xfire身份验证

青旅半醒 2022-08-24 11:52 264阅读 0赞

**xfire身份验证**

xfire通过配置Handler进行身份验证拦截，客户端需要通过加头信息的方式访问webservice服务

此实例是spring和xfire继承的

xfire-servlet.xml文件源码如下：

<?xml version="1.0" encoding="UTF-8"?>
 
 <beans xmlns="http://www.springframework.org/schema/beans"
 	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
 	xmlns:tx="http://www.springframework.org/schema/tx"
 	xmlns:aop="http://www.springframework.org/schema/aop"
 	xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-2.0.xsd
 	http://www.springframework.org/schema/tx
 	http://www.springframework.org/schema/tx/spring-tx-2.0.xsd
 	http://www.springframework.org/schema/aop
 	http://www.springframework.org/schema/aop/spring-aop-2.0.xsd">
 	
 	<import resource="classpath:org/codehaus/xfire/spring/xfire.xml" />
 	 <bean id="jdbcmsg" class="org.springframework.jdbc.core.JdbcTemplate">
 	 <property name="dataSource" ref="msg"></property>
 	</bean>
 	 <bean id="androdao" class="webservice.dao.AndroDao" scope="prototype">
 		<property name="jdbc" ref="jdbccons"></property> 
 		<property name="jdbcmsg" ref="jdbcmsg"></property> 
 	</bean>
 	
 	<bean id="synem" class="webservice.impl.EmployeeImpl" scope="prototype">
 		<property name="xmlpar" ref="xmlparse"></property>
 		<property name="dao" ref="androdao"></property>
 	</bean>
 	<bean
 		class="org.springframework.web.servlet.handler.SimpleUrlHandlerMapping">
 		<property name="urlMap">
 			<map>
 				<entry key="/SynWebService">
 					<ref bean="synser" />
 				</entry>
 			</map>
 		</property>
 	</bean>
 
 	<bean id="synser"
 		class="org.codehaus.xfire.spring.remoting.XFireExporter">
 		<property name="serviceFactory">
 			<ref bean="xfire.serviceFactory" />
 		</property>
 		 
 		<property name="xfire">
 			<ref bean="xfire" />
 		</property>
 		<property name="serviceBean">
 			<ref bean="synem" />
 		</property>
 		<property name="serviceClass">
 			<value>webservice.Iemployee</value>
 		</property>
 		<property name="name" value="OA_TYYHZX_MMTB_SERVICE"></property>

<property name="inHandlers" ref="auth"/>
 	</bean>
 	 <bean id="auth" class="webservice.XfireHandler" scope="prototype"></bean>
 </beans>

webservice.XfireHandler

package webservice;

import java.text.SimpleDateFormat;
 import java.util.Date;
 import java.util.List;
 
 import org.apache.log4j.Logger;
 import org.codehaus.xfire.MessageContext;
 import org.codehaus.xfire.handler.AbstractHandler;
 import org.jdom.Element;
 
 public class XfireHandler extends AbstractHandler {
 	
 	SimpleDateFormat format = new SimpleDateFormat("yyyy-MM-dd HH:mm:ss");
 	Logger log = Logger.getLogger(XfireHandler.class);
 	
 	@SuppressWarnings("unchecked")
 	public void invoke(MessageContext cfx) throws Exception {
 
 		if (cfx.getInMessage().getHeader() == null) {
 			throw new org.codehaus.xfire.fault.XFireFault("请求必须包含验证信息", org.codehaus.xfire.fault.XFireFault.SENDER);
 		}
 		List<Element> tokens = cfx.getInMessage().getHeader().getChildren();
 		Element token = null;
 		for (int i = 0; i < tokens.size(); i++) {
 			Element ele = tokens.get(i);
 			if ("AuthenticationToken".equals(ele.getName()))token = ele;
 		}
 
 		if (token == null) {
 			throw new org.codehaus.xfire.fault.XFireFault("请求必须包含身份验证信息", org.codehaus.xfire.fault.XFireFault.SENDER);
 		}
 
 		Element usernames = null;
 		Element pwd = null;
 		tokens = token.getChildren();
 		for (int i = 0; i < tokens.size(); i++) {
 			Element ele = tokens.get(i);
 			if ("username".equals(ele.getName())) usernames = ele;
 			if ("password".equals(ele.getName())) pwd = ele;
 		}
 		String username = usernames.getText();
 		String password = pwd.getText();
 		try {
 			// 进行身份验证 ，只有abcd@1234的用户为授权用户
 			if (username.equals("serviceKS") && password.equals("KS")){
 				log.info("身份验证通过;调用时间:" + format.format(new Date().getTime()));
 				System.out.println("身份验证通过;调用时间:" + format.format(new Date().getTime()));
 			}else{
 				
 				throw new Exception();
 			}
 		} catch (Exception e) {
 			throw new org.codehaus.xfire.fault.XFireFault("非法的用户名和密码", org.codehaus.xfire.fault.XFireFault.SENDER);
 		}
 	}
 }

**客户端调用需要的头信息配置的Handler**

package webservice.impl;
 
 import org.codehaus.xfire.MessageContext; 
 import org.codehaus.xfire.handler.AbstractHandler; 
 import org.jdom.Element;
 
 /** 
 * 构造授权信息类 
 * 
 * @author Administrator 
 * 
 */ 
 public class WebserviceClientHandler extends AbstractHandler { 
 private String username = "serviceKS"; //用户名
 private String password = "KS";//密码
 private String ns = "http://webservice"; //命名空间
 
 public WebserviceClientHandler() { 
 
 } 
 
 public WebserviceClientHandler(String username,String password) { 
 	this.username = username;
 	this.password = password;
 } 
 
 
 
 public void invoke(MessageContext context) throws Exception {
 	Element header = new Element("header");
 	context.getOutMessage().setHeader(header);
 
 	Element auth = new Element("AuthenticationToken",ns);
 	Element username_el = new Element("username");
 	username_el.addContent(username);
 	Element password_el = new Element("password");
 	password_el.addContent(password);
 	auth.addContent(username_el);
 	auth.addContent(password_el);
 	header.addContent(auth);
 	
 	
 	
 } 
 
 
 }

**客户端主体调用程序代码**

public static void main(String[] args) {
    		
    		Service srModel = new ObjectServiceFactory().create(Iemployee.class);
    		XFireProxyFactory factory = new XFireProxyFactory(XFireFactory.newInstance().getXFire());
    		String endPoint = "http://localhost:8080/jszyDemo/service/OA_TYYHZX_MMTB_SERVICE";
    	
    						 
    		try {
    			
    			Iemployee emp = (Iemployee) factory.create(srModel, endPoint);
    			Client client = ((XFireProxy) Proxy.getInvocationHandler(emp)).getClient();

// 客户端加头信息

client.addOutHandler(new WebserviceClientHandler());

String xml = "<?xml version=\"1.0\" encoding=\"gb2312\"?><DATASETS>" +
 			"<DATASET>" +
 			"<USER_ID>jszy</USER_ID>" +
 			"<USER_NAME>管理员</USER_NAME>" +
 			"<DEP_ID>001000119</DEP_ID>" +
 			"<DEP_NAME>信息中心</DEP_NAME>" +
 			"<PASSWORD>111111</PASSWORD>" +
 			"<BG_DATE>2011-10-26 14:14:14</BG_DATE>" +
 			"<LEVELGROUPID>00100000</LEVELGROUPID>" +
 			"</DATASET></DATASETS>";
 			System.out.println(xml);
 			String msg = emp.OA_TYYHZX_MMTB_SERVICE(xml);
 
 			System.out.println(msg);
 		} catch (Exception e) {
 			e.printStackTrace();
 			 
 		}
 		
 	}

这里只给出了验证Handler和客户端调用的方法，你可以根据自己建立的服务，直接套用就可以了