WebServices的認證處理

WebServices的認證處理有兩種方式：

 

一. HTTP身份認證:在web服務器中指定可訪問IP,或在防火牆中設置IP訪問策略,也可以在web服務器中配置驗證程序進行身份認證.

二. SOAP Header中進行身份驗證，採用JSR181標註的方式進行身份驗證，具體步驟如下：

      a) 服務端編寫驗證類，繼承AbstractHandler，代碼如下：

public class SecurityHandler extends AbstractHandler { public void invoke(MessageContext context) throws Exception { Element headerE = context.getInMessage().getHeader(); if (headerE == null) { throw new Exception("本服務需要收費，請聯繫QQ:3333333"); } String username = headerE.getChild("username").getText(); String password = headerE.getChildText("password"); if(username==null||"".equals(username)){ throw new Exception("請提供用戶名"); } if(password==null||"".equals(password)){ throw new Exception("請提供密碼"); } if(username.equals("jn0909")){ if(password.equals("jn0909")){ }else{ throw new Exception("密碼錯誤"); } }else{ throw new Exception("用戶名錯誤"); } } }

      b) services.xml配置如下：

       <service> <name>Hello</name> <serviceClass>com.softfz.IHello</serviceClass> <implementationClass>com.softfz.HelloImpl</implementationClass> <inHandlers> <handler handlerClass="com.softfz.SecurityHandler"></handler> </inHandlers> <style>wrapped</style> <use>literal</use> <scope>application</scope> </service>

      c) 同樣客戶端也要編寫一個授權信息，繼承AbstractHandler,代碼如下：

public class ClientHandler extends AbstractHandler { private String username = ""; private String password = ""; public String getUsername() { return username; } public void setUsername(String username) { this.username = username; } public String getPassword() { return password; } public void setPassword(String password) { this.password = password; } public void invoke(MessageContext context) throws Exception { OutMessage outMessage = context.getOutMessage(); Element header = new Element("xxxx"); Element usernameE = new Element("username"); Element passwordE = new Element("password"); header.addContent(usernameE); header.addContent(passwordE); outMessage.setHeader(header); usernameE.setText(username); passwordE.setText(password); } public ClientHandler(String username, String password) { this.username = username; this.password = password; } }

        d) 客戶端調用服務端(可以以3種方式中的任意一種調用)

   第一種方式調用：

 public static void main(String[] args) { String webserviceLocation = "http://localhost:81/webservice03/services/Hello"; ObjectServiceFactory objectServiceFactory = new ObjectServiceFactory(); Service service = objectServiceFactory.create(IHello.class); XFireProxyFactory fireProxyFactory = new XFireProxyFactory(); try { IHello hello = (IHello) fireProxyFactory.create(service, webserviceLocation); XFireProxy fireProxy = (XFireProxy) Proxy .getInvocationHandler(hello); fireProxy.getClient().addOutHandler(new ClientHandler("jn0909","jn0909")); hello.example("test"); } catch (MalformedURLException e) { e.printStackTrace(); } }

  第二種方式調用：

public static void main(String[] args) { String wsdlLocation="http://localhost:81/webservice03/services/Hello?wsdl"; try { Client client = new Client(new URL(wsdlLocation)); client.addOutHandler(new ClientHandler("jn0909","jn0909")); client.invoke("example", new Object[]{"test"}); } catch (MalformedURLException e) { // TODO Auto-generated catch block e.printStackTrace(); } catch (Exception e) { // TODO Auto-generated catch block e.printStackTrace(); } }

   第三種方式調用：

 public static void main(String[] args) { HelloClient client = new HelloClient(); // create a default service endpoint HelloPortType service = client.getHelloHttpPort(); XFireProxy fireProxy = (XFireProxy) Proxy.getInvocationHandler(service); fireProxy.getClient().addOutHandler( new ClientHandler("jn0909", "jn0909")); service.example("test"); }