Xiaobai learns oauth2

Xiaobaixue OAuth2

One 、OAuth2 What problem to solve

1、OAuth2 Proposed background

Photo owners want to print photos on Cloud Print Services , Cloud printing services need to access resources on cloud storage services

2、 legend

Resource owners ： Photo owner
Customer applications ： Cloud printing
Protected resources ： Photo

3、 Mode one ： User name password copy

Applicable to multiple systems within the same company , Not for untrusted third party applications

4、 Mode two ： General developers key

It is applicable to the cooperation between partners or different business departments of credit granting

5、 Mode three ： Method token

near OAuth2 The way , You need to think about how to manage tokens 、 Issue token 、 Revocation token , Need a unified agreement , So there it is OAuth2 agreement

Two 、 Modern microservice security

In addition to open systems licensing ,OAuth2 It can also be applied to modern microservice security

1、 Security of traditional single block applications

2、 Modern microservice security

In modern microservices, there are more and more forms of microservices and applications and types of devices , You can't log in the traditional way
The core technology is not user name and password , It is token, from AuthServer Issued by token, The user to use token Log in

3、 Typical OAuth2 application

3、 ... and 、 summary

3、 ... and 、 What is? OAuth2

1、OAuth2 Formal definition

2、 Core of token

3、OAuth2 The history of

4、OAuth2 The advantages of

5、OAuth2 Deficiency

6、Auth2 The role involved

7、OAuth2 The term

8、OAuth2 Type of token

9、OAuth2 The misunderstanding of

Four 、 review