php - What is the most reasonable way to verify permissions in a multi-service structure?

Question

< /p>

The basic structure of the system is shown in the figure. My idea is to do general permission verification on the gateway node, such as whether to log in.
In this way, each service can only write business logic and extract the common login function.
The specific permission verification of each service is placed in each service for judgment.
Is this design reasonable?

Answer 1

I think what the questioner wants is a member account platform. The business service in your picture is a basic platform. At the application layer, it first calls the account platform interface to make login judgments, and then calls the interface provided by the basic platform to do some permission logic processing. .