Authorization method and apparatus

An authorization method, wherein the authorization method comprises:

• sending, by a first network device, a first registration request to a third network device, wherein the first registration request comprises first information;
• sending, by a second network device, a second registration request to the third network device, wherein the second registration request comprises second information;
• receiving, by the third network device, the first registration request and the second registration request;
• sending, by the first network device, a token request to the third network device;
• receiving, by the third network device, the token request, and send a token response comprising a token to the first network device;
• receiving, by the first network device, the token response comprising the token;
• sending, by the first network device, a service request to the second network device, wherein the service request comprises the token, the token is used to check whether the first network device has permission to access the second network device, the token comprises at least one of first information or second information, the first information is used to identify the first network device, and the second information is used to identify a network device allowed to access the second network device;
• receiving, by the second network device, the service request;
• determining, by the second network device, whether the first network device has the permission to access the second network device,
• when the first network device has the permission to access the second network device, sending, by the second network device, a service response to the first network device;
• and
• receiving, by the first network device, the service response.

A non-transitory computer readable storage medium, wherein the non-transitory computer readable storage medium store program instructions for execution by at least one processor to:

• send, by a first network device, a first registration request to a third network device, wherein the first registration request comprises first information;
• send, by a second network device, a second registration request to the third network device, wherein the second registration request comprises second information;
• receive, by the third network device, the first registration request and the second registration request;
• send, by the first network device, a token request to the third network device;
• receive, by the third network device, the token request, and send a token response comprising a token to the first network device;
• receive, by the first network device, the token response comprising the token;
• send, by the first network device, a service request to the second network device, wherein the service request comprises the token, the token is used to check whether the first network device has permission to access the second network device, the token comprises at least one of first information or second information, the first information is used to identify the first network device, and the second information is used to identify a network device allowed to access the second network device;
• receive, by the second network device, the service request;
• determine, by the second network device, whether the first network device has the permission to access the second network device,
• when the first network device has the permission to access the second network device, send, by the second network device, a service response to the first network device;
• and
• receiving, by the first network device, the service response.