SM3算法在基于OAuth2.0的微服务认证授权中的应用

Application of SM3 Algorithm in Micro Service Authentication and Authorization Based on OAuth2.0

目前,微服务体系架构的应用愈发广泛,很多微服务架构采用OAuth2.0协议实现用户认证授权体系,但该方案存在令牌可能被窃取或恶意篡改等风险。自主可控的国产密码杂凑算法SM3,可应用于基于OAuth2.0的微服务用户认证授权体系中,进一步提高该认证授权体系的安全性。

At present,the application of micro service architecture is more and more extensive.Many micro service architectures use OAuth2.0 protocol to implement user authentication and authorization system,but this scheme has the risk that tokens may be stolen or maliciously tampered with.The independently controllable domestic cryptographic hash algorithm SM3 can be used in the OAuth2.0 based micro service user authentication and authorization system to further improve the security of the authentication and authorization system.