Xfire soapHeader的WebService权限控制forjava

2010-03-01 18:41

Xfire soapHeader的WebService权限控制forjava

1.我们可以做一个很简单的ws测试，服务端的接口代码如下：

Java代码

package ws;

//Generated by MyEclipse

public interface HelloWord {

public String example(String message);

}

package ws;

//Generated by MyEclipse

public interface HelloWord {

public String example(String message);

}

实现类：

Java代码

package ws.impl;

import ws.HelloWord;

public class HelloWordImpl implements HelloWord {

public String example(String message) {

System.out.println(message);

return message;

}

}

package ws.impl;

import ws.HelloWord;

public class HelloWordImpl implements HelloWord {

public String example(String message) {

System.out.println(message);

return message;

}

} 服务端的验证类：

Java代码

import org.codehaus.xfire.MessageContext;

import org.codehaus.xfire.handler.AbstractHandler;

import org.jdom.Element;

public class AuthenticationHandler extends AbstractHandler{

public void invoke(MessageContext cfx) throws Exception{

if(cfx.getInMessage().getHeader() == null)

{

throw new org.codehaus.xfire.fault.XFireFault("请求必须包含验证信息",org.codehaus.xfire.fault.XFireFault.SENDER);

}

Element token=cfx.getInMessage().getHeader().getChild("AuthenticationToken");

if (token == null)

{

throw new org.codehaus.xfire.fault.XFireFault("请求必须包含身份验证信息", org.codehaus.xfire.fault.XFireFault.SENDER);

}

String username = token.getChild("Username").getValue();

String password = token.getChild("Password").getValue();

try

{

//进行身份验证 ，只有的用户为授权用户

if(username.equals("test") && password.equals("test"))

System.out.println("身份验证通过");

else throw new Exception();

}

catch (Exception e)

{

throw new org.codehaus.xfire.fault.XFireFault("非法的用户名和密码", org.codehaus.xfire.fault.XFireFault.SENDER);

}

}

}

import org.codehaus.xfire.MessageContext;

import org.codehaus.xfire.handler.AbstractHandler;

import org.jdom.Element;

public class AuthenticationHandler extends AbstractHandler{

public void invoke(MessageContext cfx) throws Exception{

if(cfx.getInMessage().getHeader() == null)

{

throw new org.codehaus.xfire.fault.XFireFault("请求必须包含验证信息",org.codehaus.xfire.fault.XFireFault.SENDER);

}

Element token=cfx.getInMessage().getHeader().getChild("AuthenticationToken");

if (token == null)

{

throw new org.codehaus.xfire.fault.XFireFault("请求必须包含身份验证信息", org.codehaus.xfire.fault.XFireFault.SENDER);

}

String username = token.getChild("Username").getValue();

String password = token.getChild("Password").getValue();

try

{

//进行身份验证 ，只有的用户为授权用户

if(username.equals("test") && password.equals("test"))

System.out.println("身份验证通过");

else throw new Exception();

}

catch (Exception e)

{

throw new org.codehaus.xfire.fault.XFireFault("非法的用户名和密码", org.codehaus.xfire.fault.XFireFault.SENDER);

}

}

}

这样服务端的任务就算完成，客户端调用是也需要一个授权信息，如下：

Java代码

import org.codehaus.xfire.MessageContext;

import org.codehaus.xfire.handler.AbstractHandler;

import org.jdom.Element;

public class ClientAuthenticationHandler extends AbstractHandler{

private String username = null;

private String password = null;

public ClientAuthenticationHandler() { }

public ClientAuthenticationHandler(String username,String password) {

this.username = username;

this.password = password;

}

public void setUsername(String username) {

this.username = username;

}

public void setPassword(String password) {

this.password = password;

}

public void invoke(MessageContext context) throws Exception {

//为SOAP Header构造验证信息

Element el = new Element("header");

context.getOutMessage().setHeader(el);

Element auth = new Element("AuthenticationToken");

Element username_el = new Element("Username");

username_el.addContent(username);

Element password_el = new Element("Password");

password_el.addContent(password);

auth.addContent(username_el);

auth.addContent(password_el);

el.addContent(auth);

}

}

import org.codehaus.xfire.MessageContext;

import org.codehaus.xfire.handler.AbstractHandler;

import org.jdom.Element;

public class ClientAuthenticationHandler extends AbstractHandler{

private String username = null;

private String password = null;

public ClientAuthenticationHandler() { }

public ClientAuthenticationHandler(String username,String password) {

this.username = username;

this.password = password;

}

public void setUsername(String username) {

this.username = username;

}

public void setPassword(String password) {

this.password = password;

}

public void invoke(MessageContext context) throws Exception {

//为SOAP Header构造验证信息

Element el = new Element("header");

context.getOutMessage().setHeader(el);

Element auth = new Element("AuthenticationToken");

Element username_el = new Element("Username");

username_el.addContent(username);

Element password_el = new Element("Password");

password_el.addContent(password);

auth.addContent(username_el);

auth.addContent(password_el);

el.addContent(auth);

}

}

然后就是客户端的调用了，其代码如下

Java代码

import java.net.URL;

public class HelloWorkClient {

public static void main(String[] args) throws Exception {

String wsdlUrl="http://127.0.0.1:8080/testWS/services/helloWord?wsdl";

org.codehaus.xfire.client.Client client = new org.codehaus.xfire.client.Client(new URL(wsdlUrl));

<span style="color: rgb(51, 51, 51); background-color: rgb(255, 255, 255);">client.addOutHandler(new ClientAuthenticationHandler("abcd","1234"));</span>

Object[] obj = client.invoke("example",new Object[]{"调用成功"});

System.out.println(obj[0]);

}

}

import java.net.URL;

public class HelloWorkClient {

public static void main(String[] args) throws Exception {

String wsdlUrl="http://127.0.0.1:8080/testWS/services/helloWord?wsdl";

org.codehaus.xfire.client.Client client = new org.codehaus.xfire.client.Client(new URL(wsdlUrl));

client.addOutHandler(new ClientAuthenticationHandler("abcd","1234"));

Object[] obj = client.invoke("example",new Object[]{"调用成功"});

System.out.println(obj[0]);

}

}client.addOutHandler表示客户端调用服务端的验证码，你如果没有这行则无法调用，另外就是service.xml的配置文件必须要配置soapHeader，代码如下：

Xml代码

<service xmlns="http://xfire.codehaus.org/config/1.0">

<name>helloWord</name>

<serviceClass>ws.HelloWord</serviceClass>

<implementationClass>ws.impl.HelloWordImpl</implementationClass>

<inHandlers>

<handler handlerClass ="ws.other.AuthenticationHandler" ></handler >

</inHandlers>

<style>wrapped</style>

<use>literal</use>

<scope>application</scope>

</service>

<service xmlns="http://xfire.codehaus.org/config/1.0">

<name>helloWord</name>

<serviceClass>ws.HelloWord</serviceClass>

<implementationClass>ws.impl.HelloWordImpl</implementationClass>

<inHandlers>

<handler handlerClass ="ws.other.AuthenticationHandler" ></handler >

</inHandlers>

<style>wrapped</style>

<use>literal</use>

<scope>application</scope>

</service>

这样，一个完整的测试权限的例子就算完成了。