https://youzhixueyuan.com/the-principle-implementation-and-technical-scheme-of-single-sign-on.html