CXF使用WSS4J实现WS-Security规范之使用用户名令牌

CXF使用WSS4J实现WS-Security规范之使用用户名令牌

这个示例是一个简单的UsernameToken，它仅仅包装明文用户名和密码.

pom.xml:
 

www.ishang123.com   复制内容到剪贴板 折叠 XML/HTML 代码

 <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
     xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd">
     <modelVersion>4.0.0modelVersion>
     <groupId>test.cxfgroupId>
     <artifactId>java_first_spring_support1artifactId>
     <packaging>warpackaging>
     <name>java_first_spring_support1name>
     <version>0.0.1-SNAPSHOTversion>
     <description>CXF使用WSS4J实现WS-Security规范之使用用户名令牌description>
     <properties>
         <cxf.version>2.2.5cxf.version>
     properties>
     <build>
         <finalName>java_first_spring_support1finalName>
         <plugins>
             <plugin>
                 <artifactId>maven-compiler-pluginartifactId>
                 <configuration>
                     <source>1.6source>
                     <target>1.6target>
                     <encoding>UTF-8encoding>
                 configuration>
             plugin>
             <plugin>
                 <groupId>org.apache.maven.pluginsgroupId>
                 <artifactId>maven-resources-pluginartifactId>
                 <configuration>
                     <encoding>UTF-8encoding>
                 configuration>
             plugin>
         plugins>
     build>
     <dependencies>
         <dependency>
             <groupId>org.springframeworkgroupId>
             <artifactId>springartifactId>
             <version>2.5.6version>
         dependency>
         <dependency>
             <groupId>org.apache.cxfgroupId>
             <artifactId>cxf-rt-frontend-jaxwsartifactId>
             <version>${cxf.version}version>
         dependency>
         <dependency>
             <groupId>org.apache.cxfgroupId>
             <artifactId>cxf-rt-transports-httpartifactId>
             <version>${cxf.version}version>
         dependency>
         <dependency>
             <groupId>org.apache.cxfgroupId>
             <artifactId>cxf-rt-ws-securityartifactId>
             <version>${cxf.version}version>
         dependency>
         <dependency>
             <groupId>junitgroupId>
             <artifactId>junitartifactId>
             <version>4.8.1version>
             <scope>testscope>
         dependency>
     dependencies>
 project>

服务接口：

www.ishang123.com   复制内容到剪贴板 折叠 Java 代码

 package cxf.server;
 import javax.jws.WebService;
 @WebService
 public interface HelloWorld {
     String sayHi(String name);
 }

接口实现：

www.ishang123.com   复制内容到剪贴板 折叠 Java 代码

 package cxf.server;
 import javax.jws.WebService;
 @WebService(endpointInterface="cxf.server.HelloWorld")
 public class HelloWorldImpl implements HelloWorld {
     @Override
     public String sayHi(String name) {

         System.out.println("server: say->" + name);
         return "say-->" + name;
     }
 }

服务端的spring配置：

www.ishang123.com   复制内容到剪贴板 折叠 XML/HTML 代码

 xml version="1.0" encoding="UTF-8"?>
 <beans xmlns="http://www.springframework.org/schema/beans"
     xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:jaxws="http://cxf.apache.org/jaxws"
     xsi:schemaLocation="
     http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd
     http://cxf.apache.org/jaxws http://cxf.apache.org/schemas/jaxws.xsd">
     <import resource="classpath:META-INF/cxf/cxf.xml" />
     <import resource="classpath:META-INF/cxf/cxf-extension-soap.xml" />
     <import resource="classpath:META-INF/cxf/cxf-servlet.xml" />
     <bean id="serverPasswordCallback" class="cxf.server.ServerPasswordCallback" />
     <jaxws:endpoint id="helloworld" implementor="cxf.server.HelloWorldImpl"
         address="/helloworld">
         <jaxws:inInterceptors>
             <bean class="org.apache.cxf.interceptor.LoggingInInterceptor" />


             <bean class="org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor">
                 <constructor-arg>
                     <map>
                         <entry key="action" value="UsernameToken" />
                         <entry key="passwordType" value="PasswordText" />
                         <entry key="user" value="FHDServer" />
                         <entry key="passwordCallbackRef">
                             <ref bean="serverPasswordCallback" />
                         entry>
                     map>
                 constructor-arg>
             bean>
         jaxws:inInterceptors>
     jaxws:endpoint>


             <bean class="org.apache.cxf.ws.security.wss4j.WSS4JOutInterceptor">
                 <constructor-arg>
                     <map>
                         <entry key="action" value="UsernameToken" />
                         <entry key="passwordType" value="PasswordText" />
                         <entry key="user" value="FHDClient" />
                         <entry key="passwordCallbackRef">
                             <ref bean="clientPasswordCallback" />
                         entry>
                     map>
                 constructor-arg>
             bean>
         jaxws:outInterceptors>
     jaxws:client>
 beans>

客户端的验证：

www.ishang123.com   复制内容到剪贴板 折叠 Java 代码

 package cxf.client;
 import java.io.IOException;
 import javax.security.auth.callback.Callback;
 import javax.security.auth.callback.CallbackHandler;
 import javax.security.auth.callback.UnsupportedCallbackException;
 import org.apache.ws.security.WSPasswordCallback;
 public class ClientPasswordCallback implements CallbackHandler {
     @Override
     public void handle(Callback[] callbacks) throws IOException,
             UnsupportedCallbackException {
         WSPasswordCallback pc = (WSPasswordCallback) callbacks[0];
         pc.setPassword("888888");
         pc.setIdentifier("admin");
     }
 }

客户端调用代码：

www.ishang123.com   复制内容到剪贴板 折叠 XML/HTML 代码

 package cxf.client;
 import org.springframework.context.support.ClassPathXmlApplicationContext;
 import cxf.server.HelloWorld;
 public final class Client {
     public static void main(String args[]) throws Exception {

         ClassPathXmlApplicationContext context  = new ClassPathXmlApplicationContext(new String[] {"client-beans.xml"});
         HelloWorld client = (HelloWorld)context.getBean("client");
         String str = client.sayHi("fuhaidong");
         System.out.println("client: " + str);
     }
 }

web.xml:

www.ishang123.com   复制内容到剪贴板 折叠 XML/HTML 代码

 xml version="1.0" encoding="UTF-8"?>
 <web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
     xmlns="http://java.sun.com/xml/ns/javaee" xmlns:web="http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd"
     xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd"
     id="WebApp_ID" version="2.5">

     <display-name>java_first_spring_support1display-name>

     <welcome-file-list>
         <welcome-file>index.jspwelcome-file>
     welcome-file-list>

     <context-param>
         <param-name>contextConfigLocationparam-name>
         <param-value>classpath:beans.xmlparam-value>
     context-param>
     <listener>
         <listener-class>org.springframework.web.context.ContextLoaderListenerlistener-class>
     listener>
     <servlet>
         <servlet-name>CXFServletservlet-name>
         <servlet-class>org.apache.cxf.transport.servlet.CXFServletservlet-class>
         <load-on-startup>1load-on-startup>
     servlet>
     <servlet-mapping>
         <servlet-name>CXFServletservlet-name>
         <url-pattern>/service/*url-pattern>
     servlet-mapping>
 web-app>

转自：http://www.ishang123.com/jishubowen/java/2012-08-22/161.html