{"id":34306,"date":"2023-11-09T14:11:32","date_gmt":"2023-07-22T11:48:35","guid":{"rendered":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%b0%86nginx%e4%bd%9c%e4%b8%baopenid-connect%e7%9a%84relying-party%e6%9d%a5%e5%ae%9e%e7%8e%b0%e3%80%82\/"},"modified":"2024-05-04T08:14:29","modified_gmt":"2024-05-04T00:14:29","slug":"%e5%b0%86nginx%e4%bd%9c%e4%b8%baopenid-connect%e7%9a%84relying-party%e6%9d%a5%e5%ae%9e%e7%8e%b0%e3%80%82","status":"publish","type":"post","link":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%b0%86nginx%e4%bd%9c%e4%b8%baopenid-connect%e7%9a%84relying-party%e6%9d%a5%e5%ae%9e%e7%8e%b0%e3%80%82\/","title":{"rendered":"\u5c06Nginx\u4f5c\u4e3aOpenID Connect\u7684Relying Party\u6765\u5b9e\u73b0"},"content":{"rendered":"

\u9019\u7bc7\u6587\u7ae0\u662f\u9a57\u8b49\u8a8d\u53ef\u8056\u8a95\u65e5\u66c6\u7684\u7b2c24\u5929\u7684\u6587\u7ae0\u3002<\/p>\n

\u9996\u5148<\/h1>\n

\u672c\u6587\u4ecb\u7ecd\u4e86\u5c06Nginx\u4f5c\u4e3aOpenID Connect\u7684\u4f9d\u8d56\u65b9\u5b9e\u73b0\u7684\u65b9\u6cd5\u3002
\n\u901a\u8fc7\u5c06Nginx\u4f5c\u4e3aOpenID Connect\u7684\u4f9d\u8d56\u65b9\u5b9e\u73b0\uff0c\u53ef\u4ee5\u671f\u5f85\u5f15\u5165\u57fa\u4e8eOpenID Connect\u7684\u8ba4\u8bc1\uff0c\u800c\u4e0d\u4f9d\u8d56\u4e8e\u73b0\u6709\u5b9e\u65bd\u65b9\u6cd5\u3002<\/p>\n

\u672c\u6b21\u5b9e\u73b0\u65f6\uff0c\u5c06\u4f7f\u7528lua-resty-openidc\u4f5c\u4e3aNginx\u7684OpenIDConnect\u7684Relying Party\u3002
\n\u5728Nginx+\u4e2d\uff0c\u53ef\u4ee5\u4f7f\u7528nginx-openid-connect\u3002\u53ef\u80fd\u503c\u5f97\u5148\u5c1d\u8bd5\u8fd9\u4e2a\u3002<\/p>\n

\u672c\u6587\u63d0\u4f9b\u4e86\u793a\u4f8b\u5b9e\u73b0\u3002\u6700\u540e\u8fd8\u9644\u6709\u9a8c\u8bc1\u65b9\u6cd5\u7684\u8bf4\u660e\uff0c\u8bf7\u4e00\u5e76\u786e\u8ba4\uff0c\u8c22\u8c22\u3002
\nhttps:\/\/github.com\/kg0r0\/lua-resty-openidc-example<\/p>\n

\"lua_resty_openidc_diagram.png\"<\/div>\n

\u5173\u4e8eNginx\u6a21\u5757<\/h1>\n

\u8fd9\u6b21\u6211\u4eec\u5c06\u4f7f\u7528OpenResty\u5f00\u53d1\u5728Nginx\u4e0a\u8fd0\u884c\u7684\u6a21\u5757\u3002
\n\u901a\u8fc7\u4f7f\u7528OpenResty\uff0c\u60a8\u53ef\u4ee5\u5728Nginx\u4e2d\u4f7f\u7528LuaJIT\u548c\u65b9\u4fbf\u7684\u5e93\u3002
\n\u6b64\u5916\uff0cLua\u8fd8\u6709\u4e00\u4e2a\u540d\u4e3aLuarocks\u7684\u5305\u7ba1\u7406\u7cfb\u7edf\uff0c\u6211\u4eec\u4e5f\u5c06\u4e00\u5e76\u4f7f\u7528\u3002
\n\u5173\u4e8eOpenResty\u548cLuarocks\u7684\u8be6\u7ec6\u4f7f\u7528\u65b9\u6cd5\uff0c\u8bf7\u67e5\u9605\u5b83\u4eec\u5728OpenResty\u5b98\u65b9\u7f51\u7ad9\u4e0a\u7684\u8bf4\u660e\u3002<\/p>\n

    \n
  • \n
      OpenResty\u306e\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb: https:\/\/openresty.org\/en\/installation.html<\/ul>\n<\/li>\n<\/ul>\n

      Luarocks\u306e\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb: https:\/\/openresty.org\/en\/using-luarocks.html<\/p>\n

      \"image.png\"<\/div>\n

      \u5f15\u5165OpenID Connect\u8eab\u4efd\u9a8c\u8bc1<\/h1>\n

      \u9996\u5148\uff0c\u6211\u4eec\u5c06\u4f7f\u7528 lua-resty-openidc \u5728 Nginx \u4e2d\u5f15\u5165\u57fa\u4e8e OpenID Connect \u7684\u8eab\u4efd\u9a8c\u8bc1\u3002\u8981\u505a\u5230\u8fd9\u4e00\u70b9\uff0c\u9996\u5148\u9700\u8981\u901a\u8fc7 Luarocks \u5b89\u88c5 lua-resty-openidc\u3002<\/p>\n

      \r\n$ <\/span>\/usr\/local\/openresty\/luajit\/bin\/luarocks install <\/span>lua-resty-openidc\r\n<\/code><\/pre>\n
      \u901a\u8fc7\u8c03\u7528lua-resty-openidc\u7684authenticate()\u65b9\u6cd5\u6765\u8fdb\u884c\u4e00\u7cfb\u5217\u7684\u8ba4\u8bc1\u5904\u7406\u3002
      \n\u56e0\u6b64\uff0c\u9996\u5148\u9700\u8981\u51c6\u5907lua-resty-openidc\u548cauthenticate()\u6240\u9700\u7684\u53c2\u6570\u3002
      \n\u5177\u4f53\u800c\u8a00\uff0c\u9700\u8981\u4e8b\u5148\u5728OpenID\u63d0\u4f9b\u8005(OP)\u4e2d\u6ce8\u518c\u6216\u83b7\u53d6Redirect URI\u3001OpenID Provider Configuration Request\u7684URL\u3001Client ID\u3001Client Secret\u7b49\u503c\u3002
      \n\u51c6\u5907\u597d\u7684\u503c\u5c06\u5982\u4e0b\u6240\u793a\u4f20\u9012\u7ed9authenticate()\u65b9\u6cd5\u4ee5\u4f9b\u4f7f\u7528\u3002<\/p>\n
      local<\/span> opts<\/span> =<\/span> {<\/span>\r\n    ssl_verify<\/span> =<\/span> \"no\"<\/span>,<\/span>\r\n    redirect_uri<\/span> =<\/span> \"https:\/\/<hostname>\/secure\/redirect_uri\"<\/span>,<\/span>\r\n    discovery<\/span> =<\/span> \"<issuer>\/.well-known\/openid-configuration\"<\/span>,<\/span>\r\n    client_id<\/span> =<\/span> \"<client_id>\"<\/span>,<\/span>\r\n    client_secret<\/span> =<\/span> \"<client_secret>\"<\/span>\r\n}<\/span>\r\n\r\nlocal<\/span> res<\/span>,<\/span> err<\/span> =<\/span> require<\/span>(<\/span>\"resty.openidc\"<\/span>).<\/span>authenticate<\/span>(<\/span>opts<\/span>)<\/span>\r\nif<\/span> err<\/span> then<\/span>\r\n    ngx<\/span>.<\/span>log<\/span>(<\/span>ngx<\/span>.<\/span>ERR<\/span>,<\/span> err<\/span>)<\/span>\r\n    ngx<\/span>.<\/span>exit<\/span>(<\/span>ngx<\/span>.<\/span>HTTP_INTERNAL_SERVER_ERROR<\/span>)<\/span>\r\nend<\/span>\r\nngx<\/span>.<\/span>req<\/span>.<\/span>set_header<\/span>(<\/span>\"X-USER\"<\/span>,<\/span> res<\/span>.<\/span>id_token<\/span>.<\/span>sub<\/span>)<\/span>\r\n\r\nngx<\/span>.<\/span>var<\/span>.<\/span>pass<\/span>=<\/span>\"http:\/\/webapp:3000\/\r\n\r\n<\/span><\/code><\/pre>\n
      \u305d\u306e\u4ed6\u8a2d\u5b9a\u5024\u306b\u3064\u3044\u3066\u306e\u8a73\u7d30\u3084Google Signin\u3067\u5229\u7528\u3059\u308b\u8a2d\u5b9a\u306e\u30b5\u30f3\u30d7\u30eb\u306a\u3069\u306flua-resty-openidc\u306eREADME\u3084Wiki\u306b\u8a18\u8f09\u3055\u308c\u3066\u3044\u308b\u306e\u3067\u5408\u308f\u305b\u3066\u53c2\u7167\u3057\u3066\u304f\u3060\u3055\u3044\u3002
      \nauthenticate()\u3092\u547c\u3073\u51fa\u3057\u3001\u30a8\u30e9\u30fc\u304c\u306a\u304b\u3063\u305f\u5834\u5408\u3001\u623b\u308a\u5024\u3068\u3057\u3066\u4e0b\u8a18\u306e\u901a\u308a\u3001ID Token\u3001Access Token\u3084\u30e6\u30fc\u30b6\u30fc\u306b\u95a2\u3059\u308b\u60c5\u5831\u304c\u8fd4\u3063\u3066\u304d\u307e\u3059\u3002<\/p>\n
      — at this point res is a Lua table with 3 keys:
      \n— id_token : a Lua table with the claims from the id_token (required)
      \n— access_token: the access token (optional)
      \n— user : a Lua table with the claims returned from the user info endpoint (optional)
      \n(\u5f15\u7528\u5143: https:\/\/github.com\/zmartzone\/lua-resty-openidc\/blob\/master\/README.md#sample-configuration-for-google-signin)<\/p><\/blockquote>\n
      \u6b21\u306b\u3001\u4e0a\u8a18\u306e\u8a8d\u8a3c\u51e6\u7406\u3092\u884c\u3046\u30b9\u30af\u30ea\u30d7\u30c8\u3092\u547c\u3073\u51fa\u3059\u8a2d\u5b9a\u3092nginx.conf\u306b\u8a18\u8ff0\u3057\u307e\u3059\u3002
      \n\u30b9\u30af\u30ea\u30d7\u30c8\u306e\u914d\u7f6e\u306b\u3064\u3044\u3066\u3001OpenResty\u3092\u5229\u7528\u3059\u308b\u5834\u5408\u3001OpenResty\u306b\u542b\u307e\u308c\u308b\u30d1\u30c3\u30b1\u30fc\u30b8\u306f\u30c7\u30d5\u30a9\u30eb\u30c8\u3067\/usr\/local\/openresty\/\u4ee5\u4e0b\u306b\u5c55\u958b\u3055\u308c\u308b\u305f\u3081\u3001\u4eca\u56de\u306f\u8a8d\u8a3c\u51e6\u7406\u3092\u8a18\u8ff0\u3057\u305fLua\u30b9\u30af\u30ea\u30d7\u30c8\u3082\/usr\/local\/openresty\/\u4ee5\u4e0b\u306b\u914d\u7f6e\u3057\u307e\u3059\u3002
      \n\u30b9\u30af\u30ea\u30d7\u30c8\u306e\u914d\u7f6e\u5834\u6240\u304c\u6c7a\u307e\u3063\u305f\u3089\u3001\u524d\u8ff0\u3057\u305f\u3068\u304a\u308anginx.conf\u306eaccess_by_lua_file\u30c7\u30a3\u30ec\u30af\u30c6\u30a3\u30d6\u3067\u30b9\u30af\u30ea\u30d7\u30c8\u306e\u30d1\u30b9\u3092\u6307\u5b9a\u3057\u307e\u3059\u3002
      \n\u3053\u3053\u307e\u3067\u306elua-resty-openidc\u3092\u5229\u7528\u3059\u308b\u8a2d\u5b9a\u3092\u8a18\u8ff0\u3057\u305f\u5834\u5408\u3001nginx.conf\u306f\u4e0b\u8a18\u306e\u3088\u3046\u306b\u306a\u308a\u307e\u3059\u3002<\/p>\n
      #user  nobody;<\/span>\r\nworker_processes<\/span>  1<\/span>;<\/span>\r\n\r\n#error_log  logs\/error.log;<\/span>\r\n#error_log  logs\/error.log  notice;<\/span>\r\nerror_log<\/span>  logs\/error<\/span>.log<\/span>  info<\/span>;<\/span>\r\n\r\n#pid        logs\/nginx.pid;<\/span>\r\n\r\n\r\nevents<\/span> {<\/span>\r\n    worker_connections<\/span>  1024<\/span>;<\/span>\r\n}<\/span>\r\n\r\n\r\nhttp<\/span> {<\/span>\r\n    include<\/span>       mime.types<\/span>;<\/span>\r\n    default_type<\/span>  application\/octet-stream<\/span>;<\/span>\r\n\r\n    #log_format  main  '$remote_addr - $remote_user [$time_local] \"$request\" '<\/span>\r\n    #                  '$status $body_bytes_sent \"$http_referer\" '<\/span>\r\n    #                  '\"$http_user_agent\" \"$http_x_forwarded_for\"';<\/span>\r\n\r\n    #access_log  logs\/access.log  main;<\/span>\r\n\r\n    sendfile<\/span>        on<\/span>;<\/span>\r\n    #tcp_nopush     on;<\/span>\r\n\r\n    #keepalive_timeout  0;<\/span>\r\n    keepalive_timeout<\/span>  65<\/span>;<\/span>\r\n\r\n        server<\/span> {<\/span>\r\n        listen<\/span>       80<\/span>;<\/span>\r\n        server_name<\/span>  localhost<\/span>;<\/span>\r\n        resolver<\/span> local=on<\/span> ipv6=off<\/span>;<\/span>\r\n\r\n        location<\/span> \/<\/span> {<\/span>\r\n                set<\/span> $pass<\/span> ''<\/span>;<\/span>\r\n                default_type<\/span> 'text\/html'<\/span>;<\/span>\r\n                access_by_lua_file<\/span> \/usr\/local\/openresty\/main.lua<\/span>;<\/span>\r\n                proxy_pass<\/span> $pass<\/span>;<\/span>\r\n        }<\/span>\r\n\r\n    }<\/span>\r\n\r\n    #gzip  on;<\/span>\r\n\r\n    include<\/span> \/etc\/nginx\/conf.d\/*.conf<\/span>;<\/span>\r\n}<\/span>\r\n<\/code><\/pre>\n
      \u4ee5\u4e0a\u3067lua-resty-openidc\u306e\u5c0e\u5165\u306f\u7d42\u4e86\u3067\u3059\u3002\u554f\u984c\u306a\u304f\u8a2d\u5b9a\u304c\u3067\u304d\u3066\u3044\u308c\u3070\u3001\u3053\u3053\u307e\u3067\u3067\u52d5\u4f5c\u78ba\u8a8d\u3092\u884c\u3046\u3053\u3068\u304c\u3067\u304d\u308b\u306f\u305a\u3067\u3059\u3002<\/p>\n
      \u4f7f\u7528Redis\u5b9e\u73b0\u4f1a\u8bdd\u7ba1\u7406\u7684\u5f15\u5165\u3002<\/h1>\n
      \u5728\u8003\u8651\u5b9e\u9645\u5e94\u7528\u65f6\uff0c\u9700\u8981\u5c06\u4f1a\u8bdd\u4fe1\u606f\u5b58\u50a8\u5728Redis\u7b49\u5730\u65b9\u800c\u4e0d\u662fNginx\u7684\u5185\u5b58\u4e2d\u3002\u6839\u636elua-resty-openidc\uff0c\u5b83\u5185\u90e8\u4f7f\u7528lua-resty-session\uff0c\u5e76\u4e14\u53ef\u4ee5\u6307\u5b9a\u4f1a\u8bdd\u4fe1\u606f\u7684\u5b58\u50a8\u4f4d\u7f6e\u3002<\/p>\n
      \u901a\u8fc7\u5229\u7528 lua-resty-session\uff0c\u5b83\u4e3a\u7ecf\u8fc7\u8eab\u4efd\u9a8c\u8bc1\u7684\u7528\u6237\u4fdd\u6301\u4f1a\u8bdd\uff0c\u4ece\u800c\u5728\u5ba2\u6237\u7aef\u6d4f\u89c8\u5668 cookie \u4e2d\u5b58\u50a8\u4f1a\u8bdd\u72b6\u6001\u6216\u4f7f\u7528\u670d\u52a1\u5668\u7aef\u5b58\u50a8\u673a\u5236\u4e4b\u4e00\uff08\u5171\u4eab\u5185\u5b58|\u5185\u5b58\u7f13\u5b58|Redis\uff09\u4e4b\u95f4\u63d0\u4f9b\u53ef\u914d\u7f6e\u7684\u9009\u62e9\u3002<\/p><\/blockquote>\n
      \u3057\u304b\u3057\u3001\u672c\u8a18\u4e8b\u306e\u57f7\u7b46\u6642\u70b9(2019\/12\/21)\u3067\u306flua-resty-openidc\u306b\u306f\u8a2d\u5b9a\u65b9\u6cd5\u304c\u8a18\u8f09\u3055\u308c\u3066\u3044\u306a\u304b\u3063\u305f\u305f\u3081\u3001lua-resty-session\u306e\u30c9\u30ad\u30e5\u30e1\u30f3\u30c8\u3092\u53c2\u7167\u3057\u3066\u8a2d\u5b9a\u3092\u884c\u3044\u307e\u3059\u3002
      \nlua-resty-session\u306eREADME\u306ePluggable Storage Adapters\u306e\u7ae0\u306b\u8a2d\u5b9a\u65b9\u6cd5\u306f\u8a18\u8f09\u3055\u308c\u3066\u3044\u307e\u3059\u3002
      \n\u30bb\u30c3\u30b7\u30e7\u30f3\u60c5\u5831\u306e\u4fdd\u7ba1\u5148\u306f\u3001nginx.conf\u3067\u4e0b\u8a18\u306e\u3088\u3046\u306b\u8a18\u8ff0\u3059\u308b\u3053\u3068\u3067\u6307\u5b9a\u3067\u304d\u308b\u3088\u3046\u3067\u3059\u3002<\/p>\n
      set<\/span> $session_storage<\/span> redis<\/span>;<\/span>\r\n<\/code><\/pre>\n
      \u4e0b\u9762\u6307\u5b9a\u4e86\u9664\u4e86Redis\u4e4b\u5916\uff0c\u8fd8\u53ef\u4ee5\u7528\u4f5c\u4f1a\u8bdd\u4fe1\u606f\u5b58\u50a8\u7684\u5730\u65b9\u3002<\/p>\n
        \n
      • \n
          cookie aka Client Side Cookie (this is the default adapter)<\/ul>\n<\/li>\n<\/ul>\n
           <\/p>\n
            \n
          • \n
              shm aka Lua Shared Dictionary<\/ul>\n<\/li>\n<\/ul>\n
               <\/p>\n
                \n
              • \n
                  memcache aka Memcached Storage Backend<\/ul>\n<\/li>\n<\/ul>\n
                   <\/p>\n
                    redis aka Redis Backend<\/ul>\n
                    \u672c\u6b21\u6211\u4eec\u5c06\u6307\u5b9aRedis\u4f5c\u4e3a\u4f1a\u8bdd\u4fe1\u606f\u7684\u5b58\u50a8\u4f4d\u7f6e\uff0c\u56e0\u6b64\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u53c2\u6570\u6765\u6307\u5b9a\u8fde\u63a5\u76ee\u6807\u7b49\u4fe1\u606f\u3002
                    \n\u5f53\u6307\u5b9a\u975eRedis\u5b58\u50a8\u4f4d\u7f6e\u65f6\uff0c\u8bf7\u9002\u5f53\u8fdb\u884c\u4fee\u6539\u3002<\/p>\n
                    \r\nset<\/span> $session_redis_prefix<\/span>        sessions<\/span>;<\/span>\r\nset<\/span> $session_redis_socket<\/span>        unix:\/\/\/var\/run\/redis\/redis.sock<\/span>;<\/span>\r\nset<\/span> $session_redis_host<\/span>          127<\/span>.0.0.1<\/span>;<\/span>\r\nset<\/span> $session_redis_port<\/span>          6379<\/span>;<\/span>\r\nset<\/span> $session_redis_auth<\/span>          password<\/span>;<\/span>\r\nset<\/span> $session_redis_uselocking<\/span>    on<\/span>;<\/span>\r\nset<\/span> $session_redis_spinlockwait<\/span>  10000<\/span>;<\/span>\r\nset<\/span> $session_redis_maxlockwait<\/span>   30<\/span>;<\/span>\r\nset<\/span> $session_redis_pool_timeout<\/span>  45<\/span>;<\/span>\r\nset<\/span> $session_redis_pool_size<\/span>     10<\/span>;<\/span>\r\n\r\n<\/code><\/pre>\n
                    \u4ee5\u4e0b\u662f\u6307\u5b9a\u9023\u63a5\u76ee\u6a19\u7684nginx.conf\u7bc4\u4f8b\u3002<\/p>\n
                    #user  nobody;<\/span>\r\nworker_processes<\/span>  1<\/span>;<\/span>\r\n\r\n#error_log  logs\/error.log;<\/span>\r\n#error_log  logs\/error.log  notice;<\/span>\r\nerror_log<\/span>  logs\/error<\/span>.log<\/span>  info<\/span>;<\/span>\r\n\r\n#pid        logs\/nginx.pid;<\/span>\r\n\r\n\r\nevents<\/span> {<\/span>\r\n    worker_connections<\/span>  1024<\/span>;<\/span>\r\n}<\/span>\r\n\r\n\r\nhttp<\/span> {<\/span>\r\n    include<\/span>       mime.types<\/span>;<\/span>\r\n    default_type<\/span>  application\/octet-stream<\/span>;<\/span>\r\n\r\n    #log_format  main  '$remote_addr - $remote_user [$time_local] \"$request\" '<\/span>\r\n    #                  '$status $body_bytes_sent \"$http_referer\" '<\/span>\r\n    #                  '\"$http_user_agent\" \"$http_x_forwarded_for\"';<\/span>\r\n\r\n    #access_log  logs\/access.log  main;<\/span>\r\n\r\n    sendfile<\/span>        on<\/span>;<\/span>\r\n    #tcp_nopush     on;<\/span>\r\n\r\n    #keepalive_timeout  0;<\/span>\r\n    keepalive_timeout<\/span>  65<\/span>;<\/span>\r\n\r\n        server<\/span> {<\/span>\r\n        listen<\/span>       80<\/span>;<\/span>\r\n        server_name<\/span>  localhost<\/span>;<\/span>\r\n        resolver<\/span> local=on<\/span> ipv6=off<\/span>;<\/span>\r\n\r\n        location<\/span> \/<\/span> {<\/span>\r\n                set<\/span> $pass<\/span> ''<\/span>;<\/span>\r\n                set<\/span> $session_storage<\/span> redis<\/span>;<\/span>\r\n                set<\/span> $session_redis_prefix<\/span>        sessions<\/span>;<\/span>\r\n                set<\/span> $session_redis_host<\/span>          redis<\/span>;<\/span>\r\n                set<\/span> $session_redis_port<\/span>          6379<\/span>;<\/span>\r\n                default_type<\/span> 'text\/html'<\/span>;<\/span>\r\n                access_by_lua_file<\/span> \/usr\/local\/openresty\/main.lua<\/span>;<\/span>\r\n                proxy_pass<\/span> $pass<\/span>;<\/span>\r\n        }<\/span>\r\n\r\n    }<\/span>\r\n\r\n    #gzip  on;<\/span>\r\n\r\n    include<\/span> \/etc\/nginx\/conf.d\/*.conf<\/span>;<\/span>\r\n}<\/span>\r\n<\/code><\/pre>\n
                    \u4ee5\u4e0a\u3067\u30bb\u30c3\u30b7\u30e7\u30f3\u7ba1\u7406\u306e\u8a2d\u5b9a\u3082\u7d42\u4e86\u306b\u306a\u308a\u307e\u3059\u3002<\/p>\n
                    \u786e\u8ba4\u52a8\u4f5c<\/h1>\n
                    \u5982\u524d\u6240\u8ff0\uff0c\u6211\u5df2\u7d93\u6e96\u5099\u4e86\u4e00\u500b\u5be6\u73fe\u7bc4\u4f8b\u4f9b\u60a8\u53c3\u8003\uff0c\u73fe\u5728\u6211\u5c07\u4ecb\u7d39\u5176\u64cd\u4f5c\u9a57\u8b49\u65b9\u6cd5\u3002<\/p>\n
                    \u8bf7\u67e5\u770b\u4ee5\u4e0b\u94fe\u63a5\u4ee5\u83b7\u53d6\u793a\u4f8b\u4ee3\u7801\uff1a
                    \nhttps:\/\/github.com\/kg0r0\/lua-resty-openidc-example<\/p>\n
                    \u5728\u786e\u8ba4\u64cd\u4f5c\u65f6\uff0c\u7531\u4e8e\u6d4f\u89c8\u5668\u4e2d\u7684\u4fe1\u606f\u53ef\u80fd\u5bfc\u81f4\u4e0d\u7b26\u5408\u610f\u56fe\u7684\u64cd\u4f5c\u3002
                    \n\u8bf7\u5c3d\u91cf\u4f7f\u7528\u9690\u79c1\u6a21\u5f0f\u6d4f\u89c8\u5668\u8fdb\u884c\u64cd\u4f5c\u786e\u8ba4\u3002
                    \n\u5982\u679c\u9047\u5230\u610f\u56fe\u4e0d\u7b26\u7684\u60c5\u51b5\uff0c\u8bf7\u4f7f\u7528Issue\u63d0\u51fa\u95ee\u9898\uff0c\u8c22\u8c22\u3002<\/p>\n
                    \u5173\u4e8e\u793a\u4f8b\u5b9e\u73b0<\/h2>\n
                    \u672c\u6837\u4f8b\u91c7\u7528\u4e86OpenResty\u5b98\u65b9\u7684Docker\u955c\u50cf\u8fdb\u884c\u5b9e\u73b0\u3002
                    \n\u5728\u6837\u4f8b\u5b9e\u73b0\u4e2d\uff0c\u9009\u62e9\u4e86\u540d\u4e3aalpine-fat\u7684Docker\u955c\u50cf\u7248\u672c\u3002
                    \n\u8fd9\u662f\u56e0\u4e3aalpine-fat\u3001centos\u548cxenial\u8fd9\u4e09\u4e2a\u7248\u672c\u4e2d\u542b\u6709Lua\u7684\u8f6f\u4ef6\u5305\u7ba1\u7406\u5de5\u5177LuaRocks\u3002<\/p>\n
                    LuaRocks\u88ab\u5305\u542b\u5728alpine-fat\u3001centos\u548cxenial\u53d8\u4f53\u4e2d\u3002\u5b83\u5728alpine\u4e2d\u88ab\u6392\u9664\u5728\u5916\uff0c\u56e0\u4e3a\u5b83\u901a\u5e38\u9700\u8981\u4e00\u4e2a\u6784\u5efa\u7cfb\u7edf\uff0c\u800c\u6211\u4eec\u5e0c\u671b\u4fdd\u6301\u8fd9\u4e2a\u53d8\u4f53\u7684\u7cbe\u7b80\u3002<\/p><\/blockquote>\n
                    \u6b64\u5916\uff0c\u5728\u793a\u4f8b\u5b9e\u73b0\u4e2d\uff0c\u6211\u4eec\u5c06\u4f7f\u7528Keycloak\u4f5c\u4e3aOpenID\u63d0\u4f9b\u8005(OP)\u3002
                    \n\u6211\u4eec\u5c06\u4f7f\u7528\u9884\u5148\u6ce8\u518c\u6240\u9700\u7684\u64cd\u4f5c\u786e\u8ba4\u4fe1\u606f\u542f\u52a8Keycloak\u3002<\/p>\n
                    \u64cd\u4f5c\u6b65\u9aa4<\/h2>\n
                    \u9996\u5148\uff0c\u6267\u884c\u4ee5\u4e0b\u547d\u4ee4\u6765\u542f\u52a8\u5404\u4e2a\u7ec4\u4ef6\u3002<\/p>\n
                    \r\n$ <\/span>git clone https:\/\/github.com\/kg0r0\/lua-resty-openidc-example.git\r\n$ <\/span>cd <\/span>lua-resty-openidc-example\r\n$ <\/span>docker-compose build\r\n$ <\/span>docker-compose up -d<\/span>\r\n<\/code><\/pre>\n
                    \u5728\u8fd9\u91cc\uff0c\u7531\u4e8e\u8bbe\u7f6e\u7684\u91cd\u5b9a\u5411URL\uff0c\u5f53\u901a\u8fc7http:\/\/keycloak\u8bbf\u95ee\u65f6\uff0c\u5c06\u901a\u8fc7\u7f16\u8f91\/etc\/hosts\u6587\u4ef6\u5e76\u6dfb\u52a0\u4ee5\u4e0b\u63cf\u8ff0\u6765\u8bbf\u95eehttp:\/\/127.0.0.1\u3002<\/p>\n
                    127.0.0.1   localhost keycloak\r\n<\/code><\/pre>\n
                    \u5b8c\u6210\u4e86\u8fd9\u4e00\u6b65\u9aa4\u540e\uff0c\u6211\u4eec\u5c06\u5b9e\u9645\u8bbf\u95ee\u5e76\u8fdb\u884c\u64cd\u4f5c\u786e\u8ba4\u3002
                    \n\u9996\u5148\uff0c\u8bbf\u95ee http:\/\/localhost\u3002\u7136\u540e\uff0c\u767b\u5f55\u9875\u9762\u5c06\u4f1a\u663e\u793a\u3002
                    \n\u4e00\u65e6\u767b\u5f55\u9875\u9762\u663e\u793a\u51fa\u6765\uff0c\u8bf7\u5728\u201c\u7528\u6237\u540d\u6216\u7535\u5b50\u90ae\u4ef6\u201d\u680f\u4e2d\u8f93\u5165\u201cuser\u201d\uff0c\u5728\u201c\u5bc6\u7801\u201d\u680f\u4e2d\u8f93\u5165\u201cpassword\u201d\uff0c\u7136\u540e\u70b9\u51fb\u201c\u767b\u5f55\u201d\u6309\u94ae\u3002<\/p>\n
                    \"Screen<\/div>\n
                    \"Screen<\/div>\n
                    \u8bf7\u786e\u8ba4\u6700\u540e\u4f1a\u8bdd\u4fe1\u606f\u662f\u5426\u5df2\u7ecf\u5728Redis\u4e2d\u6ce8\u518c\u3002
                    \n\u9996\u5148\uff0c\u786e\u8ba4Redis\u7684\u5bb9\u5668ID\u3002<\/p>\n
                    \r\n$ <\/span>docker ps -a<\/span>\r\nCONTAINER ID        IMAGE                                COMMAND                  CREATED             STATUS              PORTS                    NAMES\r\n521f1756ccfb        redis:alpine                         \"docker-entrypoint.s\u2026\"<\/span>   2 weeks ago         Up 2 weeks          6379\/tcp                 lua-resty-openidc-example_redis_1\r\n<\/code><\/pre>\n
                    \u5982\u679c\u80fd\u591f\u786e\u8ba4 Redis \u7684\u5bb9\u5668 ID \uff0c\u5c31\u53ef\u4ee5\u4f7f\u7528 redis-cli \u6765\u786e\u8ba4\u5df2\u6ce8\u518c\u7684\u952e\u3002<\/p>\n
                    \r\n$ <\/span>docker exec<\/span> -it<\/span> 521f1756ccfb redis-cli\r\n127.0.0.1:6379> keys *<\/span>\r\n1)<\/span> \"sessions:lfgDATCFRlSKF1ML5T7usw..\"<\/span>\r\n<\/code><\/pre>\n
                    Cookie\u4e2d\u7684\u503c\u5df2\u7ecf\u88ab\u6210\u529f\u6ce8\u518c\u3002
                    \nRedis\u4e2d\u7684\u4f1a\u8bdd\u4fe1\u606f\u4e5f\u6b63\u5e38\u8fd0\u884c\u3002<\/p>\n
                    \u6700\u540e\u7684\u7ed3\u679c<\/h1>\n
                    \u672c\u6587\u4ecb\u7ecd\u4e86\u4f7f\u7528lua-resty-openidc\u5c06Nginx\u4f5c\u4e3aOpenID Connect\u7684\u4f9d\u8d56\u65b9\u5b9e\u73b0\u7684\u65b9\u6cd5\u3002\u540c\u65f6\uff0c\u8fd8\u4ecb\u7ecd\u4e86\u5982\u4f55\u4f7f\u7528lua-resty-openidc\u81ea\u5b9a\u4e49\u4f1a\u8bdd\u7ba1\u7406\u7684\u65b9\u6cd5\u3002\u5e0c\u671b\u5bf9\u60a8\u5f15\u5165OpenID Connect\u8eab\u4efd\u9a8c\u8bc1\u65f6\u6709\u6240\u5e2e\u52a9\u3002<\/p>\n
                    \u8fd9\u662f\u4e00\u4e2a\u53c2\u8003\u3002<\/h1>\n
                      \n
                    • \n
                        https:\/\/github.com\/zmartzone\/lua-resty-openidc<\/ul>\n<\/li>\n<\/ul>\n
                         <\/p>\n
                          \n
                        • \n
                            https:\/\/github.com\/openresty\/lua-resty-redis<\/ul>\n<\/li>\n<\/ul>\n
                             <\/p>\n
                              \n
                            • \n
                                https:\/\/github.com\/openresty\/lua-nginx-module<\/ul>\n<\/li>\n<\/ul>\n
                                 <\/p>\n
                                  \n
                                • \n
                                    https:\/\/github.com\/bungle\/lua-resty-session<\/ul>\n<\/li>\n<\/ul>\n
                                     <\/p>\n
                                      https:\/\/openid.net\/specs\/openid-connect-discovery-1_0.html<\/ul>\n","protected":false},"excerpt":{"rendered":"
                                      \u9019\u7bc7\u6587\u7ae0\u662f\u9a57\u8b49\u8a8d\u53ef\u8056\u8a95\u65e5\u66c6\u7684\u7b2c24\u5929\u7684\u6587\u7ae0\u3002 \u9996\u5148 \u672c\u6587\u4ecb\u7ecd\u4e86\u5c06Nginx\u4f5c\u4e3aOpenID Connect\u7684\u4f9d […]<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-34306","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"yoast_head":"\n\u5c06Nginx\u4f5c\u4e3aOpenID Connect\u7684Relying Party\u6765\u5b9e\u73b0 - Blog - Silicon Cloud<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.silicloud.com\/zh\/blog\/\u5c06nginx\u4f5c\u4e3aopenid-connect\u7684relying-party\u6765\u5b9e\u73b0\u3002\/\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u5c06Nginx\u4f5c\u4e3aOpenID Connect\u7684Relying Party\u6765\u5b9e\u73b0\" \/>\n<meta property=\"og:description\" content=\"\u9019\u7bc7\u6587\u7ae0\u662f\u9a57\u8b49\u8a8d\u53ef\u8056\u8a95\u65e5\u66c6\u7684\u7b2c24\u5929\u7684\u6587\u7ae0\u3002 \u9996\u5148 \u672c\u6587\u4ecb\u7ecd\u4e86\u5c06Nginx\u4f5c\u4e3aOpenID Connect\u7684\u4f9d […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.silicloud.com\/zh\/blog\/\u5c06nginx\u4f5c\u4e3aopenid-connect\u7684relying-party\u6765\u5b9e\u73b0\u3002\/\" \/>\n<meta property=\"og:site_name\" content=\"Blog - Silicon Cloud\" \/>\n<meta property=\"article:published_time\" content=\"2023-07-22T11:48:35+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-05-04T00:14:29+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d1c9f37434c4406c1149a\/5-0.png\" \/>\n<meta name=\"author\" content=\"\u79d1, \u96c5\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u79d1, \u96c5\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%b0%86nginx%e4%bd%9c%e4%b8%baopenid-connect%e7%9a%84relying-party%e6%9d%a5%e5%ae%9e%e7%8e%b0%e3%80%82\/\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%b0%86nginx%e4%bd%9c%e4%b8%baopenid-connect%e7%9a%84relying-party%e6%9d%a5%e5%ae%9e%e7%8e%b0%e3%80%82\/\",\"name\":\"\u5c06Nginx\u4f5c\u4e3aOpenID Connect\u7684Relying Party\u6765\u5b9e\u73b0 - Blog - Silicon Cloud\",\"isPartOf\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\"},\"datePublished\":\"2023-07-22T11:48:35+00:00\",\"dateModified\":\"2024-05-04T00:14:29+00:00\",\"author\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/41e222757cdd2a3365361328bd79970a\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%b0%86nginx%e4%bd%9c%e4%b8%baopenid-connect%e7%9a%84relying-party%e6%9d%a5%e5%ae%9e%e7%8e%b0%e3%80%82\/#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%b0%86nginx%e4%bd%9c%e4%b8%baopenid-connect%e7%9a%84relying-party%e6%9d%a5%e5%ae%9e%e7%8e%b0%e3%80%82\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%b0%86nginx%e4%bd%9c%e4%b8%baopenid-connect%e7%9a%84relying-party%e6%9d%a5%e5%ae%9e%e7%8e%b0%e3%80%82\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.silicloud.com\/zh\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u5c06Nginx\u4f5c\u4e3aOpenID Connect\u7684Relying Party\u6765\u5b9e\u73b0\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/\",\"name\":\"Blog - Silicon Cloud\",\"description\":\"\",\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/41e222757cdd2a3365361328bd79970a\",\"name\":\"\u79d1, \u96c5\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/1b2d3e00a7df03689797ebd4af8c5827ba5af936849a71050ec331f4cf902c5d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/1b2d3e00a7df03689797ebd4af8c5827ba5af936849a71050ec331f4cf902c5d?s=96&d=mm&r=g\",\"caption\":\"\u79d1, \u96c5\"},\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/author\/keya\/\"},{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%b0%86nginx%e4%bd%9c%e4%b8%baopenid-connect%e7%9a%84relying-party%e6%9d%a5%e5%ae%9e%e7%8e%b0%e3%80%82\/#local-main-organization-logo\",\"url\":\"\",\"contentUrl\":\"\",\"caption\":\"Blog - Silicon Cloud\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"\u5c06Nginx\u4f5c\u4e3aOpenID Connect\u7684Relying Party\u6765\u5b9e\u73b0 - Blog - Silicon Cloud","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.silicloud.com\/zh\/blog\/\u5c06nginx\u4f5c\u4e3aopenid-connect\u7684relying-party\u6765\u5b9e\u73b0\u3002\/","og_locale":"zh_CN","og_type":"article","og_title":"\u5c06Nginx\u4f5c\u4e3aOpenID Connect\u7684Relying Party\u6765\u5b9e\u73b0","og_description":"\u9019\u7bc7\u6587\u7ae0\u662f\u9a57\u8b49\u8a8d\u53ef\u8056\u8a95\u65e5\u66c6\u7684\u7b2c24\u5929\u7684\u6587\u7ae0\u3002 \u9996\u5148 \u672c\u6587\u4ecb\u7ecd\u4e86\u5c06Nginx\u4f5c\u4e3aOpenID Connect\u7684\u4f9d […]","og_url":"https:\/\/www.silicloud.com\/zh\/blog\/\u5c06nginx\u4f5c\u4e3aopenid-connect\u7684relying-party\u6765\u5b9e\u73b0\u3002\/","og_site_name":"Blog - Silicon Cloud","article_published_time":"2023-07-22T11:48:35+00:00","article_modified_time":"2024-05-04T00:14:29+00:00","og_image":[{"url":"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d1c9f37434c4406c1149a\/5-0.png"}],"author":"\u79d1, \u96c5","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"\u79d1, \u96c5","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"4 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%b0%86nginx%e4%bd%9c%e4%b8%baopenid-connect%e7%9a%84relying-party%e6%9d%a5%e5%ae%9e%e7%8e%b0%e3%80%82\/","url":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%b0%86nginx%e4%bd%9c%e4%b8%baopenid-connect%e7%9a%84relying-party%e6%9d%a5%e5%ae%9e%e7%8e%b0%e3%80%82\/","name":"\u5c06Nginx\u4f5c\u4e3aOpenID Connect\u7684Relying Party\u6765\u5b9e\u73b0 - Blog - Silicon Cloud","isPartOf":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website"},"datePublished":"2023-07-22T11:48:35+00:00","dateModified":"2024-05-04T00:14:29+00:00","author":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/41e222757cdd2a3365361328bd79970a"},"breadcrumb":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%b0%86nginx%e4%bd%9c%e4%b8%baopenid-connect%e7%9a%84relying-party%e6%9d%a5%e5%ae%9e%e7%8e%b0%e3%80%82\/#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.silicloud.com\/zh\/blog\/%e5%b0%86nginx%e4%bd%9c%e4%b8%baopenid-connect%e7%9a%84relying-party%e6%9d%a5%e5%ae%9e%e7%8e%b0%e3%80%82\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%b0%86nginx%e4%bd%9c%e4%b8%baopenid-connect%e7%9a%84relying-party%e6%9d%a5%e5%ae%9e%e7%8e%b0%e3%80%82\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.silicloud.com\/zh\/blog\/"},{"@type":"ListItem","position":2,"name":"\u5c06Nginx\u4f5c\u4e3aOpenID Connect\u7684Relying Party\u6765\u5b9e\u73b0"}]},{"@type":"WebSite","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website","url":"https:\/\/www.silicloud.com\/zh\/blog\/","name":"Blog - Silicon Cloud","description":"","inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/41e222757cdd2a3365361328bd79970a","name":"\u79d1, \u96c5","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/1b2d3e00a7df03689797ebd4af8c5827ba5af936849a71050ec331f4cf902c5d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/1b2d3e00a7df03689797ebd4af8c5827ba5af936849a71050ec331f4cf902c5d?s=96&d=mm&r=g","caption":"\u79d1, \u96c5"},"url":"https:\/\/www.silicloud.com\/zh\/blog\/author\/keya\/"},{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%b0%86nginx%e4%bd%9c%e4%b8%baopenid-connect%e7%9a%84relying-party%e6%9d%a5%e5%ae%9e%e7%8e%b0%e3%80%82\/#local-main-organization-logo","url":"","contentUrl":"","caption":"Blog - Silicon Cloud"}]}},"_links":{"self":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/34306","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/comments?post=34306"}],"version-history":[{"count":2,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/34306\/revisions"}],"predecessor-version":[{"id":97172,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/34306\/revisions\/97172"}],"wp:attachment":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/media?parent=34306"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/categories?post=34306"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/tags?post=34306"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}