Research on Unified Authentication and Authorization in Microservice Architecture

Microservice architecture reduces the coupling between application modules, which is conducive to the development, deployment and operation and maintenance of complex application systems. However, compared with the monolithic architecture, the access control of its resources becomes more complex. Based on the application scenario of enterprise system micro service architecture, aiming at the high security requirements of business system, through the analysis and research of micro service architecture, this paper designs a set of access control solution, which can meet the requirements of unified authentication, improving the efficiency of authority verification and accelerating the system development speed under the microservice architecture, which has reference for enterprise application system design significance.

I. Introduction

Monolithic Architecture applications generally treat all application functions and data as a whole. Applications are the smallest deployment unit, and all business logic processing requests can run independent processes [1]. With the rapid development of the Internet industry, the traditional single application architecture cannot meet the demand changes, and the problem of fast function iterations is becoming more and more prominent. In this case, the microservice architecture has the flexibility, scalability, flexibility, and stability of the architecture [2]. The microservice architecture reduces the coupling between application modules and is beneficial to the development and maintenance of complex application systems. However compared with single application, access control in a microservice application becomes more complex. In the microservice architecture, every microservice needs to write authentication module, which is not only troublesome, but also inconvenient for unified management and expansion. Therefore, it is necessary to implement unified authentication. The main problems of unified authentication in microservice architecture are: (1) how to realize the centralized management of users, roles and permissions; (2) how to realize unified login and facilitate the expansion of microservices; (3) how to improve the efficiency of authentication and authorization.