<

Website token What are the mechanism problems?

Token It means "token", which is a string generated by the server, as an identifier for the client to make the request. The purpose of website production is to create a website. Simple information such as text, pictures ( GIF， JPEG，PNG） and tables can be placed on the website page by making markup languages ​​such as hyperfile markup language, extensible hypertext markup language, etc. More complex information such as vector graphics, animation, video, audio and other multimedia files require plug-in programs to run, and they also require labeling language to be ported into the website. Website construction includes strategic research such as early site positioning, content differentiation, and page communication. After these are established, five parts are registered, including domain name, renting space, website style design, and website code production. This process requires website planners, art designers, WEB The programmer completed it together. Website design covers the production and maintenance websites used in many different skills and disciplines. Web design, web graphic design, interface design, creation in different fields, including standardized code and proprietary software, user experience design and search engine optimization. When the user logs in for the first time, the server generates a token And turn this token Return to the client, and the client only needs to bring this in the future token Just come and request data, without bringing the username and password again...

The token represents a token, and the string is generated by the server and used as the identifier for the client request. When the user logs in for the first time, the server generates a token and returns it to the client, which simply takes the token to the requested data without having to introduce the username and password again.

A simple token by uid（ The unique identity of the user), time（ The timestamp of the current time) and sign（ Signature) composed. The first few digits of the token are compressed into hexadecimal strings of a certain length through a hash algorithm). to prevent token leakage). because HTTP is a stateless protocol that doesn't know who accessed our application. Here, the user is considered a client. The client has been authenticated with the username and password. However, the next time the client sends the request, it needs to be verified again. The general solution is that when the user requests login, if there is no problem, a record will be generated on the server. In this record, who is the logged in user and then the record is ID Send to the client. Received this ID After that, the client will take this ID Stored in cookie middle. The next time the user sends a request to the server again, it can bring cookie。 This way, the server will verify cookie information in to see if the corresponding record can be found here. If so, it means that the user has been authenticated and the data requested by the user will be returned to the client. The process described above is used session，ID The value is sessionid。 We need to store user-generated sessions on the server side, which will be stored in memory, disk, or database. Identity authentication based on token mechanism adopts the authentication method of token mechanism, and does not need to store user login records on the server side. General process: The client requests login using the username and password. The server receives a request to verify the username and password. After the verification is successful, the server generates a token and then sends the token to the client. After the client receives the token, it can be stored in cookie or in local storage. Each time the server sends a token, it requires the server to send a request. The server receives the request and then verifies that the client request contains the token. If the verification is successful, it will return the requested data to the client.

Related links:Chengdu website construction，Chengdu website production, Chengdu website design, Chengdu website making, Chengdu website building, Chengdu website company, Chengdu Internet company, /

The above is the website shared by Suyou.com and everyone token What are the mechanism problems? "Thank you very much for your patience to finish this article. We will provide you with more information on reference, use or learning and communication. We can also provide you with: Enterprise website construction, website imitation, website copying, imitation site, foreign trade website construction, foreign trade website construction, company official website productionFor services, our company serves customers with the service concept of "integrity, professionalism, pragmatism and innovation". If you need cooperation, please scan the code to consult, and we will serve you sincerely.

TAG Label:Website construction company