp updating module, which is used to: obtain the update after the step of updating the client authority data table according to the server authority data table The update timestamp corresponding to the client permission data table; replace the first timestamp with the update timestamp.

If it is necessary to re-acquire the server-side permission data table, when updating the client-side permission data table, update the first timestamp, so that when subsequent calls are made, it is determined whether or not it is based on the timestamp corresponding to the latest operation of the permission data table. The client permissions data table needs to be updated.

Preferably, according to the embodiment of the present invention, the apparatus 400 for determining the authority of the micro-application calling interface further includes a calling interface information sending module, which is used to: before the step of acquiring the first timestamp corresponding to the client authority data table: send the calling interface The information is sent to the management system, so that: the management system sets the interface calling authority according to the first business requirement and the calling interface information, and sends the interface calling authority to the server; the server determines the server authority data table according to the interface calling authority, and records The current timestamp is the second timestamp.

Through the above settings, the management system is used to uniformly set the calling interface authority for the micro-application, which ensures the security of the called interface and reduces the cost of determining the authority and the maintenance cost of the calling interface.

According to the technical solution of the embodiment of the present invention, because the first timestamp corresponding to the client permission data table is obtained, and the second timestamp corresponding to the server permission data table is obtained from the server; according to the first timestamp and the second time Stamp to determine whether to update the client permission data table; wherein, the second timestamp is the timestamp corresponding to when the management system operates the server permission data table; if so, send a permission update request to the server to obtain the server permission Data table, according to the server-side permission data table to determine the permission result corresponding to the micro-application calling interface, and the technical means to update the client-side permission data table according to the server-side permission data table, so it overcomes the existing permission of the micro-application calling interface In the determination method, the security of the call interface is low, the cost of authorization determination is high, the fault tolerance rate of the processing method is low, the maintenance cost of the call interface is high, the scalability of the call interface is poor, the authorization determination process is complicated, and the user experience is poor. In order to improve the security of the called interface, reduce the cost of authorization determination and the maintenance cost of the calling interface, improve the fault tolerance rate of the processing method, improve the scalability of the calling interface, simplify the authorization determination process, and improve the technical effect of user experience.

FIG. 5 is a schematic diagram of the main modules of the apparatus for determining the authority of the micro-application calling interface provided according to the fifth embodiment of the present invention; as shown in FIG. 5 , the apparatus 500 for determining the authority of the micro-application calling interface provided by the embodiment of the present invention is set in The server side mainly includes:

The first sending module 501 is configured to send the second timestamp corresponding to the server permission data table to the client in response to the second timestamp acquisition request sent by the client.

Specifically, according to the embodiment of the present invention, specifically, according to the embodiment of the present invention, the first timestamp corresponding to the above-mentioned client permission data table is the timestamp corresponding to when the client operates the data table, including the client operation including the storage operation and update operations. When the client wants to determine the calling interface permission corresponding to the micro-application, the client needs to send a second timestamp obtaining request to the server, so as to obtain the second timestamp corresponding to the server permission data table from the server. It is used to determine whether the client authority data table needs to be updated according to the first timestamp corresponding to the client authority data table and the above-mentioned second timestamp.

The request receiving module 502 is configured to receive a permission update request sent by the micro-application based on the client, wherein the permission update request is that the client determines that the client needs to update the client according to the second timestamp and the first timestamp corresponding to the client permission data table. Generated after the permissions data table is updated.

According to the embodiment of the present invention, when the client determines that the client authority data table needs to be updated according to the first timestamp and the second timestamp, the client needs to send an authority update request to the server to update the server authority data table with the latest , which is used to determine the micro-app permission result and update the locally stored client permission data table.

With the above settings, the client locally stores the permission data table corresponding to the micro-application calling interface. When determining the result of the micro-application calling interface permission, only the timestamp of the client operating the data table and the permission data table corresponding to the server are needed. By comparing the operation timestamps, the authority result can be quickly determined, avoiding the situation that the latest authority data is obtained from the server every time in the existing method, which occupies a lot of server resources, thereby improving the efficiency of determining the authority result and reducing the It reduces the occupation of server resources by data transmission.

The second sending module 503 is configured to send the server-side permission data table to the client, so that the micro-application determines the permission result corresponding to the micro-application calling interface according to the server-side permission data table, and updates the client-side permission data table; Wherein, the server authority data table is determined according to the interface calling authority sent by the management system.

Through the above settings, the authority data table is obtained from the server only after the server authority data table is updated (it can be determined whether the server authority data table has been updated according to the comparison between the second timestamp and the first timestamp), otherwise , the permission result can be determined directly according to the client permission data table stored locally on the client.

Further, according to the embodiment of the present invention, the apparatus 500 for determining the authority of the micro-application calling interface further includes a server-side authority data table determining module, which is used for: receiving the interface calling authority sent by the management system; wherein, the interface calling authority is the management system according to The first business requirement and the calling interface information sent by the micro-application are set; the server-side permission data table is determined according to the interface calling permission, and the current timestamp is recorded as the second timestamp.

Through the above settings, the management system is used to uniformly set the calling interface authority for the micro-application, which ensures the security of the called interface and reduces the cost of determining the authority and the maintenance cost of the calling interface. According to a specific implementation of the embodiment of the present invention, the management system may be independent of the server, or may be set within the server.

According to the technical solution of the embodiment of the present invention, the second timestamp corresponding to the server permission data table is sent to the client in response to the second timestamp acquisition request sent by the client; the receiving micro-application is based on the permission sent by the client An update request, wherein the authority update request is generated after the client determines that the client authority data table needs to be updated according to the second timestamp and the first timestamp corresponding to the client authority data table; send the server authority data table to the client, so that the micro-application determines the permission result corresponding to the micro-application calling interface according to the server-side permission data table, and updates the client-side permission data table; wherein, the server-side permission data table is based on the interface calling permission sent by the management system. Therefore, it overcomes the low security of the calling interface in the existing authorization determination method of the calling interface of the micro-application, the high cost of authorization determination, the low fault tolerance rate of the processing method, and the high maintenance cost of the calling interface. The scalability of the calling interface is poor, the authorization determination process is complicated, and the user experience is poor, which can improve the security of the called interface, reduce the cost of authorization determination and the maintenance cost of the calling interface, improve the fault tolerance rate of the processing method, and improve the calling interface. The scalability of the system simplifies the authorization determination process and improves the technical effect of the user experience.

FIG. 6 is a schematic diagram of the main modules of the apparatus for determining the authority of the micro-application calling interface provided according to the sixth embodiment of the present invention; as shown in FIG. 6 , the apparatus 600 for determining the authority of the micro-application calling interface provided by the embodiment of the present invention is set in Management system, mainly including:

The call interface information receiving module 601 is configured to receive call interface information sent by at least one micro-application.

Specifically, according to the embodiment of the present invention, the above-mentioned invocation interface information includes an interface number, interface functional characteristics and a micro-application number; setting the interface invocation authority according to the first service requirement and the invocation interface information sent by at least one micro-application, further includes: according to the interface The calling interfaces are grouped according to the number and interface function characteristics; the interface calling permissions corresponding to the micro-application number are set in batches according to the grouping results and business requirements.

Through the above settings, the management system obtains the calling interface information sent by multiple micro-applications, and then sets the permissions of the calling interfaces corresponding to the micro-applications in batches according to the interface number, interface functional characteristics and business requirements, etc., which ensures the security of the called interfaces. , which reduces the cost of authorization determination and the maintenance cost of calling interfaces.

The permission setting module 602 is configured to set the interface calling permission according to the first service requirement and the calling interface information sent by the at least one micro-application.

Further, according to the embodiment of the present invention, the apparatus 600 for determining the authority of the micro-application invocation interface further includes a micro-application type determination module, and the above-mentioned invocation interface information also includes the micro-application attribute; before the step of sending the interface invocation authority to the server, the method It also includes: determining the micro-application type according to the micro-application attribute, and determining the interface calling authority corresponding to the micro-application number according to the micro-application type.

Through the above settings, the interface invocation authority can be determined according to the type of the micro-application, so as to avoid setting the invocation authority corresponding to a special type of micro-application incorrectly due to an operation error when the developer sets the invocation authority through the management system. According to the embodiment of the present invention, a list of micro-application management terminals is constructed, and the micro-applications in the list are uniformly set or not set with corresponding calling interface permissions, so as to improve the security of the called interface.

Preferably, according to the embodiment of the present invention, the above-mentioned setting of the interface invocation authority according to the first service requirement and the invocation interface information sent by the at least one micro-application further includes: judging whether the invoked interface is based on the service requirement and the interface number in the invocation interface information. is the target interface; if so, according to the first service requirement and the interface function characteristics corresponding to the interface number, the interface calling authority is respectively set for different interface functions of the target interface.

Exemplarily, according to the embodiment of the present invention, the above further includes: receiving the second service requirement, and updating the calling interface and the interface calling authority corresponding to the calling interface according to the second service requirement.

Through the above settings, developers can add, delete, and modify the calling interface APIs according to the real-time updated business requirements (that is, the above-mentioned second business requirements); they can also adjust the calling permissions corresponding to each API, which improves the calling interface. Scalability.

The permission sending module 603 is configured to send the interface calling permission to the server, so that: after the server receives the permission update request sent by the micro application based on the client, it sends the server permission data table to the micro application, and the micro application according to the server The permission data table determines the permission result corresponding to the calling interface of the micro-application; wherein, the server permission data table is determined by the server according to the interface calling permission.

According to the technical solution of the embodiment of the present invention, because of the adoption of receiving the calling interface information sent by at least one micro-application; setting the interface calling authority according to the first service requirement and the calling interface information sent by the at least one micro-application; sending the interface calling authority to the server , so that: after receiving the permission update request sent by the micro-application based on the client, the server sends the server-side permission data table to the micro-application, and the micro-application determines the permission result corresponding to the micro-application calling interface according to the server-side permission data table; wherein , the server-side permission data table is a technical means for the server to determine according to the interface calling permission, so it overcomes the low security of the calling interface in the existing permission determination method of the micro-application calling interface, and the cost of determining the permission is high. The fault tolerance rate of the method is low, the maintenance cost of the calling interface is high, the scalability of the calling interface is poor, the authorization determination process is complicated, and the user experience is poor. It reduces the maintenance cost, improves the fault tolerance rate of the processing method, improves the scalability of the calling interface, simplifies the authorization determination process, and improves the technical effect of the user experience.

7 is a schematic diagram of the main framework of a system for determining the authority of a micro-application calling interface provided according to the seventh embodiment of the present invention; as shown in FIG. 7 , the system 700 for determining the authority of a micro-application calling interface provided by the embodiment of the present invention mainly includes:

At the management end, step S1 is performed, and the administrator enters the permission data modification information; S2, the server end permission data table is updated according to the permission data modification information.

According to the embodiment of the present invention, before step S1 is performed, the management terminal is further configured to: receive the calling interface information sent by at least one micro-application; set the interface calling authority according to the first service requirement and the calling interface information sent by the at least one micro-application ; Send the interface calling permission to the server, so that the server generates the server permission data table.

The client, executes step S3, sends a permission update request to the server; step S5, determines the permission result according to the server permission data table sent by the server.

According to the embodiment of the present invention, before step S3 is performed, the client is further configured to: obtain the first timestamp corresponding to the client authority data table, and obtain the second timestamp corresponding to the server authority data table from the server; A timestamp and a second timestamp determine whether to update the client authority data table; wherein, the second timestamp is the timestamp corresponding to when the management system operates the server authority data table; when the judgment result is that updating is required, Step S3 is executed again; if the judgment result is that no update is required, the authority result is directly determined according to the client authority data table.

The server performs step S4, and sends the updated server permission data table to the client in response to the permission update request sent by the micro-application based on the client.

According to the embodiment of the present invention, before step S4 is performed, the server is further configured to: in response to the second timestamp acquisition request sent by the client, send the second timestamp corresponding to the server permission data table to the client, so that The client determines whether the client authority data table needs to be updated according to the first timestamp and the second timestamp.

According to the technical solution of the embodiment of the present invention, because the first timestamp corresponding to the client permission data table is obtained, and the second timestamp corresponding to the server permission data table is obtained from the server; according to the first timestamp and the second time Stamp to determine whether to update the client permission data table; wherein, the second timestamp is the timestamp corresponding to when the management system operates the server permission data table; if so, send a permission update request to the server to obtain the server permission Data table, according to the server-side permission data table to determine the permission result corresponding to the micro-application calling interface, and the technical means to update the client-side permission data table according to the server-side permission data table, so it overcomes the existing permission of the micro-application calling interface In the determination method, the security of the call interface is low, the cost of authorization determination is high, the fault tolerance rate of the processing method is low, the maintenance cost of the call interface is high, the scalability of the call interface is poor, the authorization determination process is complicated, and the user experience is poor. In order to improve the security of the called interface, reduce the cost of authorization determination and the maintenance cost of the calling interface, improve the fault tolerance rate of the processing method, improve the scalability of the calling interface, simplify the authorization determination process, and improve the technical effect of user experience.

FIG. 8 shows an exemplary system architecture 800 to which the method for determining the authority of the micro-application calling interface or the apparatus for determining the authority of the micro-application calling interface (adjusted according to specific cases) according to an embodiment of the present invention can be applied.

As shown in FIG. 8, the system architecture 800 may include terminal devices 801, 802, 803, a network 804 and a server 805 (this architecture is only an example, and the components included in the specific architecture can be adjusted according to the specific application). The network 804 is a medium used to provide a communication link between the terminal devices 801 , 802 , 803 and the server 805 . Network 804 may include various connection types, such as wired, wireless communication links, or fiber optic cables, among others.

The user can use the terminal devices 801, 802, 803 to interact with the server 805 through the network 804 to receive or send messages and the like. Various communication client applications may be installed on the terminal devices 801 , 802 and 803 , such as shopping applications, web browser applications, search applications, instant messaging tools, email clients, social platform software, etc. (only examples).

The terminal devices 801, 802, 803 may be various electronic devices having a display screen and supporting web browsing, including but not limited to smart phones, tablet computers, laptop computers, desktop computers, and the like.

The server 805 may be a server that provides various services, such as a server (only an example) for users to use the terminal devices 801 , 802 , and 803 (for authorization determination/data processing). The server can analyze and process the received data such as the first timestamp and the second timestamp, and feed back the processing results (for example, the server permission data table and permission results—just an example) to the terminal device.

It should be noted that the method for determining the authority of the micro-application calling interface provided by the embodiment of the present invention is generally executed by the server 805 .

It should be understood that the numbers of terminal devices, networks and servers in FIG. 8 are merely illustrative. There can be any number of terminal devices, networks and servers according to implementation needs.

Referring to FIG. 9 below, it shows a schematic structural diagram of a computer system 900 suitable for implementing a terminal device or a server according to an embodiment of the present invention. The terminal device or server shown in FIG. 9 is only an example, and should not impose any limitations on the functions and scope of use of the embodiments of the present invention.

As shown in FIG. 9, a computer system 900 includes a central processing unit (CPU) 901, which can be loaded into a random access memory (RAM) 903 according to a program stored in a read only memory (ROM) 902 or a program from a storage section 908 Instead, various appropriate actions and processes are performed. In the RAM 903, various programs and data necessary for the operation of the system 900 are also stored. The CPU 901 , the ROM 902 , and the RAM 903 are connected to each other through a bus 904 . An input/output (I/O) interface 905 is also connected to bus 904 .

The following components are connected to the I/O interface 905: an input section 906 including a keyboard, a mouse, etc.; an output section 907 including a cathode ray tube (CRT), a liquid crystal display (LCD), etc., and a speaker, etc.; a storage section 908 including a hard disk, etc. ; and a communication section 909 including a network interface card such as a LAN card, a modem, and the like. The communication section 909 performs communication processing via a network such as the Internet. A drive 910 is also connected to the I/O interface 905 as needed. A removable medium 911, such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, etc., is mounted on the drive 910 as needed so that a computer program read therefrom is installed into the storage section 908 as needed.

In particular, the processes described above with reference to the flowcharts may be implemented as computer software programs in accordance with the disclosed embodiments of the present invention. For example, embodiments disclosed herein include a computer program product comprising a computer program carried on a computer-readable medium, the computer program containing program code for performing the method illustrated in the flowchart. In such an embodiment, the computer program may be downloaded and installed from the network via the communication portion 909, and/or installed from the removable medium 911. When the computer program is executed by the central processing unit (CPU) 901, the above-described functions defined in the system of the present invention are executed.

It should be noted that the computer-readable medium shown in the present invention may be a computer-readable signal medium or a computer-readable storage medium, or any combination of the above two. The computer-readable storage medium can be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus or device, or a combination of any of the above. More specific examples of computer readable storage media may include, but are not limited to, electrical connections with one or more wires, portable computer disks, hard disks, random access memory (RAM), read only memory (ROM), erasable Programmable read only memory (EPROM or flash memory), fiber optics, portable compact disk read only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination of the foregoing. In the present invention, a computer-readable storage medium may be any tangible medium that contains or stores a program that can be used by or in conjunction with an instruction execution system, apparatus, or device. In the present invention, however, a computer-readable signal medium may include a data signal propagated in baseband or as part of a carrier wave, carrying computer-readable program code therein. Such propagated data signals may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the foregoing. A computer-readable signal medium can also be any computer-readable medium other than a computer-readable storage medium that can transmit, propagate, or transport the program for use by or in connection with the instruction execution system, apparatus, or device . Program code embodied on a computer readable medium may be transmitted using any suitable medium including, but not limited to, wireless, wireline, optical fiber cable, RF, etc., or any suitable combination of the foregoing.

The flowchart and block diagrams in the Figures illustrate the architecture, functionality, and operation of possible implementations of systems, methods and computer program products according to various embodiments of the present invention. In this regard, each block in the flowchart or block diagrams may represent a module, segment, or portion of code that contains one or more logical functions for implementing the specified functions executable instructions. It should also be noted that, in some alternative implementations, the functions noted in the blocks may occur out of the order noted in the figures. For example, two blocks shown in succession may, in fact, be executed substantially concurrently, or the blocks may sometimes be executed in the reverse order, depending upon the functionality involved. It is also noted that each block of the block diagrams or flowchart illustrations, and combinations of blocks in the block diagrams or flowchart illustrations, can be implemented in special purpose hardware-based systems that perform the specified functions or operations, or can be implemented using A combination of dedicated hardware and computer instructions is implemented.

The modules involved in the embodiments of the present invention may be implemented in a software manner, and may also be implemented in a hardware manner. The described module can also be set in the processor, for example, it can be described as: a processor includes a time stamp acquisition module, a judgment module and an authority determination module. Among them, the names of these modules do not constitute a limitation of the module itself under certain circumstances. For example, the timestamp obtaining module can also be described as "used to obtain the first timestamp corresponding to the client permission data table, and from the A module for the server to obtain the second timestamp corresponding to the server's permission data table".

As another aspect, the present invention also provides a computer-readable medium, which may be included in the device described in the above embodiments; or may exist alone without being assembled into the device. The above-mentioned computer-readable medium carries one or more programs, and when the above-mentioned one or more programs are executed by a device, the device includes: obtaining the first timestamp corresponding to the client authority data table, and obtaining the first timestamp from the server The second timestamp corresponding to the server-side authority data table; it is judged whether to update the client-side authority data table according to the first timestamp and the second timestamp; wherein, the second timestamp is when the management system operates the server-side authority data table If it is, send a permission update request to the server to obtain the server permission data table, determine the permission result corresponding to the micro-application calling interface according to the server permission data table, and update the client according to the server permission data table. Permissions data table to be updated.

According to the technical solution of the embodiment of the present invention, because the first timestamp corresponding to the client permission data table is obtained, and the second timestamp corresponding to the server permission data table is obtained from the server; according to the first timestamp and the second time Stamp to determine whether to update the client permission data table; wherein, the second timestamp is the timestamp corresponding to when the management system operates the server permission data table; if so, send a permission update request to the server to obtain the server permission Data table, according to the server-side permission data table to determine the permission result corresponding to the micro-application calling interface, and the technical means to update the client-side permission data table according to the server-side permission data table, so it overcomes the existing permission of the micro-application calling interface In the determination method, the security of the call interface is low, the cost of authorization determination is high, the fault tolerance rate of the processing method is low, the maintenance cost of the call interface is high, the scalability of the call interface is poor, the authorization determination process is complicated, and the user experience is poor. In order to improve the security of the called interface, reduce the cost of authorization determination and the maintenance cost of the calling interface, improve the fault tolerance rate of the processing method, improve the scalability of the calling interface, simplify the authorization determination process, and improve the technical effect of user experience.

The above-mentioned specific embodiments do not constitute a limitation on the protection scope of the present invention. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions may occur depending on design requirements and other factors. Any modifications, equivalent replacements and improvements made within the spirit and principle of the present invention shall be included within the protection scope of the present invention.

Claims (16)

1. A permission determination method of a micro application call interface is applied to a client and comprises the following steps:

acquiring a first time stamp corresponding to a client side authority data table, and acquiring a second time stamp corresponding to a server side authority data table from a server side;

judging whether to update the client permission data table according to the first time stamp and the second time stamp; the second timestamp is a timestamp corresponding to the management system when operating the server side authority data table;

if yes, sending an authority updating request to the server to obtain the server authority data table, determining an authority result corresponding to a micro application calling interface according to the server authority data table, and updating the client authority data table according to the server authority data table.

2. The permission determination method of a micro application call interface according to claim 1, wherein after the step of updating the client permission data table according to the server permission data table, the method further comprises:

acquiring a corresponding update timestamp when the client permission data table is updated;

replacing the first timestamp with the update timestamp.

3. The permission determination method of a micro application call interface according to claim 1, wherein before the step of obtaining the first timestamp corresponding to the client permission data table, the method further comprises:

sending the call interface information to a management system such that: the management system sets interface calling authority according to a first service requirement and the calling interface information, and sends the interface calling authority to the server side; and the server side determines a server side authority data table according to the interface calling authority and records the current timestamp as the second timestamp.

4. A permission determination method of a micro application call interface is applied to a server side and comprises the following steps:

responding to a second timestamp acquisition request sent by the client, and sending a second timestamp corresponding to the server side permission data table to the client;

receiving a permission updating request sent by a micro application based on the client, wherein the permission updating request is generated after the client determines that the client permission data table needs to be updated according to the second time stamp and a first time stamp corresponding to the client permission data table;

sending the server side authority data table to the client side, so that the micro application determines an authority result corresponding to a micro application calling interface according to the server side authority data table, and updating the client side authority data table; and the server side authority data table is determined according to the interface calling authority sent by the management system.

5. The permission determination method for the micro application call interface according to claim 4, wherein the step of determining the server side permission data table according to the interface call permission sent by the management system further comprises:

receiving an interface calling authority sent by a management system; the management system is used for setting the interface calling authority according to a first service requirement and calling interface information sent by the micro application;

and determining a server side authority data table according to the interface calling authority, and recording the current timestamp as a second timestamp.

6. A permission determination method of a micro application call interface is applied to a management system and comprises the following steps:

receiving calling interface information sent by at least one micro application;

setting interface calling authority according to a first service requirement and calling interface information sent by the at least one micro application;

sending the interface calling authority to a server so as to: after receiving a permission updating request sent by a micro application based on a client, a server side permission data table is sent to the micro application, and the micro application determines a permission result corresponding to a micro application calling interface according to the server side permission data table; and the server side authority data table is determined by the server side according to the interface calling authority.

7. The permission determination method of a micro application call interface according to claim 6, wherein the call interface information includes an interface number, an interface function feature, and a micro application number; the setting of the interface calling authority according to the first service requirement and the calling interface information sent by the at least one micro application further comprises:

grouping calling interfaces according to the interface numbers and the interface functional characteristics;

and setting interface calling authorities corresponding to the micro application numbers in batches according to grouping results and the service requirements.

8. The permission determination method of a micro application call interface according to claim 6, wherein the call interface information further includes a micro application attribute; before the step of sending the interface call authority to the server, the method further includes:

determining the type of the micro application according to the micro application attribute, and determining the interface calling authority corresponding to the micro application number according to the type of the micro application.

9. The method for determining permission of a calling interface of a micro application according to claim 6, wherein the setting of the interface calling permission according to the first service requirement and the calling interface information sent by the at least one micro application further comprises:

judging whether the called interface is a target interface or not according to the service requirement and the interface number in the calling interface information;

if so, respectively setting interface calling authorities for different interface functions of the target interface according to the first service requirement and the interface function characteristics corresponding to the interface numbers.

10. The permission determination method of a micro application call interface according to claim 6, further comprising:

and receiving a second service requirement, and updating the calling interface and the interface calling authority corresponding to the calling interface according to the second service requirement.

11. An authority determination device for a micro application call interface, which is arranged at a client, comprises:

the time stamp obtaining module is used for obtaining a first time stamp corresponding to the client side authority data table and obtaining a second time stamp corresponding to the server side authority data table from the server side;

the judging module is used for judging whether to update the client permission data table according to the first time stamp and the second time stamp; the second timestamp is a timestamp corresponding to the management system when operating the server side authority data table;

and the permission determining module is used for sending a permission updating request to the server side to acquire the server side permission data table under the condition that the client side permission data table needs to be updated, determining a permission result corresponding to a micro application calling interface according to the server side permission data table, and updating the client side permission data table according to the server side permission data table.

12. The utility model provides a permission confirming device of micro application call interface which characterized in that sets up in the server side, includes:

the first sending module is used for responding to a second timestamp acquisition request sent by the client and sending a second timestamp corresponding to the server side permission data table to the client;

the request receiving module is used for receiving a permission updating request sent by the micro application based on the client, wherein the permission updating request is generated after the client determines that the client permission data table needs to be updated according to the second time stamp and a first time stamp corresponding to the client permission data table;

the second sending module is used for sending the server side authority data table to the client side, so that the micro application determines an authority result corresponding to a micro application calling interface according to the server side authority data table and updates the client side authority data table; and the server side authority data table is determined according to the interface calling authority sent by the management system.

13. An authority determination device for a micro application call interface, provided in a management system, includes:

the calling interface information receiving module is used for receiving calling interface information sent by at least one micro application;

the permission setting module is used for setting interface calling permission according to the first service requirement and calling interface information sent by the at least one micro application;

the permission sending module is used for sending the interface calling permission to a server so as to enable: after receiving a permission updating request sent by a micro application based on a client, a server side permission data table is sent to the micro application, and the micro application determines a permission result corresponding to a micro application calling interface according to the server side permission data table; and the server side authority data table is determined by the server side according to the interface calling authority.

14. A permission determining system of a micro application calling interface is characterized by comprising a client, a server and a management system; wherein,

the client is used for acquiring a first time stamp corresponding to the client permission data table and acquiring a second time stamp corresponding to the server permission data table from the server; judging whether to update the client permission data table according to the first time stamp and the second time stamp; the second timestamp is a timestamp corresponding to the management system when operating the server side authority data table; if so, sending an authority updating request to the server to acquire the server authority data table, determining an authority result corresponding to a micro application calling interface according to the server authority data table, and updating the client authority data table according to the server authority data table;

the server is used for responding to a second timestamp acquisition request sent by the client and sending a second timestamp corresponding to the server authority data table to the client; receiving a permission updating request sent by a micro application based on the client; sending the server side authority data table to the client side;

the management system is used for receiving calling interface information sent by at least one micro application; setting interface calling authority according to a first service requirement and calling interface information sent by the at least one micro application; and sending the interface calling authority to a server.

15. An electronic device, comprising:

one or more processors;

a storage device for storing one or more programs,

when executed by the one or more processors, cause the one or more processors to implement the method of any one of claims 1-3, 4-5, 6-10.

16. A computer-readable medium, on which a computer program is stored, which program, when being executed by a processor, is adapted to carry out the method of any one of claims 1-3, 4-5, 6-10.

Images