浙江气象防灾在线平台跨域身份认证模块设计

Design of cross domain identity authentication module for Zhejiang meteorological disaster prevention online platform

作为面向气象业务人员及相关部门、集各类重要气象资料于一体的气象信息分析与气象灾害应急决策平台,浙江气象防灾在线平台是气象部门应对重大活动与突发性、灾害性天气的重要手段,由决策服务专题、台风专题、梅雨专题、强对流专题、高温专题等子应用组成。然而,该平台各子应用分布在不同服务器与不同域名下,无法采用传统的Cookies或Session认证方式,因此需要建立统一的跨域身份认证机制。文章主要介绍了浙江气象防灾在线平台跨域身份认证模块设计,其中平台登录认证仅在主域名进行,各子域名应用免登录,避免了重复登录的烦琐操作,提高了系统的整体安全性能。

As a meteorological information analysis and emergency decision-making platform that integrates various important meteorological data for meteorological personnel and related departments,Zhejiang meteorological disaster prevention online platform is an important means for meteorological departments to respond to major events and sudden and catastrophic weather.It consists of sub applications such as decisionmaking service topics,typhoon topics,plum rain topics,strong convection topics,and high temperature topics.However,the various sub applications of the platform are distributed on different servers and under different domain names,and traditional cookies or session authentication methods cannot be used.Therefore,a unified cross domain identity authentication mechanism needs to be established.The article mainly introduces the design of cross domain identity authentication module for Zhejiang meteorological disaster prevention online platform,in which platform login authentication is only carried out in the main domain name,and each subdomain application is login free,avoiding the tedious operation of repeated login and improving the overall security performance of the system.