CXF 入门：创建一个基于SOAPHeader的安全验证(CXF拦截器使用)

CXF 入门：HelloWorld接口发布

CXF 入门: 远程接口调用

 

下面具体的webservice实现类直接用的是上面的，这里不再说明

 

 CXF拦截器使用,创建一个使用SOAPHeader的安全验证
 xml格式：

     "http://gd.chinamobile.com//authentication">
         1
         test
         test



 一，首先在服务端创建一个拦截器(被调用端)，需要继承org.apache.cxf.phase.AbstractPhaseInterceptor
 代码如下：

 import java.util.List;

 import javax.xml.soap.SOAPException;

 import org.apache.cxf.binding.soap.SoapHeader;
 import org.apache.cxf.binding.soap.SoapMessage;
 import org.apache.cxf.headers.Header;
 import org.apache.cxf.helpers.XMLUtils;
 import org.apache.cxf.interceptor.Fault;
 import org.apache.cxf.phase.AbstractPhaseInterceptor;
 import org.apache.cxf.phase.Phase;
 import org.apache.log4j.Logger;
 import org.w3c.dom.Element;
 import org.w3c.dom.NodeList;


 public class AuthIntercetpr extends AbstractPhaseInterceptor {
     private static final Logger logger = Logger.getLogger(AuthIntercetpr.class);
     public static final String xml_namespaceUR_att = "http://gd.chinamobile.com//authentication";
     public static final String xml_header_el = "soap:Header";
     public static final String xml_authentication_el = "auth:authentication";
     public static final String xml_systemID_el = "auth:systemID";
     public static final String xml_userID_el = "auth:userID";
     public static final String xml_password_el = "auth:password";
     public AuthIntercetpr() {
         // 指定该拦截器在哪个阶段被激发
         super(Phase.PRE_INVOKE);
     }

     // 处理消息
     public void handleMessage(SoapMessage message) {
         logger.info("==================SoapMessage =" + message);
         // 获取SOAP消息的全部头
         List headers = message.getHeaders();

         if (null == headers || headers.size() < 1) {
             throw new Fault(new SOAPException("SOAP消息头格式不对哦！"));
         }
         for (Header header : headers) {
             SoapHeader soapHeader = (SoapHeader) header;
             // 取出SOAP的Header元素
             Element element = (Element) soapHeader.getObject();
             logger.info("ELEMENT =" + element.toString());
             XMLUtils.printDOM(element);
             NodeList userIdNodes = element
                     .getElementsByTagName(xml_userID_el);
             NodeList pwdNodes = element
                     .getElementsByTagName(xml_password_el);
             NodeList systemIdNodes = element
                     .getElementsByTagName(xml_systemID_el);
             logger.info("############ 打印帐号信息 ##############");
             logger.info(userIdNodes.item(0) + "="
                     + userIdNodes.item(0).getTextContent());
             logger.info(systemIdNodes.item(0) + "="
                     + systemIdNodes.item(0).getTextContent());
             logger.info(pwdNodes.item(0) + "="
                     + pwdNodes.item(0).getTextContent());
             logger.info("############————————##############");
             if (null != userIdNodes
                     && userIdNodes.item(0).getTextContent().equels("test") ) {
                 if (null != pwdNodes
                         && pwdNodes.item(0).getTextContent().equals("test")) {
                     logger.info("$$$$$$$$ 认证成功");
                 } else {//认证失败则抛出异常，停止继续操作
                     SOAPException soapExc = new SOAPException("阁下可能不是合法用户！");
                     throw new Fault(soapExc);
                 }
             } else {//认证失败则抛出异常，停止继续操作
                 SOAPException soapExc = new SOAPException("阁下可能不是合法用户！");
                 throw new Fault(soapExc);
             }

         }
     }
 }

 二，修改cxf-beans.xml



 "authIntercetpr" class="unitTest.AuthIntercetpr">
 "HelloWorldService" implementor="com.ws.HelloWorldServiceImpl"
         address="/IHelloService">

         "authIntercetpr" />





 到此服务端工作完毕！！！
 下面是客户端（调用端）
 三，这边同样创建一个拦截器，实现org.apache.cxf.binding.soap.interceptor.AbstractSoapInterceptor

 import java.text.SimpleDateFormat;
 import java.util.Date;
 import java.util.List;

 import javax.xml.namespace.QName;

 import org.apache.cxf.binding.soap.SoapHeader;
 import org.apache.cxf.binding.soap.SoapMessage;
 import org.apache.cxf.binding.soap.interceptor.AbstractSoapInterceptor;
 import org.apache.cxf.headers.Header;
 import org.apache.cxf.helpers.DOMUtils;
 import org.apache.cxf.helpers.XMLUtils;
 import org.apache.cxf.interceptor.Fault;
 import org.apache.cxf.phase.Phase;
 import org.w3c.dom.Document;
 import org.w3c.dom.Element;

 public class AddSoapHeader extends AbstractSoapInterceptor {

     public static final String xml_namespaceUR_att = "http://gd.chinamobile.com//authentication";
     public static final String xml_header_el = "soap:Header";
     public static final String xml_authentication_el = "auth:authentication";
     public static final String xml_systemID_el = "auth:systemID";
     public static final String xml_userID_el = "auth:userID";
     public static final String xml_password_el = "auth:password";

     public AddSoapHeader() {
     // 指定该拦截器在哪个阶段被激发
         super(Phase.WRITE);
     }

     public void handleMessage(SoapMessage message) throws Fault {
         SimpleDateFormat sd = new SimpleDateFormat("yyyy-MM-dd HH:mm:ss");
         Date date = new Date();
         String time = sd.format(date);
         String userId = "test";
         String sysId = "1";
         String password = "test";

         QName qname = new QName("RequestSOAPHeader");//这个值暂时不清楚具体做什么用，可以随便写

         Document doc = (Document) DOMUtils.createDocument();
         Element root = doc.createElement(xml_header_el);
         Element eSysId = doc.createElement(xml_systemID_el);
         eSysId.setTextContent(sysId);
         Element eUserId = doc.createElement(xml_userID_el);
         eUserId.setTextContent(userId);
         Element ePwd = doc.createElement(xml_password_el);
         ePwd.setTextContent(password);
         Element child = doc.createElementNS(xml_namespaceUR_att,
                 xml_authentication_el);
         child.appendChild(eSysId);
         child.appendChild(eUserId);
         child.appendChild(ePwd);
         root.appendChild(child);
         XMLUtils.printDOM(root);// 只是打印xml内容到控制台,可删除
         SoapHeader head = new SoapHeader(qname, root);
         List headers = message.getHeaders();
         headers.add(head);

     }

 }

 四，具体调用ws的类代码


     private static final String webServiceConTimeout = "6000";
     private static final String webServiceRevTimeout = "6000";
     。。。。。。。
         HelloWorldServiceImplService hello = new HelloWorldServiceImplService();
         HelloWorldService service = hello.getHelloWorldServiceImplPort();
         //以上什么意思请参考：http://learning.iteye.com/admin/blogs/1333223
         Client clientProxy = ClientProxy.getClient(service);//通过目标ws获取代理
         //注入拦截器，getOutInterceptors代表调用服务端时触发,getInInterceptors就是被调用才触发
         clientProxy.getOutInterceptors().add(ash);
         // 超时时间设置
         HTTPConduit http = (HTTPConduit) clientProxy.getConduit();
         HTTPClientPolicy httpClientPolicy = new HTTPClientPolicy();
         httpClientPolicy.setConnectionTimeout(Integer
                 .valueOf(webServiceConTimeout));
         httpClientPolicy.setReceiveTimeout(Integer
                 .valueOf(webServiceRevTimeout));
         httpClientPolicy.setAllowChunking(false);
         http.setClient(httpClientPolicy);
         //以上插入点超时设置方式
         //下面这行代码是具体调用服务段的deleteTeskTask（）
         CallResult cResult = service.deleteTeskTask("1223");

         。
         。

 客户端代码到此结束

 五，还有一种方式是通过JaxWsProxyFactoryBean方式，注册拦截器及实例化ws,代码如下：

 private static final JaxWsProxyFactoryBean factory = new JaxWsProxyFactoryBean();

 AddSoapHeader ash = new AddSoapHeader();
         ArrayList list = new ArrayList();
         // 添加soap header 信息
         list.add(ash);
         //注入拦截器，getOutInterceptors代表调用服务端时触发,getInInterceptors就是被调用才触发
          factory.setOutInterceptors(list);
          factory.setServiceClass(HelloWorldService.class);//实例化ws
          factory.setAddress("http://xxx.xxx.xxx.xxx:8004/services/IHelloService");
          Object obj = factory.create();
          HelloWorldService service = (HelloWorldService) obj;
          //下面这行代码是具体调用服务段的deleteTeskTask（）
         CallResult cResult = service.deleteTeskTask("1223");

 ##########这段代码可替代步骤（四）#####

 到此全部工作结束
 具体一些概念还请自己baidu/google