使用jax-rs和cxf进行客户端身份验证

Question

Client client = ClientBuilder.newClient();
client.register(HttpAuthenticationFeature.basic(config.getUsername(),config.getPassword()));

如何用Apache CXF实现这一点？

Answer 1

创建ClientRequestFilter以执行基本身份验证：

@Provider
public class Authenticator implements ClientRequestFilter {

    private String user;
    private String password;

    public Authenticator(String user, String password) {
        this.user = user;
        this.password = password;
    }

    @Override
    public void filter(ClientRequestContext requestContext) throws IOException {
        requestContext.getHeaders().add(
            HttpHeaders.AUTHORIZATION, getBasicAuthentication());
    }

    private String getBasicAuthentication() {
        String userAndPassword = this.user + ":" + this.password;
        byte[] userAndPasswordBytes = userAndPassword.getBytes("UTF-8");
        return "Basic " + Base64.getEncoder().encodeToString(userAndPasswordBytes);
    }
}

并将其注册到客户端:

Client client = ClientBuilder.newClient().register(new Authenticator(user, password));

上面的解决方案使用Java8Base64.encoder来执行Base64编码。
如果出于某种原因没有使用Java8，可以使用Google Guava的baseEncoding。