XFire使用WSSecurity实现的简单验证

xfire-servlet.xml文件的内容：

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE beans PUBLIC "-//SPRING//DTD BEAN//EN" "http://www.springframework.org/dtd/spring-beans.dtd"  >

<beans default-autowire="byName">

 <!--引入XFire的预配置文件-->
 <import resource="classpath:org/codehaus/xfire/spring/xfire.xml" />

  
 <bean id="baseWebService"
  class="org.codehaus.xfire.spring.remoting.XFireExporter" lazy-init="false" abstract="true">

  <property name="serviceFactory">
   <ref bean="xfire.serviceFactory" />
  </property>

  <property name="xfire">
   <ref bean="xfire" />
  </property>
 </bean>
 
 <bean parent="baseWebService">
 
  <property name="serviceBean"><!-- applicationcontext的bean的名字-->
   <ref bean="bbtForum" /> 
  </property>

  <property name="serviceClass"><!--    导出的接口类 -->
   <value>com.export.BbtForumService</value>
  </property>

  <property name="name" value="BbtForumServiceUT"></property><!-- Web service 服务名-->

  <property name="inHandlers">
   <list>
    <ref bean="domInHandler" />
    <ref bean="wss4jInHandler"/>
   </list>
  </property>

 </bean>
 

 <!--  
  定义验证类
 -->
 <bean id="domInHandler" class="org.codehaus.xfire.util.dom.DOMInHandler"></bean>
 
 <bean id="wss4jInHandler" class="org.codehaus.xfire.security.wss4j.WSS4JInHandler">
  <property name="properties">
  <props>
   <prop key="action">UsernameToken</prop>
   <prop key="passwordCallbackClass">
   com.security.UtPasswordHandler
   </prop>
  </props>
  </property>
 </bean>
 <!--  
  END SNIPPET: xfire  
 -->

</beans>

 

com.security.UtPasswordHandler类的内容:

/**
 * 
 * 日期:2008-1-8
 */

package com.security;

import java.util.HashMap;
import java.util.Map;

import javax.security.auth.callback.Callback;
import javax.security.auth.callback.CallbackHandler;

import org.apache.ws.security.WSConstants;
import org.apache.ws.security.WSPasswordCallback;
import org.apache.ws.security.WSSecurityException;

public class UtPasswordHandler implements CallbackHandler {

 private static final Map pwMockDB = new HashMap();
 
 static{
  pwMockDB.put("user", "123456");
  pwMockDB.put("user1", "123456");
 }
 
 /* （非 Javadoc）
  * @see javax.security.auth.callback.CallbackHandler#handle(javax.security.auth.callback.Callback[])
  */
/* public void handle(Callback[] callbacks) throws IOException,
   UnsupportedCallbackException, {
  // TODO 自动生成方法存根

 }*/
 
 public void handle(Callback[] callbacks) throws WSSecurityException{
  
  WSPasswordCallback callback = (WSPasswordCallback)callbacks[0];
  
  String id = callback.getIdentifer();
  String validPw = (String)pwMockDB.get(id);
  
  if(WSConstants.PASSWORD_TEXT.equals(callback.getPasswordType())){
   String pw = callback.getPassword();
   if(pw==null||!pw.equalsIgnoreCase(validPw)){
    throw new WSSecurityException("密码不匹配!");
   }
  }else{
   callback.setPassword(validPw);
  }
 }

}

Java调用客户端:

package com.client;

import java.io.IOException;
import java.util.HashMap;
import java.util.Map;

import javax.security.auth.callback.Callback;
import javax.security.auth.callback.CallbackHandler;
import javax.security.auth.callback.UnsupportedCallbackException;

import org.apache.ws.security.WSPasswordCallback;

public class UtClientPasswordHandler implements CallbackHandler {

 private static final Map<String,String> pwMockDB = new HashMap<String,String>(); 
 static{
  pwMockDB.put("user","123456");

   pwMockDB.put("user1","123456");
 }
 
 public void handle(Callback[] callbacks) throws IOException,
   UnsupportedCallbackException {
  
  // TODO 自动生成方法存根
  
  WSPasswordCallback callback = (WSPasswordCallback)callbacks[0];
  
  String id = callback.getIdentifer();
  
  callback.setPassword(pwMockDB.get(id));

 }

}

 

调用的JSP文件:

<%@ page language="java" import="java.util.*" pageEncoding="UTF-8"%>

<%@ page import="com.export.Iquery" %>
<%@ page import="org.codehaus.xfire.XFireFactory" %>
<%@ page import="org.codehaus.xfire.client.XFireProxyFactory" %>
<%@ page import="org.codehaus.xfire.service.binding.ObjectServiceFactory" %>
<%@ page import="org.codehaus.xfire.service.Service" %>
<%@ page import="java.net.MalformedURLException" %>
<%@ page import="org.codehaus.xfire.client.XFireProxy"%>
<%@ page import="org.codehaus.xfire.client.Client"%>
<%@ page import="java.lang.reflect.Proxy" %>
<%@ page import="com.security.UtPasswordHandler" %>
<%@ page import="com.exportclass.MzBrda" %>
<%@ page import="org.apache.ws.security.handler.WSHandlerConstants" %>
<%@ page import="org.apache.ws.security.WSConstants" %>
<%@ page import="com.client.UtClientPasswordHandler" %>
<%@ page import="org.codehaus.xfire.util.dom.DOMOutHandler" %>
<%@ page import="org.codehaus.xfire.security.wss4j.WSS4JOutHandler" %>

<%
String path = request.getContextPath();
String basePath = request.getScheme()+"://"+request.getServerName()+":"+request.getServerPort()+path+"/";

%>

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">

<html>
  <head>
    <base href="<%=basePath%>">
   
    <title>My JSP 'MyJsp.jsp' starting page</title>
   
 <meta http-equiv="pragma" content="no-cache">
 <meta http-equiv="cache-control" content="no-cache">
 <meta http-equiv="expires" content="0">   
 <meta http-equiv="keywords" content="keyword1,keyword2,keyword3">
 <meta http-equiv="description" content="This is my page">
 <!--
 <link rel="stylesheet" type="text/css" href="styles.css">
 -->

  </head>
 
  <%
 
      Service srvcModel = new ObjectServiceFactory()
                .create(Iquery.class);
        XFireProxyFactory factory = new XFireProxyFactory(XFireFactory
                .newInstance().getXFire());
                
    
         
        String helloWorldURL = "http://192.17.99.20/yygh/services/Query";
     
        try {
         Iquery srvc = (Iquery) factory.create(
                    srvcModel, helloWorldURL);
          
  
          Client client = ((XFireProxy)Proxy.getInvocationHandler(srvc)).getClient();
          
         
         
          
         client.addOutHandler(new DOMOutHandler());
  
   Properties properties = new Properties();
   
    properties.setProperty(WSHandlerConstants.ACTION,WSHandlerConstants.USERNAME_TOKEN);//密码类
   properties.setProperty(WSHandlerConstants.PASSWORD_TYPE, WSConstants.PW_DIGEST); //密码类型 /PW_DIGEST以摘要方式发送，PW_TEXT以明文方式发送
    properties.setProperty(WSHandlerConstants.USER, "user");
   properties.setProperty("password","123456");
   
    properties.setProperty(WSHandlerConstants.PW_CALLBACK_CLASS, UtClientPasswordHandler.class.getName());
   
   client.addOutHandler(new WSS4JOutHandler(properties));

    

     out.println("ksdm:"+srvc.GetKsdm().size());

 

      } catch (MalformedURLException e) {
            e.printStackTrace();
        }
   
    
   %>
 
 
  <body><h2><br></h2>
  <h2><font face="幼圆" size="7"><strong>
   先生们,女士们, 这是测试页面,当你看到这个页面时表示webservice服务器测试成功. </strong>
     </font></h2>
  </body>

</html>