1. Authentication and Authorization Problems Brought by Heterogeneous Systems Enterprise systems can be divided into the following types: Commercial software you purchase, such as JumpServer Open-source software, such as Kibana and Grafana Software developed in-house, such as an application management platform One thing worth clarifying here: authentication and authorization are two different functions:

The session mechanism for login: HTTP is a stateless protocol, and every request a browser makes is independent of the others. But not every HTTP request is unrelated to state, so the browser and the server have to jointly maintain a state — this is the session mechanism. One approach: the first time the browser sends a request to the server, the server returns a sessionID to the browser, and every subsequent request from the browser carries that sessionID to verify the same user.