Automatic login method and device between multiple websites
Technologies related to automatic account login are disclosed. In an implementation, a request from a user for logging in to an account of a second website associated with an account of the first website is received. The account of the first website is determined logged in to by the user. An automatic login token is generated based on one or more token generation rules agreed to by the second website for performing automatic login, and an automatic login link is generated and sent to the user, where the automatic login link includes the automatic login token, the automatic login link allowing the user to send an automatic login request that includes the automatic login token, and wherein the automatic login token is verified based on the one or more token verification rules to allow the user to automatically log in to the account of the second website.
1. A computer-implemented method, comprising:
receiving, by a server of a second website, a visit request from a client device for logging in to an account of the second web site, wherein the visit request is generated by the client device visiting an automatic login link generated by a server of a first web site, wherein the visit request includes an automatic login token generated by the server of the first website based on one or more token generation rules agreed to by the second website for performing an automatic login on the second website, wherein the one or more token generation rules include a predetermined encryption algorithm and an encryption key that are stored in configuration information of a login domain of the second website, and wherein generating, by the server of the first website, the automatic login token comprises:
obtaining the predetermined encryption algorithm and the encryption key from the configuration information of the login domain of the second website; and
generating the automatic login token based on one or more token generation parameters encrypted by the encryption key using the predetermined encryption algorithm;
querying, by the server of the second web site, a login status of the account of the second website associated with an account of the first website;
determining, by the server of the second web site, that the account of the second web site is in a logged-off state;
in response, validating, by the server of the second website, the automatic login token based on one or more token validation rules agreed to by the first website; and
in response to validating the automatic login token, authorizing, by the server of the second website, the client device to automatically log in to the account of the second website.
2. The computer-implemented method of claim 1 , wherein the automatic login link includes a uniform resource locator (URL) address that includes an URL field of a target page, the URL address directing the client device to the target page after the client device automatically logs in to the second website with the account of the second website.
3. The computer-implemented method of claim 1 , wherein the predetermined encryption algorithm is agreed to by the first website and the second website.
4. The computer-implemented method of claim 1 , wherein the one or more token generation parameters include at least one of the account of the first website, a login domain name of the first website, and a time the automatic login token is generated.
5. The computer-implemented method of claim 1 , wherein the automatic login token is a random character string.
6. The computer-implemented method of claim 1 , wherein the account of the second website is not logged in to the second website by the client device before the automatic login token is verified.
7. A non-transitory, computer-readable medium storing one or more instructions when executed by a computer system to perform operations comprising:
receiving, by a server of a second website, a visit request from a client device for logging in to an account of the second website, wherein the visit request is generated by the client device visiting an automatic login link generated by a server of a first website, wherein the visit request includes an automatic login token generated by the server of the first website based on one or more token generation rules agreed to by the second website for performing an automatic login on the second website, wherein the one or more token generation rules include a predetermined encryption algorithm and an encryption key that are stored in configuration information of a login domain of the second website, and wherein generating, by the server of the first website, the automatic login token comprises:
obtaining the predetermined encryption algorithm and the encryption key from the configuration information of the login domain of the second website; and
generating the automatic login token based on one or more token generation parameters encrypted by the encryption key using the predetermined encryption algorithm;
querying, by the server of the second website, a login status of the account of the second website associated with an account of the first website;
determining, by the server of the second website, that the account of the second website is in a logged-off state;
in response, validating, by the server of the second website, the automatic login token based on one or more token validation rules agreed to by the first website; and
in response to validating the automatic login token, authorizing, by the server of the second website, the client device to automatically log in to the account of the second website.
8. The non-transitory, computer-readable medium of claim 7 , wherein the automatic login link includes a uniform resource locator (URL) address that includes an URL field of a target page, the URL address directing the client device to the target page after the client device automatically logs in to the second website with the account of the second website.
9. The non-transitory, computer-readable medium of claim 7 , wherein the predetermined encryption algorithm is agreed to by the first website and the second web site.
10. The non-transitory, computer-readable medium of claim 7 , wherein the one or more token generation parameters include at least one of the account of the first website, a login domain name of the first website, and a time the automatic login token is generated.
11. The non-transitory, computer-readable medium of claim 7 , wherein the automatic login token is a random character string.
12. The non-transitory, computer-readable medium of claim 7 , wherein the account of the second website is not logged in to the second website by the client device before the automatic login token is verified.
13. A computer-implemented system, comprising:
one or more computers; and
one or more computer memory devices interoperably coupled with the one or more computers and having tangible, non-transitory, machine-readable media storing one or more instructions that, when executed by the one or more computers, perform one or more operations comprising:
receiving, by a server of a second website, a visit request from a client device for logging in to an account of the second website, wherein the visit request is generated by the client device visiting an automatic login link generated by a server of a first website, wherein the visit request includes an automatic login token generated by the server of the first website based on one or more token generation rules agreed to by the second website for performing an automatic login on the second website, wherein the one or more token generation rules include a predetermined encryption algorithm and an encryption key that are stored in configuration information of a login domain of the second website, and wherein generating, by the server of the first website, the automatic login token comprises:
obtaining the predetermined encryption algorithm and the encryption key from the configuration information of the login domain of the second website; and
generating the automatic login token based on one or more token generation parameters encrypted by the encryption key using the predetermined encryption algorithm;
querying, by the server of the second web site, a login status of the account of the second website associated with an account of the first website;
determining, by the server of the second web site, that the account of the second web site is in a logged-off state;
in response, validating, by the server of the second website, the automatic login token based on one or more token validation rules agreed to by the first website; and
in response to validating the automatic login token, authorizing, by the server of the second website, the client device to automatically log in to the account of the second website.
14. The computer-implemented system of claim 13 , wherein the automatic login link includes a uniform resource locator (URL) address that includes an URL field of a target page, the URL address directing the client device to the target page after the client device automatically logs in to the second website with the account of the second website.
15. The computer-implemented system of claim 13 , wherein the predetermined encryption algorithm is agreed to by the first website and the second website.
16. The computer-implemented system of claim 13 , wherein the one or more token generation parameters include at least one of the account of the first website, a login domain name of the first website, and a time the automatic login token is generated.
17. The computer-implemented system of claim 13 , wherein the automatic login token is a random character string.
18. The computer-implemented system of claim 13 , wherein the account of the second website is not logged in to the second website by the client device before the automatic login token is verified.