首页 > 科技 > 计算机 > 计算机科学

OAuth 2实战宝典

作译者：糜鹏程

出版时间：2023-12 千字数：288 版次：01-01 页数：240

开本：16开装帧： I S B N ：9787121467561

换版：

纸质书定价：￥75.0

库存:无

分享到：

共有图书评论0条【查看评论摘要】

看了又看

{{data.bookName}}

￥{{data.price}}

内容简介

前言

上架建议

作者简介

编辑推荐

音视频专区

目录
第1章 OAuth2概述......................................................................1
1.1
1.2
OAuth 2 的定义 ·········································································.2 1.1.1 官方定义.................................................................................................................2 1.1.2 开放平台中的定义 .................................................................................................2 OAuth 2 的四种授权模式 ·····························································.3
1.2.1 隐式授权模式.........................................................................................................3
1.2.2 授权码授权模式 .....................................................................................................5
1.2.3 授信客户端密码模式 ...........................................................................................10
1.2.4 授信客户端模式 ...................................................................................................12
第2章 开放平台整体架构.............................................................15
2.1 2.2
2.3
2.4
功能架构 ···············································································.16 API 网关系统··········································································.18
2.2.1 API 整体架构 .......................................................................................................18
2.2.2 API 网关与授权系统的关系................................................................................19
控制台系统 ············································································.20 2.3.1 功能概述...............................................................................................................20 
2.3.2 控制台系统与授权系统的关系 ...........................................................................20 
服务市场 ···············································································.21
第3章 实战中的授权模式.............................................................22
3.1
3.2 3.3
授权码授权模式的应用 ·····························································.23
3.1.1 获取 code ..............................................................................................................23
3.1.2 获取授权信息.......................................................................................................27
3.1.3 刷新授权信息.......................................................................................................30
用户名密码授权码授权模式的应用 ··············································.31 授信客户端密码模式的应用 ·······················································.333.4
3.5
授信客户端模式的应用 ·····························································.34
3.4.1 标准授信客户端模式 ...........................................................................................34
3.4.2 自研应用...............................................................................................................35
3.4.3 自研授信客户端授权 ...........................................................................................35
插件化授权模式的应用 ·····························································.36 3.5.1 普通应用场景.......................................................................................................37 3.5.2 官方应用场景.......................................................................................................42
第4章 OpenID从理论到实战.......................................................48
4.1
4.2
4.3
4.4
4.5
OpenID 概述···········································································.49
4.1.1 OpenID 定义 .........................................................................................................49
4.1.2 OpenID 使用流程 .................................................................................................50
4.1.3 OpenID 与 OAuth 2 ..............................................................................................52
基于自增 ID 的 OpenID 方案·······················································.53
4.2.1 概述.......................................................................................................................53
4.2.2 基于单机模式下自增 ID 的实现方案 .................................................................54
4.2.3 基于雪花算法的 OpenID 生成方案 ....................................................................55
4.2.4 基于自增 ID 的 OpenID 生成方案总结 ..............................................................56
基于 Hash 算法的 OpenID 方案····················································.57
4.3.1 概述.......................................................................................................................57
4.3.2 Hash 算法简介......................................................................................................57
4.3.3 使用 Hash 函数计算 OpenID ...............................................................................58
4.3.4 基于 Hash 算法的 OpenID 方案总结 ..................................................................64
基于对称加密算法的 OpenID 方案 ···············································.64
4.4.1 概述.......................................................................................................................64
4.4.2 对称加密算法简介 ...............................................................................................64
4.4.3 基于对称加密算法的 OpenID 实践 ....................................................................66
4.4.4 基于对称加密算法的 OpenID 方案总结 ............................................................68
基于严格单调函数的 OpenID 方案 ···············································.69
4.5.1 相关概念...............................................................................................................69
4.5.2 基于严格单调函数的 OpenID 实践 ....................................................................70
4.5.3 基于严格单调函数的 OpenID 方案总结 ............................................................744.6
4.7 4.8
基于向量加法的 OpenID 方案 ·····················································.75
4.6.1 UUID 简介............................................................................................................75
4.6.2 基于向量加法的 OpenID 实践 ............................................................................76
4.6.3 矩阵乘法思路扩展 ...............................................................................................79
OpenID 小结···········································································.81 UnionID·················································································.83
4.8.1 UnionID 简介........................................................................................................83
4.8.2 UnionID 划分方案................................................................................................84
4.8.3 基于自增 ID 的 UnionID 方案.............................................................................86
4.8.4 基于 Hash 算法的 UnionID 方案.........................................................................88
4.8.5 基于对称加密算法的 UnionID 方案 ...................................................................90
4.8.6 基于严格单调函数的 UnionID 方案 ...................................................................92
4.8.7 基于向量加法的 UnionID 方案 ...........................................................................93
4.8.8 UnionID 总结........................................................................................................95
第5章 授权码授权模式回调地址实战...........................................97
VIII
5.1 5.2
5.3
5.4
5.5
普通回调地址 ·········································································.98 字符替换回调地址 ···································································.99
5.2.1 场景引入...............................................................................................................99
5.2.2 解决方案.............................................................................................................101
5.2.3 基于字符替换的回调地址方案总结 .................................................................106
自定义函数回调地址 ·······························································.106
5.3.1 FaaS 简介............................................................................................................106
5.3.2 FaaS 实践............................................................................................................108
5.3.3 自定义函数回调地址实践 .................................................................................109
code 生成方案 ········································································.112
5.4.1 基于随机数生成 code 方案................................................................................112
5.4.2 解决随机 code 冲突 ...........................................................................................114
5.4.3 基于 UUID 生成 code ........................................................................................116
code 消费··············································································.117
5.5.1 标准 code 消费策略 ...........................................................................................117
5.5.2 code 消费策略优化 ............................................................................................118第6章 签名................................................................................124
6.1 6.2 6.3 6.4
6.5
签名算法引入 ········································································.125 非对称加密简介 ·····································································.127 进一步探讨签名算法 ·······························································.128 常见的签名算法 ·····································································.129 6.4.1 非对称签名算法.................................................................................................129 6.4.2 开放平台实践中使用的签名算法 .....................................................................130 开放平台签名实例 ··································································.141
第7章 授权信息.........................................................................146
7.1
7.2
7.3
7.4
7.5
access_token 简介····································································.147
7.1.1 短生命周期的可刷新 access_token ...................................................................147
7.1.2 短生命周期的无刷新 access_token ...................................................................148
7.1.3 永不过期的 access_token ...................................................................................149
随机字符实现 ········································································.150
7.2.1 短生命周期的可刷新 access_token ...................................................................150
7.2.2 短生命周期的无刷新 access_token ...................................................................156
7.2.3 永不过期的 access_token ...................................................................................158
7.2.4 基于随机字符的 access_token 方案总结 ..........................................................160
7.2.5 随机字符方案的缺陷及防御 .............................................................................160
JWT 实现··············································································.168
7.3.1 JWT 简介 ............................................................................................................168
7.3.2 JWT 简单实战 ....................................................................................................169
7.3.3 基于 JWT 实现的授权信息 ...............................................................................175
7.3.4 基于 JWT 的 access_token 方案总结 ................................................................179
权限包与 Scope ······································································.180
7.4.1 Scope 概念引入 ..................................................................................................180
7.4.2 开放平台中的 Scope 实现细节 .........................................................................181
SDK ····················································································.183
第8章 基于SpringSecurity的OAuth2实战.............................190 8.1 隐式授权模式 ········································································.1918.1.1 授权系统的相关实现 .........................................................................................191
8.1.2 开放网关的相关实现 .........................................................................................195
8.1.3 相关实现的验证.................................................................................................196
8.2 授权码授权模式 ·····································································.198
8.2.1 授权系统的相关实现 .........................................................................................198
8.2.2 开放网关的相关实现 .........................................................................................201
8.2.3 相关实现的验证.................................................................................................203
8.3 授信客户端密码模式 ·······························································.208
8.3.1 授权系统的相关实现 .........................................................................................209
8.3.2 开放网关的相关实现 .........................................................................................211
8.3.3 相关实现的验证.................................................................................................213
8.4 授信客户端模式 ·····································································.215
8.4.1 授权系统的相关实现 .........................................................................................216
8.4.2 开放网关的相关实现 .........................................................................................218
8.4.3 相关实现的验证.................................................................................................220
8.5 四种授权模式总结 ··································································.221 8.6 JWT····················································································.221
8.6.1 授权系统的相关实现 .........................................................................................222
8.6.2 开放网关的相关实现 .........................................................................................226
8.6.3 相关实现的验证.................................................................................................227

前言
OAuth 从 2006 年诞生以来，经过 1.0 和 2.0 两个版本迭代后，在 2011 年左右 趋于成熟。随后大量的场景开始应用 OAuth 2.0(OAuth 2)来实现自身业务，其 中最为突出的应用场景便是开放平台。
国内最成功的开放平台案例莫过于微信。微信公众号基于开放平台将微信打 造成一个“航空母舰”，通过开放平台将自身能力开放给第三方应用开发者，使他 们在微信的管控下快速开发各种类型的应用，极大地丰富了微信用户的体验。随 后，微信更是推出微信小程序，进一步丰富自身的业务场景。
与此同时，国内各种开发平台也如雨后春笋一般迅速发展。据统计，目前的 开放平台已经达到几十家，如淘宝、京东、抖音、快手及拼多多等开放平台。相 信随着互联网的发展和人工成本的提高，越来越多的企业会选择通过开放平台将 自己的能力对外开放，从而和广大的第三方应用开发者合作共建、互利共赢。
在这种大环境下，开放平台的搭建需求也将越来越多。在开放平台中，有很 多子系统通过相互配合来完成对外开放的需求，而开放授权系统是其中非常重要 的一环。目前，开放授权系统均是基于 OAuth 2 开发的，但是在实际开发中需要 根据自己的实际情况进行一些流程的修改，以适应自身的场景，同时在基于 OAuth 2 实现开放授权系统的过程中有很多细节需要进行设计，一旦某些细节设 计不合理将会对系统造成重大损害。
目前，国内关于开放授权系统搭建的完整资料较少，市面上关于开放授权系 统的材料只有一本《OAuth 2 实战》，这本书很好地阐述了 OAuth 2 如何进行落地， 并对其中的相关细节进行了探讨。但是，随着时间的推移，该书中很多方案已经 被更简单的方案所替代，同时该书中也缺少很多在基于 OAuth 2 实现开放平台时 所需要的细节方案。
为了能提供一套基于 OAuth 2 协议来服务于当代开放授权系统的详细方案， 完善一些在其他资料中没有提到的细节，也为了给开放平台开发的相关工程师提供一套完整的参考资料，编者萌发了撰写本书的想法。
本书特色
本书以开放平台中的实际应用为标准，对相关的理论介绍点到即止，并从实 践经验出发，对开放授权系统中各种场景的实现步骤和方案细节进行详细介绍。 本书更是首次对回调地址和 OpenID 相关内容进行了详细探讨，并给出了可落地的 方案。读者完全可以基于本书的指导来搭建属于自己的并且能应用于实际生产的 开放授权系统。
读者对象
? OAuth 2 研究者和爱好者。
? 开放平台相关的技术人员和运营人员。 ? 第三方应用开发者。
关于本书
本书没有对 OAuth 2 协议进行深入探讨，但是本书讨论的开放授权系统是基 于 OAuth 2 来展开的。读者如果了解 OAuth 2 协议，则可以很容易地跟进本书所 阐述的内容。不过，即使不了解 OAuth 2 协议，也不用担心，本书会在相关的章 节中对每个流程进行介绍，因此读者完全可以依靠本书来学习和了解 OAuth 2。
因为本书中的一些算法示例使用的是 Java 代码，所以需要读者具备一定的 Java 代码基础。而最后一章使用 Spring Security 进行案例演示，因此需要读者有一 定的 Spring 相关的开发经验。
下面对本书所覆盖的内容进行简单介绍。
第 1 章:针对 OAuth 2 所提供的四种授权模式进行了介绍，以便作为后续所 有内容探讨的基础。
第 2 章:针对开放平台整体架构和系统组成进行了简单介绍，为读者提供了一 个开放平台功能的宏观概念，从而能更好地理解后续开放授权系统的功能实现。
第 3 章:基于实战，对 OAuth 2 协议在开放授权系统实战过程中的详细流程和 参数进行了介绍，同时对开放授权系统实战过程中一些基于 OAuth 2 的四种授权 模式的轻变种进行了详细介绍。通过这些轻变种授权模式能更有效地支撑实际业 务场景。
第 4 章:在上述所提到的各种实战场景的授权模式中均默认集成了 OpenID。而 OpenID 本来是一种在 OAuth 2 上构建的账号安全体系，不属于 OAuth 2 的标准。 之所以所有的实战授权模式都默认集成 OpenID，是因为在开放平台的环境下， OpenID 在相关业务中起着重要作用。由于要用到 OpenID，因此本书对 OpenID 的 生成方案进行了详细探讨，提供了多种 OpenID 落地方案，供读者根据自身业务场 景和体量进行选择。
第 5 章:四种授权模式中基于授权码的授权模式是最为通用的，而在该模式 下生成回调地址和 code 是必不可少的一步，因此本章对如何生成回调地址和 code 进行了详细探讨。
第 6 章:针对授权过程中用到的加密和签名算法进行了介绍。无论采用什么 授权模式，都要返回授权信息。同时，在某些模式下，还会支持授权信息刷新。
第 7 章:针对以上内容，本章探讨了常用的不同类型的授权信息，并对比了 它们各自的优势和劣势，以便读者可以根据实际情况在生产中进行选择。
第 8 章:以 Spring Security 为基础实现了 OAuth 2 的四种标准授权模式的简单 代码示例。

查看更多 > 图书评论

暂无评论

发表图书评论

评论标题：
评论内容：
验证码：: 看不清楚
点击刷新
: 您还没有登录，请登录后再评论。
点击“登录”

购买过本书的顾客还买过

{{data.bookName}}

￥{{data.price}}