XFire驗證方案

 SOAP Header Authentication with Handlers
通過分別定義Client Handler和Server Handler來傳入/得到用戶名和密碼信息。

 

配置WS Server和WS Client，其中Client端的測試代碼類名由Client改爲ClientTest,因爲我們要用到Xfire的一個名爲Client的類

 

首先我們編寫服務端驗證類繼承AbstractHandler

package test; import org.codehaus.xfire.MessageContext; import org.codehaus.xfire.handler.AbstractHandler; import org.jdom.Element; public class AuthenticationHandler extends AbstractHandler ...{ public void invoke(MessageContext cfx) throws Exception ...{ if(cfx.getInMessage().getHeader() == null) ...{ throw new org.codehaus.xfire.fault.XFireFault("請求必須包含驗證信息",org.codehaus.xfire.fault.XFireFault.SENDER); } Element token=cfx.getInMessage().getHeader().getChild("AuthenticationToken"); if (token == null) ...{ throw new org.codehaus.xfire.fault.XFireFault("請求必須包含身份驗證信息", org.codehaus.xfire.fault.XFireFault.SENDER); } String username = token.getChild("Username").getValue(); String password = token.getChild("Password").getValue(); try ...{ //進行身份驗證 ，只有abcd@1234的用戶爲授權用戶 if(username.equals("abcd") && password.equals("1234")) //這語句不顯示 System.out.println("身份驗證通過"); else throw new Exception(); } catch (Exception e) ...{ throw new org.codehaus.xfire.fault.XFireFault("非法的用戶名和密碼", org.codehaus.xfire.fault.XFireFault.SENDER); } } }

下面是Client發送授權信息

 

package test; import org.codehaus.xfire.MessageContext; import org.codehaus.xfire.handler.AbstractHandler; import org.jdom.Element; public class ClientAuthenticationHandler extends AbstractHandler ...{ private String username = null; private String password = null; public ClientAuthenticationHandler() ...{ } public ClientAuthenticationHandler(String username,String password) ...{ this.username = username; this.password = password; } public void setUsername(String username) ...{ this.username = username; } public void setPassword(String password) ...{ this.password = password; } public void invoke(MessageContext context) throws Exception ...{ //爲SOAP Header構造驗證信息 Element el = new Element("header"); context.getOutMessage().setHeader(el); Element auth = new Element("AuthenticationToken"); Element username_el = new Element("Username"); username_el.addContent(username); Element password_el = new Element("Password"); password_el.addContent(password); auth.addContent(username_el); auth.addContent(password_el); el.addContent(auth); } }

爲ClientTest.java加入以下代碼

XFireProxy proxy = (XFireProxy)Proxy.getInvocationHandler(service); Client client = proxy.getClient(); client.addOutHandler(new ClientAuthenticationHandler("abcd1","1234"));