php - 请问多服务化结构权限验证怎么做最合理？

Question

系统基本结构如图所示，我的想法是在网关节点做通用的权限验证，比如是否登陆。
这样每个服务就可以只写业务逻辑，通用的登陆功能抽出来。
每个服务的具体权限验证放到各个服务里做判断。
请问这样设计合理吗？

Answer 1

I think what the questioner wants is a member account platform. The business service in your picture is a basic platform. At the application layer, it first calls the account platform interface to make login judgments, and then calls the interface provided by the basic platform to do some permission logic processing. .