Design And Implementation Of Unified Authentication System Based On API Gateway

Recent years,with the rapid development of Internet technology and the increasing number of enterprise software projects,the traditional architecture model of single application can no longer meet the growing software needs.The emergence of microservice architecture solves the problems faced by traditional systems,such as long development cycle and difficult maintenance,but it also introduces some problems,such as difficult to unify authentication.In order to solve the problem of unified authentication and better empower the production management of enterprises,starting from the project situation implemented in the work,and based on the integration of a variety of actual authentication and authentication scenarios,this paper proposes and designs a scheme of unified authentication and authentication system based on API gateway.Based on API gateway,combined with the advantages of microservice architecture and authentication mechanism based on JWT（JSON web token）,this paper realizes the unification of user login authentication,intelligent device authentication and open API authentication.In order to provide the security of the system,this paper uses hash salt technology to encrypt and store the user’s login password,and uses AES algorithm to encrypt and decrypt AK（access key ID）and SK（secret access key）in the process of intelligent device authentication and open API authentication.The encryption and decryption key is generated by hybrid random number algorithm.At the same time,this paper uses the coefficient of variation method to optimize the load balancing strategy based on the minimum number of connections,so as to improve the overall performance of the system.This paper focuses on the infrastructure,business process,function design and detailed implementation process of the unified authentication system based on API gateway,which saves manpower and shortens the iteration cycle for the enterprise,and has certain guidance and reference value for the production practice of the enterprise.