Design and Implementation of Authentication and Authorization Flow in ESCP System

ESCP is short for Enterprise Social collaboration Platform. The ESCP system, which is also known as enterprise social networking, is a platform which translates the basic elements of the social networking and twitter into tools of productivity. For system security, authentication and authorization management should be on its priorities. It verifies user´s identity effectively and allows authorized users to access protected resources stored in the service provider, and thus plays a role in access control. The basic authentication and the digest authentication are described, specifically this paper emphasizes design and implementation of the Form-based Authentication and the improved OAuth Authentication. Aiming at the problem of the granularity of authorization for the OAuth authentication method, improvement measures are proposed and implemented.