登录
当前位置： 首页 > 工具软件 > WSS4J > 使用案例 >

CXF使用WSS4J实现WS-Security规范之使用用户名令牌(转)

常业
2023-12-01

转自 http://blog.csdn.net/fhd001/archive/2010/09/05/5864413.aspx

 

pom.xml

 

<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd">
	<modelVersion>4.0.0</modelVersion>
	<groupId>test.cxf</groupId>
	<artifactId>java_first_spring_support1</artifactId>
	<packaging>war</packaging>
	<name>java_first_spring_support1</name>
	<version>0.0.1-SNAPSHOT</version>
	<description>CXF使用WSS4J实现WS-Security规范之使用用户名令牌</description>
	<properties>
		<cxf.version>2.2.5</cxf.version>
	</properties>
	<build>
		<finalName>java_first_spring_support1</finalName>
		<plugins>
			<plugin>
				<artifactId>maven-compiler-plugin</artifactId>
				<configuration>
					<source>1.6</source>
					<target>1.6</target>
					<encoding>UTF-8</encoding>
				</configuration>
			</plugin>
			<plugin>
				<groupId>org.apache.maven.plugins</groupId>
				<artifactId>maven-resources-plugin</artifactId>
				<configuration>
					<encoding>UTF-8</encoding>
				</configuration>
			</plugin>
		</plugins>
	</build>
	<dependencies>
		<dependency>
			<groupId>org.springframework</groupId>
			<artifactId>spring</artifactId>
			<version>2.5.6</version>
		</dependency>
		<dependency>
			<groupId>org.apache.cxf</groupId>
			<artifactId>cxf-rt-frontend-jaxws</artifactId>
			<version>${cxf.version}</version>
		</dependency>
		<dependency>
			<groupId>org.apache.cxf</groupId>
			<artifactId>cxf-rt-transports-http</artifactId>
			<version>${cxf.version}</version>
		</dependency>
		<dependency>
			<groupId>org.apache.cxf</groupId>
			<artifactId>cxf-rt-ws-security</artifactId>
			<version>${cxf.version}</version>
		</dependency>
		<dependency>
			<groupId>junit</groupId>
			<artifactId>junit</artifactId>
			<version>4.8.1</version>
			<scope>test</scope>
		</dependency>
	</dependencies>
</project>

 

 

服务接口：

package cxf.server;
import javax.jws.WebService;
@WebService
public interface HelloWorld {
    String sayHi(String name);
}

 

接口实现：

package cxf.server;
import javax.jws.WebService;
@WebService(endpointInterface="cxf.server.HelloWorld")
public class HelloWorldImpl implements HelloWorld {
	@Override
	public String sayHi(String name) {
		
		System.out.println("server: say->" + name);
		return "say-->" + name;
	}
}

 服务端的spring配置：

<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:jaxws="http://cxf.apache.org/jaxws"
	xsi:schemaLocation="
	http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd
	http://cxf.apache.org/jaxws http://cxf.apache.org/schemas/jaxws.xsd">
	<import resource="classpath:META-INF/cxf/cxf.xml" />
	<import resource="classpath:META-INF/cxf/cxf-extension-soap.xml" />
	<import resource="classpath:META-INF/cxf/cxf-servlet.xml" />
	<bean id="serverPasswordCallback" class="cxf.server.ServerPasswordCallback" />
	<jaxws:endpoint id="helloworld" implementor="cxf.server.HelloWorldImpl"
		address="/helloworld">
		<jaxws:inInterceptors>
			<bean class="org.apache.cxf.interceptor.LoggingInInterceptor" />
			<!-- SAAJInInterceptor只在CXF是2.0.X版本时或之前版本时才是必须的 -->
			<!-- <bean class="org.apache.cxf.binding.soap.saaj.SAAJInInterceptor"/> -->
			<bean class="org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor">
				<constructor-arg>
					<map>
						<entry key="action" value="UsernameToken" />
						<entry key="passwordType" value="PasswordText" />
						<entry key="user" value="FHDServer" />
						<entry key="passwordCallbackRef">
							<ref bean="serverPasswordCallback" />
						</entry>
					</map>
				</constructor-arg>
			</bean>
		</jaxws:inInterceptors>
	</jaxws:endpoint>
	<!-- 
		action:					UsernameToken				指使用用户名令牌 
    	passwordType:			PasswordText				指密码加密策略，这里直接文本 
    	user:					FHDServer					指别名 
    	passwordCallBackRef:	serverPasswordCallback		指消息验证 
	-->
</beans>

 

服务端的验证：

package cxf.server;
import java.io.IOException;
import javax.security.auth.callback.Callback;
import javax.security.auth.callback.CallbackHandler;
import javax.security.auth.callback.UnsupportedCallbackException;
import org.apache.ws.security.WSPasswordCallback;
public class ServerPasswordCallback implements CallbackHandler {
	@Override
	public void handle(Callback[] callbacks) throws IOException,
			UnsupportedCallbackException {
		WSPasswordCallback pc = (WSPasswordCallback) callbacks[0];
		String identifier = pc.getIdentifier();
		String password = pc.getPassword();
		if ("admin".equals(identifier) && "888888".equals(password)) {
			System.out.println("验证通过！");
			System.out.println("identifier = " + identifier);
			System.out.println("password = " + password);
		} else {
			throw new SecurityException("验证失败");
		}
	}
}

 

客户端的spring配置：

 

<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:jaxws="http://cxf.apache.org/jaxws"
	xsi:schemaLocation="
	http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd
	http://cxf.apache.org/jaxws http://cxf.apache.org/schemas/jaxws.xsd">
	<bean id="clientPasswordCallback" class="cxf.client.ClientPasswordCallback"/>
	<jaxws:client id="client"
		address="http://localhost:8080/java_first_spring_support1/service/helloworld"
		serviceClass="cxf.server.HelloWorld">
		<jaxws:outInterceptors>
			<bean class="org.apache.cxf.interceptor.LoggingOutInterceptor" />
			<!-- SAAJInInterceptor只在CXF是2.0.X版本时或之前版本时才是必须的 -->
			<!-- <bean class="org.apache.cxf.binding.soap.saaj.SAAJInInterceptor"/> -->
			<bean class="org.apache.cxf.ws.security.wss4j.WSS4JOutInterceptor">
				<constructor-arg>
					<map>
						<entry key="action" value="UsernameToken" />
						<entry key="passwordType" value="PasswordText" />
						<entry key="user" value="FHDClient" />
						<entry key="passwordCallbackRef">
							<ref bean="clientPasswordCallback" />
						</entry>
					</map>
				</constructor-arg>
			</bean>
		</jaxws:outInterceptors>
	</jaxws:client>
</beans>

 客户端的验证：

package cxf.client;
import java.io.IOException;
import javax.security.auth.callback.Callback;
import javax.security.auth.callback.CallbackHandler;
import javax.security.auth.callback.UnsupportedCallbackException;
import org.apache.ws.security.WSPasswordCallback;
public class ClientPasswordCallback implements CallbackHandler {
	@Override
	public void handle(Callback[] callbacks) throws IOException,
			UnsupportedCallbackException {
		WSPasswordCallback pc = (WSPasswordCallback) callbacks[0];
		pc.setPassword("888888");
		pc.setIdentifier("admin");
	}
}

 客户端调用代码：

package cxf.client;
import org.springframework.context.support.ClassPathXmlApplicationContext;
import cxf.server.HelloWorld;
public final class Client {
    public static void main(String args[]) throws Exception {
    	
        ClassPathXmlApplicationContext context  = new ClassPathXmlApplicationContext(new String[] {"client-beans.xml"});
        HelloWorld client = (HelloWorld)context.getBean("client");
        String str = client.sayHi("fuhaidong");
        System.out.println("client: " + str);
    }
}

 web.xml:

<?xml version="1.0" encoding="UTF-8"?>
<web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xmlns="http://java.sun.com/xml/ns/javaee" xmlns:web="http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd"
	xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd"
	id="WebApp_ID" version="2.5">
	
	<display-name>java_first_spring_support1</display-name>
	
	<welcome-file-list>
		<welcome-file>index.jsp</welcome-file>
	</welcome-file-list>
	
	<context-param>
		<param-name>contextConfigLocation</param-name>
		<param-value>classpath:beans.xml</param-value>
	</context-param>
	<listener>
		<listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>
	</listener>
	<servlet>
		<servlet-name>CXFServlet</servlet-name>
		<servlet-class>org.apache.cxf.transport.servlet.CXFServlet</servlet-class>
		<load-on-startup>1</load-on-startup>
	</servlet>
	<servlet-mapping>
		<servlet-name>CXFServlet</servlet-name>
		<url-pattern>/service/*</url-pattern>
	</servlet-mapping>
</web-app>
 

 

 类似资料：

相关阅读

在Python中使用ElementTree发出名称空间规范使用python实现生成用户信息OAuth-无效令牌：不允许使用请求令牌如何使Python在Windows中获取用户名，然后在脚本中实现用户名解释如何使用python中的scikit-learn库实现L2规范化？

相关文章

DBMS规范化Linux删除用户组（groupdel命令）Linux修改用户组（groupmod命令）Linux添加用户组（groupadd命令）Java编程规范

相关问答

vue3 pinia使用规范？使用camel cxfendpoint发出调用WS-Security启用服务的问题-没有可用的用户名使用Spring Security在OAuth2 web客户端上存储JWT令牌在spring security中仅使用用户名登录使用xml databind实现Apache cxf jax-rs

相关文档

F-Secure Internet Security 用户指南F-Secure Mobile Security 用户指南F-Secure Server Security 用户指南PSV 用户指南使用说明书F-Secure Client Security for Windows 用户指南
快捷导航： 新手教程 算法原理 架构设计 Java进阶 数据库进阶 大厂专栏 面试经验 编程笔记 编程问答 所有专题 文档资料 工具软件 电子书籍 小牛导航
在线工具： 房贷计算器 个税计算器 Linux命令查询 Json格式化 正则表达式 颜色转换 AES加解密 SHA1加密 MD5加密 毒鸡汤 字数统计 随机密码生成 进制转换 Base64编解码 励志句子
Copyright © 2019-2024 小牛知识库@xnip.cn. All Rights Reserved.