标头中包含用户名和密码的SOAP客户端请求

Question

我有以下Java客户端用于发出SOAP请求：

package com.example.petstore.test;

import java.util.GregorianCalendar;

import javax.xml.datatype.DatatypeConfigurationException;
import javax.xml.datatype.DatatypeFactory;
import javax.xml.datatype.XMLGregorianCalendar;

import org.apache.cxf.jaxws.JaxWsProxyFactoryBean;

import com.example.petstore.schema.ProcessUpdateResponse;
import com.example.petstore.schema.SyncProcessDAO;

public class TestUtility {

    public static void main(String[] args) {

        JaxWsProxyFactoryBean factory = new JaxWsProxyFactoryBean();        

        // Use the URL defined in the soap address portion of the WSDL
        factory.setAddress("http://192.168.1.4:8080/MySyncService/services/SyncProcessDAOPort"); 

        // Utilize the class which was auto-generated by Apache CXF wsdl2java
        factory.setServiceClass(SyncProcessDAO.class);        

        Object client = factory.create();

        try {        

            // Call the Web Service to perform an operation
            GregorianCalendar gregory = new GregorianCalendar();
            XMLGregorianCalendar xmlgregory = DatatypeFactory.newInstance()
                    .newXMLGregorianCalendar(gregory);
            ProcessUpdateResponse response = ((SyncProcessDAO)client).gatherFunctionAttributes("hello1", "hello2", "hello3", 1, 2, xmlgregory, xmlgregory, "hello4", "hello5");    
             System.out.println("hahahaha");
            System.out.println(response);    

          } catch (SecurityException e) {

            e.printStackTrace();

          } catch (IllegalArgumentException e) {

            e.printStackTrace();

          } catch (DatatypeConfigurationException e) {
            // TODO Auto-generated catch block
            e.printStackTrace();
        }        
    }
}

我需要修改它，将用户名和密码作为WS-security标头的一部分。我该怎么做呢？

如果有用，我还附加了我的WSDL文件：

    <?xml version="1.0" encoding="UTF-8"?>
<wsdl:definitions name="SyncProcessDAOService" targetNamespace="http://example.com/" xmlns:wsdl="http://schemas.xmlsoap.org/wsdl/" xmlns:tns="http://example.com/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/wsdl/soap/">
  <wsdl:types>
    <schema xmlns="http://www.w3.org/2001/XMLSchema">
  <import namespace="http://example.com/" schemaLocation="my_schema1.xsd"/>
</schema>
  </wsdl:types>
  <wsdl:message name="gatherFunctionAttributesResponse">
    <wsdl:part name="parameters" element="tns:gatherFunctionAttributesResponse">
    </wsdl:part>
  </wsdl:message>
  <wsdl:message name="gatherFunctionAttributes">
    <wsdl:part name="parameters" element="tns:gatherFunctionAttributes">
    </wsdl:part>
  </wsdl:message>
  <wsdl:portType name="SyncProcessDAO">
    <wsdl:operation name="gatherFunctionAttributes">
      <wsdl:input name="gatherFunctionAttributes" message="tns:gatherFunctionAttributes">
    </wsdl:input>
      <wsdl:output name="gatherFunctionAttributesResponse" message="tns:gatherFunctionAttributesResponse">
    </wsdl:output>
    </wsdl:operation>
  </wsdl:portType>
  <wsdl:binding name="SyncProcessDAOServiceSoapBinding" type="tns:SyncProcessDAO">
    <soap:binding style="document" transport="http://schemas.xmlsoap.org/soap/http"/>
    <wsdl:operation name="gatherFunctionAttributes">
      <soap:operation soapAction="" style="document"/>
      <wsdl:input name="gatherFunctionAttributes">
        <soap:body use="literal"/>
      </wsdl:input>
      <wsdl:output name="gatherFunctionAttributesResponse">
        <soap:body use="literal"/>
      </wsdl:output>
    </wsdl:operation>
  </wsdl:binding>
  <wsdl:service name="SyncProcessDAOService">
    <wsdl:port name="SyncProcessDAOPort" binding="tns:SyncProcessDAOServiceSoapBinding">
      <soap:address location="http://localhost:8080/MySyncService/services/SyncProcessDAOPort"/>
    </wsdl:port>
  </wsdl:service>
</wsdl:definitions>

Answer 1

在客户端，您需要编写下面的代码来传递use/pwd作为

SyncProcessDAO client = (SyncProcessDAO)factory.create();
Map<String, Object> requestContext =   ((BindingProvider)client).getRequestContext();                              
Map<String, List<String>> requestHeaders = new HashMap<String, List<String>>();
requestHeaders.put("username", "user");
requestHeaders.put("Password", "pwd");
requestContext.put(MessageContext.HTTP_REQUEST_HEADERS, requestHeaders);

发送到服务器前请先加密密码

有关服务器端更改的更多详细信息，请参见下面的链接

http://examples.javacodegeeks.com/enterprise-java/jws/application-authentication-with-jax-ws/

如果您想要实现jax-WS-Security，那么请遵循以下链接

http://cxf.apache.org/docs/ws-security.html