Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

用户在系统a登录后，然后访问系统b的时候，sso-server如何判断用户之前已经在sso-server登录过 #4

Open
DxfGit opened this issue Jan 20, 2020 · 2 comments
Open

用户在系统a登录后，然后访问系统b的时候，sso-server如何判断用户之前已经在sso-server登录过 #4

DxfGit opened this issue Jan 20, 2020 · 2 comments

Comments

@DxfGit
Copy link

DxfGit commented Jan 20, 2020

No description provided.

@DxfGit
Copy link
Author

DxfGit commented Jan 20, 2020

用户登录a系统后，然后访问b系统，是需要携带什么参数吗？

@OMG1-1
Copy link

OMG1-1 commented Sep 10, 2021

用户登录a系统后，然后访问b系统，是需要携带什么参数吗？

不需要啊，用户登录了a系统，sso认证中心会创建全局会话与授权令牌，同时返回给a系统令牌，a系统拿到令牌需要校验令牌是否有效，将它发送到sso上验证，sso检验有效会将a系统进行注册，并返回令牌有效的标识，a系统会根据标识创建局部会话（令牌与用户进行绑定），之后a系统就会将受保护内容展现给用户；
同时b系统发现用户没有登录过会去sso验证用户登录情况，sso验证已登录并将令牌给到b系统，b系统也会进行令牌校验，sso检验令牌有效就会将b系统的地址也注册进全局会话的集合中，b系统就会和a系统一样创建局部会话，并可以返回给用户受保护的资源

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@DxfGit @OMG1-1