面向农业信息服务的单点登录技术研究与改进

Design and Improvement of Single Sign- on Technology for Agriculture Information Services

针对农业信息服务平台中多个应用系统在资源整合和联合服务过程中统一认证、统一授权和单点登录的需求,文中提出了一种基于OAuth2.0和Open ID的单点登录技术。该技术主体的框架能够与现有的CAS框架相结合,并采用一种非侵入的方式整合多个农业信息服务应用平台中的登录功能模块,最大限度地减少了对原有应用平台代码的修改。同时,这种单点登录技术框架还通过对细粒度控制框架和APR技术方案的应用,对现有的基于CAS框架下的用户权限管理及其HTTPS访问方式进行了改进。测试结果表明,该单点登录技术所构建的服务系统总体性能稳定,整体框架设计合理,能够满足农业信息服务平台的应用需求。

To address the requirements of unified authentication and authorization,and the original Single Sign- On（ SSO） in the processing of resource integration and joint services in information service of agriculture,a SSO technology is proposed in this paper based on OAuth2. 0 and Open ID. This system could integrate current CAS,utilization of a non- invasive manner to integrate log function modules of multiple application platforms,which can minimize the modification of code for original platform. Besides,user rights management and HTTPS access in this system that based on CAS framework are improved with technologies of fine- grained control and APR. The test results showthe performance of the system is stable and the design of the platform is reasonable. It is believed that the demand for agricultural information service platform should be met.