Axis2服务端用户名和密码校验authentication代码

服务端代码如下
1、用户名和密码校验类
package webservice.pojo;
import java.util.Iterator;
import org.apache.axiom.om.OMElement;
import org.apache.axis2.AxisFault;
import org.apache.axis2.context.MessageContext;

public class LoginCheck {
public static void checkUserPwd() throws AxisFault{
MessageContext msgContext = MessageContext.getCurrentMessageContext();
Iterator list = (Iterator)msgContext.getEnvelope().getHeader().getFirstElement().getChildren();
String Username = "";
String Password = "";
while (list.hasNext()) {
OMElement element = (OMElement) list.next();
if (element.getLocalName().equals("Username")) {
Username = element.getText();
}
if (element.getLocalName().equals("Password")) {
Password = element.getText();
}
}
if (!Username.equals("toone") || !Password.equals("111111")){
throw new AxisFault(" Authentication Fail! Check username/password ");
}
}
}
2、webservice axis2服务类

package webservice.pojo;

import java.util.HashMap;

import org.apache.axis2.AxisFault;

import webservice.pojo.LoginCheck;

public class StockQuoteService {
private HashMap map = new HashMap();

public double getPrice(String symbol) throws AxisFault{
LoginCheck.checkUserPwd(); //当客户端调用getPrice方法是，在此处先进行用户名和密码校验，如果校验通过则继续后续逻辑处理，如果不通过则抛出异常。
Double price = (Double) map.get(symbol);
if(price != null){
return price.doublue();
}
return 42.00;
}

public void update(String symbol, double price) {

LoginCheck.checkUserPwd(); //当客户端调用getPrice方法是，在此处先进行用户名和密码校验，如果校验通过则继续后续逻辑处理，如果不通过则抛出异常。
map.put(symbol, new Double(price));
}
}
3、服务类axis2配置文件

<service name="PojoStockQuoteService" scope="application" targetNamespace="http://quickstart.samples/">
<description>
Stock Quote Service
</description>
<messageReceivers>
<messageReceiver mep="http://www.w3.org/2004/08/wsdl/in-only"
class="org.apache.axis2.rpc.receivers.RPCInOnlyMessageReceiver"/>
<messageReceiver mep="http://www.w3.org/2004/08/wsdl/in-out"
class="org.apache.axis2.rpc.receivers.RPCMessageReceiver"/>
</messageReceivers>
<schema schemaNamespace="http://quickstart.samples.pojo/xsd"/>
<parameter name="ServiceClass">webservice.pojo.StockQuoteService</parameter>
</service>

服务端代码完毕。

客户端代码如下：
1、创建带用户名和密码的OMElement对象

package webservice.pojo;

import org.apache.axiom.om.OMAbstractFactory;
import org.apache.axiom.om.OMElement;
import org.apache.axiom.om.OMFactory;
import org.apache.axiom.om.OMNamespace;

public class HeaderOMElement {
public static OMElement createHeaderOMElement(){
OMFactory factory = OMAbstractFactory.getOMFactory();
OMNamespace SecurityElementNamespace = factory.createOMNamespace("http://handler.com","wsse");
OMElement authenticationOM = factory.createOMElement("Authentication",
SecurityElementNamespace);
OMElement usernameOM = factory.createOMElement("Username",
SecurityElementNamespace);
OMElement passwordOM = factory.createOMElement("Password",
SecurityElementNamespace);
usernameOM.setText("toone");
passwordOM.setText("111111");
authenticationOM.addChild(usernameOM);
authenticationOM.addChild(passwordOM);
return authenticationOM;
}
}

2、客户端代码

package webservice.pojo;
import javax.xml.namespace.QName;
import org.apache.axis2.AxisFault;
import org.apache.axis2.addressing.EndpointReference;
import org.apache.axis2.client.Options;
import org.apache.axis2.rpc.client.RPCServiceClient;
import webservice.pojo.HeaderOMElement;

public class PojoClient {
public static void main(String[] args1) throws AxisFault {
String serviceName = "http://localhost:8801/services/PojoStockQuoteService";
String namespace = "http://quickstart.samples.pojo/xsd";
String methodName = "getPrice";
Object[] methodArgs = new Object[] { };
Class[] returnTypes = new Class[] { Double.class };

RPCServiceClient serviceClient = new RPCServiceClient();

//将创建的OMElement对象放置到Header中
serviceClient.addHeader(HeaderOMElement.createHeaderOMElement());
Options options = serviceClient.getOptions();
EndpointReference targetEPR = new EndpointReference(serviceName);
options.setTo(targetEPR);
QName op= new QName(namespace,methodName);
Object[] response = serviceClient.invokeBlocking(op, methodArgs,returnTypes);
Double result = (Double) response[0];
if (result == null) {
System.out.println("didn't initialize!");
return;
}
else {
System.out.println("Price ====== " +
result.doublue());
}
}
}

客户端代码结束。
当在internet网络上发布webservice服务时，有时不希望别人任意访问，尤其是对修改性服务，因此需要在访问服务时先进行用户名和密码校验，对存在这一类需求的人而言，上面的方法应该会有帮助，祝好运。
另外，最近研究了一下，通过Axis2的module方式也是可进行校验的，这种方式更加松耦合，发布module后修改服务端配置文件即可，在服务端的服务方法里没有任何校验代码。