现代信息科技2024，Vol.8Issue(11)：26-30,39,6.DOI:10.19850/j.cnki.2096-4706.2024.11.006
微服务架构下API网关属性授权策略研究
Research on API Gateway Attribute Authorization Strategy under Microservice Architecture
摘要
Abstract
With the popularization of microservice architecture,API gateway serves as a key intermediate layer connecting front-end and back-end services,undertaking multiple security responsibilities such as access control and identity verification.To address the issue of fine-grained access control for response data at the gateway layer,an API gateway architecture that supports attribute authorization is designed,and an attribute authorization control strategy based on streaming parsing is proposed.It builds a path matcher based on an abstract syntax tree during the gateway startup phase,and gradually parses request responses during the runtime phase.Experimental results show that this method does not significantly improve CPU load compared to existing methods,and has significant advantages in memory usage and response time.关键词
API网关/数据保护/属性授权/流式解析Key words
API Gateway/data protection/attribute authorization/streaming parsing分类
信息技术与安全科学引用本文复制引用
张礼庆..微服务架构下API网关属性授权策略研究[J].现代信息科技,2024,8(11):26-30,39,6.
