A token generation and authentication method, wherein the method comprises: verifying, by a first authentication server, a login request of a user, wherein the login request is sent by a client and distributed by a load balancing server to the first authentication server, and wherein the load balancing server is connected to the client, the first authentication server and a second authentication server; when the first authentication server successfully verifies the login request of the user, establishing, by the first authentication server, a session for the user and generating a token comprising identification information and token addressing information for the user, wherein the identification information is used to identify the session of the user, the token addressing information comprises an address and an authentication service port of the first authentication server, which generates the token; and sending, by the first authentication server, the token via the load balancing server to the client, so that the client is enabled to send the token and the second authentication server is enabled to receive the token from the client via the load balancing server and to forward the token to the first authentication server for performing authentication, according to the token addressing information; wherein the method further comprises: receiving, by the second authentication server, the token that is sent by the client and that is forwarded by the load balancing server; obtaining, by the second authentication server, the token addressing information from the token; and determining, by the second authentication server, that the storage location indicated by the token addressing information is not the second authentication server but the first authentication server instead; forwarding, by the second authentication server, the token to the first authentication server; receiving, by the second authentication server, an authentication result sent by the first authentication server, wherein the authentication result is obtained by the first authentication server by performing authentication on the token. verifying, by a first authentication server, a login request of a user, wherein the login request is sent by a client and distributed by a load balancing server to the first authentication server, and wherein the load balancing server is connected to the client, the first authentication server and a second authentication server; when the first authentication server successfully verifies the login request of the user, establishing, by the first authentication server, a session for the user and generating a token comprising identification information and token addressing information for the user, wherein the identification information is used to identify the session of the user, the token addressing information comprises an address and an authentication service port of the first authentication server, which generates the token; and sending, by the first authentication server, the token via the load balancing server to the client, so that the client is enabled to send the token and the second authentication server is enabled to receive the token from the client via the load balancing server and to forward the token to the first authentication server for performing authentication, according to the token addressing information; wherein the method further comprises: receiving, by the second authentication server, the token that is sent by the client and that is forwarded by the load balancing server; obtaining, by the second authentication server, the token addressing information from the token; and determining, by the second authentication server, that the storage location indicated by the token addressing information is not the second authentication server but the first authentication server instead; forwarding, by the second authentication server, the token to the first authentication server; receiving, by the second authentication server, an authentication result sent by the first authentication server, wherein the authentication result is obtained by the first authentication server by performing authentication on the token. receiving, by the second authentication server, the token that is sent by the client and that is forwarded by the load balancing server; obtaining, by the second authentication server, the token addressing information from the token; and determining, by the second authentication server, that the storage location indicated by the token addressing information is not the second authentication server but the first authentication server instead; forwarding, by the second authentication server, the token to the first authentication server; receiving, by the second authentication server, an authentication result sent by the first authentication server, wherein the authentication result is obtained by the first authentication server by performing authentication on the token.