移动互联网场景下服务端Shiro权限管理研究

Server-Side Shiro Permission Management in Mobile Internet Scenario

目的随着Web系统、App及微信小程序的混合应用越来越多,权限管理日趋复杂。系统权限管理存在授权方式复杂、权限管理不集中、访问控制力度粗化等问题,亟需加强对数据信息进行安全有效管理。方法针对这些问题,结合Shiro框架提出了移动互联网场景下服务器认证授权方法。结果该方法提高了权限管理的安全性、简便性及集中度,有效解决移动互联网这一领域企业级应用系统的权限管理需求,大大降低服务器端持有Session资源开销,也充分保障了通信的安全性、简洁性。结论研究方法在政务系统、智慧校园等领域应用良好。

Objective With more and more hybrid applications of Web system,App and WeChat applet,the authority management is becoming increasingly complex.There are some problems in the system authority management,such as complex authorization mode,decentralized authority management,coarse access control power,etc.,so it is urgent to strengthen the safe and effective management of data information.Methods In response to these problems,in combination with the Shiro framework,this paper proposed a server authentication and authorization method in the mobile Internet scenario.Results This method improved the security,simplicity and concentration of permission management,effectively met the permission management needs of enterprise-level application systems in the field of mobile Internet,greatly reduced the overhead of session resources held by the server,and fully guaranteed the security and simplicity of communication.Conclusion This research method is well applied in the fields of government affair system and smart campus.