我有一个多个服务器
其中有一个负责业务逻辑,保存所有业务数据,对外只提供私有的api接口。暂命名为API服务器;
第二台服务器,提供给微信公众号或网页端的页面,主要保存静态的html和js以及部分对接API服务器接口的php文件。暂命名为WECHAT服务器。
用户使用时,只能访问WECHAT服务器,发送给WECHAT服务器的请求,经由服务器私有的强加密api接口请求API服务器,这样外部访问权限可以靠微信的openid做判断。
但是现在有个新需求,API服务器上提供了一个新功能,其资源是针对有属性A的用户开放的,属性A与openid的关联信息保存在API服务器上的(mysql和redis都有存),但我需要在WECHAT服务器上就要向用户给出其是否有权限访问这个资源。
目前的几个方法是这样的,求大家帮忙裁断一下哪个好,或者是否有更好的方法。
1、WECHAT服务器直接去访问API服务器上的数据表。这个物理上可以实现,但是感觉不同服务跨服务器访问数据太不合逻辑。
2、在API服务器上新做一个接口API:ifOpenidHasA。这个感觉有点浪费资源,减慢系统速度。
3、在资源A的接口上做校验,请求资源A的时候判断WECHAT服务器的请求是否带参数A。这个目前貌似还好,但是以后万一有个参数ABCD对应不同资源的时候怎么搞?以及如果有超管用户拥有所有权限的话参数又怎么搞就不知道了。
补充:可能有些地方没说太清楚,补充一下:
API接口是走的加密的,目前只有WECHAT服务器发过去的加密流量能访问,是在这做的认证。现在API服务器只能对接WECHAT服务器,外部是看不到的。以后也不打算做开放的API,都是由WECHAT服务器或者以后自己的APP用,都是加密的。现在可以认为WECHAT服务器其实也是个客户端(云客户端或WEB客户端之类的)。
不过这么考虑的话以后真要做APP的话,可能方法1就不能用了。
回复内容:
我有一个多个服务器
其中有一个负责业务逻辑,保存所有业务数据,对外只提供私有的api接口。暂命名为API服务器;
第二台服务器,提供给微信公众号或网页端的页面,主要保存静态的html和js以及部分对接API服务器接口的php文件。暂命名为WECHAT服务器。
用户使用时,只能访问WECHAT服务器,发送给WECHAT服务器的请求,经由服务器私有的强加密api接口请求API服务器,这样外部访问权限可以靠微信的openid做判断。
但是现在有个新需求,API服务器上提供了一个新功能,其资源是针对有属性A的用户开放的,属性A与openid的关联信息保存在API服务器上的(mysql和redis都有存),但我需要在WECHAT服务器上就要向用户给出其是否有权限访问这个资源。
目前的几个方法是这样的,求大家帮忙裁断一下哪个好,或者是否有更好的方法。
1、WECHAT服务器直接去访问API服务器上的数据表。这个物理上可以实现,但是感觉不同服务跨服务器访问数据太不合逻辑。
2、在API服务器上新做一个接口API:ifOpenidHasA。这个感觉有点浪费资源,减慢系统速度。
3、在资源A的接口上做校验,请求资源A的时候判断WECHAT服务器的请求是否带参数A。这个目前貌似还好,但是以后万一有个参数ABCD对应不同资源的时候怎么搞?以及如果有超管用户拥有所有权限的话参数又怎么搞就不知道了。
补充:可能有些地方没说太清楚,补充一下:
API接口是走的加密的,目前只有WECHAT服务器发过去的加密流量能访问,是在这做的认证。现在API服务器只能对接WECHAT服务器,外部是看不到的。以后也不打算做开放的API,都是由WECHAT服务器或者以后自己的APP用,都是加密的。现在可以认为WECHAT服务器其实也是个客户端(云客户端或WEB客户端之类的)。
不过这么考虑的话以后真要做APP的话,可能方法1就不能用了。
我取消以前的回答了。我觉得我和你们的思路不在一个频道上,所以回答的完全驴唇不对马嘴。
我的思路还是通过授权来保证安全,但是你们的思路是通过数据的加密来保证安全,我觉得两者的性能差别是很明显的,结果现在你们发现仅仅依赖加密不能解决所有问题的时候却担心安全认证带来的性能损失...

What’s still popular is the ease of use, flexibility and a strong ecosystem. 1) Ease of use and simple syntax make it the first choice for beginners. 2) Closely integrated with web development, excellent interaction with HTTP requests and database. 3) The huge ecosystem provides a wealth of tools and libraries. 4) Active community and open source nature adapts them to new needs and technology trends.

PHP and Python are both high-level programming languages that are widely used in web development, data processing and automation tasks. 1.PHP is often used to build dynamic websites and content management systems, while Python is often used to build web frameworks and data science. 2.PHP uses echo to output content, Python uses print. 3. Both support object-oriented programming, but the syntax and keywords are different. 4. PHP supports weak type conversion, while Python is more stringent. 5. PHP performance optimization includes using OPcache and asynchronous programming, while Python uses cProfile and asynchronous programming.

PHP is mainly procedural programming, but also supports object-oriented programming (OOP); Python supports a variety of paradigms, including OOP, functional and procedural programming. PHP is suitable for web development, and Python is suitable for a variety of applications such as data analysis and machine learning.

PHP originated in 1994 and was developed by RasmusLerdorf. It was originally used to track website visitors and gradually evolved into a server-side scripting language and was widely used in web development. Python was developed by Guidovan Rossum in the late 1980s and was first released in 1991. It emphasizes code readability and simplicity, and is suitable for scientific computing, data analysis and other fields.

PHP is suitable for web development and rapid prototyping, and Python is suitable for data science and machine learning. 1.PHP is used for dynamic web development, with simple syntax and suitable for rapid development. 2. Python has concise syntax, is suitable for multiple fields, and has a strong library ecosystem.

PHP remains important in the modernization process because it supports a large number of websites and applications and adapts to development needs through frameworks. 1.PHP7 improves performance and introduces new features. 2. Modern frameworks such as Laravel, Symfony and CodeIgniter simplify development and improve code quality. 3. Performance optimization and best practices further improve application efficiency.

PHPhassignificantlyimpactedwebdevelopmentandextendsbeyondit.1)ItpowersmajorplatformslikeWordPressandexcelsindatabaseinteractions.2)PHP'sadaptabilityallowsittoscaleforlargeapplicationsusingframeworkslikeLaravel.3)Beyondweb,PHPisusedincommand-linescrip

PHP type prompts to improve code quality and readability. 1) Scalar type tips: Since PHP7.0, basic data types are allowed to be specified in function parameters, such as int, float, etc. 2) Return type prompt: Ensure the consistency of the function return value type. 3) Union type prompt: Since PHP8.0, multiple types are allowed to be specified in function parameters or return values. 4) Nullable type prompt: Allows to include null values and handle functions that may return null values.


Hot AI Tools

Undresser.AI Undress
AI-powered app for creating realistic nude photos

AI Clothes Remover
Online AI tool for removing clothes from photos.

Undress AI Tool
Undress images for free

Clothoff.io
AI clothes remover

Video Face Swap
Swap faces in any video effortlessly with our completely free AI face swap tool!

Hot Article

Hot Tools

SAP NetWeaver Server Adapter for Eclipse
Integrate Eclipse with SAP NetWeaver application server.

ZendStudio 13.5.1 Mac
Powerful PHP integrated development environment

WebStorm Mac version
Useful JavaScript development tools

mPDF
mPDF is a PHP library that can generate PDF files from UTF-8 encoded HTML. The original author, Ian Back, wrote mPDF to output PDF files "on the fly" from his website and handle different languages. It is slower than original scripts like HTML2FPDF and produces larger files when using Unicode fonts, but supports CSS styles etc. and has a lot of enhancements. Supports almost all languages, including RTL (Arabic and Hebrew) and CJK (Chinese, Japanese and Korean). Supports nested block-level elements (such as P, DIV),

MinGW - Minimalist GNU for Windows
This project is in the process of being migrated to osdn.net/projects/mingw, you can continue to follow us there. MinGW: A native Windows port of the GNU Compiler Collection (GCC), freely distributable import libraries and header files for building native Windows applications; includes extensions to the MSVC runtime to support C99 functionality. All MinGW software can run on 64-bit Windows platforms.