The Design And Implementation Of Enterprise Distributed Authorization System Based On Oauth2.0 Protocol

The development of the Internet has entered a new stage of “Internet Plus”,and data sharing is more important.The trend of service openness and cross has been emerged between different vendors' applications today.And user's authorization information is the only link between different applications.The user needs a secure information interaction and authorization mechanism to protect personal information not leak to the third party.So the core issue of the development platform is the user authentication and authorization,which is the third party application has access to the user's resources in a certain period in the case of user authorization.The system implements the most complete and tight process authorization mode named authorization code in OAuth2.0 protocol.Based on the object-oriented design method and hierarchical design idea,the system architecture design is divided into:gateway layer,view layer,control layer,business layer,data access layer and persistence layer.visual layer,control layer,business layer and data access layer developed by the mainstream SSM framework.That is,Spring MVC develop view layer,control layer,the view layer and control layer to decouple responsibilities,simplify development.Spring framework manage the components in each layer and decouple the dependencies between the components in the system.MyBatis framework manages data access layer,separating business layer from data persistence layer,reducing coupling degree and improving system efficiency.Gateway layer with Nginx load balancing,the design system can be a good level expansion.Persistence layer uses MyCat database middleware to manage multiple MySQL databases.The system includes authorization system and resource system,and introduces Redis cluster to store session.The system realizes the effective management of resources development authority,support system expansion in the horizontal direction,solve the system in the database on the system bottleneck,as authorized platform physical resources in a server,very good to meet the needs of enterprises.