web service 实例 axis2框架下基于rampart安全认证的

一、web sevices服务端axis2框架下基于rampart安全认证实例：1、下载axis2.war包；rampart-bin的压缩包（此处注意axis2的版本与jdk、tomcat 版本的兼容性问题）2、解压axis2压缩包3、搭建web项目datatransmission；将lib下的jar包导入到项目中；复制axis2-web目录到项目根目录；将WEB-INF下的conf、modules、services目录复制到项目根目录的WEB-INF下；再在刚刚考入的services目录下新建任意文件夹(例webs)；再在刚刚新建的文件夹webs下新建META-INF文件目录；再在META-INF文件目录下新建services.xml文件；4、services.xml文件内容如下<?xml version="1.0"encoding="UTF-8"?><serviceGroup><service name="BusinessService"><description>test rampart service</description><operation name="getCurData"><messageReceiverclass="org.apache.axis2.rpc.receivers.RPCMessageReceiver"/></operation><operation name="rampartMethod"><messageReceiverclass="org.apache.axis2.rpc.receivers.RPCMessageReceiver"/></operation><parameter name="ServiceClass"locked="false">com.service.BusinessService</parameter><module ref="rampart"/><parameter name="InflowSecurity"><action><items>UsernameToken</items><passwordCallbackClass>com.rampart.WsServiceAuthHandler</passwordCallbackCl ass></action></parameter></service></serviceGroup>注：这里service暴露两个方法rampartMethod 及getCurData 供客户的访问调用；如果服务端的某些方法不想被访问可设为私有或放在其他的包下面；（同时axis2暂不支持list等集合方法【这里有些模糊，大家可以尝试下】）5、解压rampart-1.4.zip将lib目录下的jar包导入到项目中；将modules下的文件考入到项目根目录下modules文件目录中。

文件目录结构如下：6、在项目的web.xml文件中添加<servlet><display-name>Apache-Axis Servlet</display-name><servlet-name>AxisServlet</servlet-name><servlet-class>org.apache.axis2.transport.http.AxisServlet</servlet-class> <load-on-startup>1</load-on-startup></servlet><servlet-mapping><servlet-name>AxisServlet</servlet-name><url-pattern>/servlet/AxisServlet</url-pattern></servlet-mapping><servlet-mapping><servlet-name>AxisServlet</servlet-name><url-pattern>*.jws</url-pattern></servlet-mapping><servlet-mapping><servlet-name>AxisServlet</servlet-name><url-pattern>/services/*</url-pattern></servlet-mapping>7、项目整体目录结构8、新建类8.1WsServiceAuthHandler.java 内容如下：package com.rampart;import java.io.IOException;import javax.security.auth.callback.Callback;import javax.security.auth.callback.CallbackHandler;import javax.security.auth.callback.UnsupportedCallbackException;import org.apache.log4j.Logger;import org.apache.ws.security.WSPasswordCallback;/**** @author leno**/public class WsServiceAuthHandler implements CallbackHandler {private final static String USERNAME = "csxt";private final static String PASSWORD = "123456";private Logger log = Logger.getLogger(WsServiceAuthHandler.class);/*** 〈一句话功能简述〉〈功能详细描述〉** @seejavax.security.auth.callback.CallbackHandler#handle(javax.security.auth.cal lback.Callback[])* @param callbacks* @throws IOException* @throws UnsupportedCallbackException*/@Overridepublic void handle(Callback[] callbacks) throws IOException, UnsupportedCallbackException {WSPasswordCallback pCallback = (WSPasswordCallback) callbacks[0];// 标识符String id = pCallback.getIdentifer();// 此处获取到的password为null，但是并不代表服务端没有拿到该属性。

// 这是因为客户端提交过来的密码在SOAP 消息中已经被加密为MD5// 的字符串，如果我们要在回调方法中作比较，那么第一步要做的就是把服务端准备好的密码加密为MD5 字符串，由于MD5// 算法参数不同结果也会有差别，//String password = pCallback.getPassword();("接收到WebService请求，userName[" + id + "]");if (null == USERNAME) {("验证用户失败，原因：您没有权限访问,用户名为空！");throw new UnsupportedCallbackException(pCallback, "您没有权限访问,用户名为空！");} else if (!USERNAME.equals(id)) {("验证用户失败，原因：您没有权限访问,用户名错误！");throw new UnsupportedCallbackException(pCallback, "您没有权限访问,用户名错误！");} else {/*** 1. 查询数据库，得到数据库中该用户名对应密码* 2. 设置密码，wss4j会自动将你设置的密码与客户端传递的密码进行匹配* 3. 如果相同，则放行，否则返回权限不足信息*/pCallback.setPassword(PASSWORD);}pCallback.setIdentifier("service");}}8.2新建类BusinessService.java 内容如下：package com.service;/*** @see ws获取数据** @author leno** @date 2014/11/10*/public class BusinessService {public String getCurData() {return "hello world!";}public String rampartMethod(String param) {return "hello world!" + param;}}8.3项目结构：9、服务端基本搭建完毕。

客户端：1、新建一个java project 整体目录如下2、将axis2 lib 下的jar包与rampart lib下的jar包导入项目；在项目下建资源包repository.modules将axis2 modules 下的文件与rampart modules 下的文件考入；在项目下建资源包repository将axis2-1.6.1-war\axis2\WEB-INF\conf 下的文件axis2.xml考入；打开axis2.xml文件，找到<module ref="addressing"/>并在其下面添加内容：<module ref="rampart"/><parameter name="OutflowSecurity"><action><items>UsernameToken</items><user>csxt</user><passwordCallbackClass>com.rampart.client.ClientAuthHandler</passwordCallba ckClass></action></parameter>3、新建类3.1、ClientAuthHandler.java 内容如下：package com.rampart.client;import java.io.IOException;import javax.security.auth.callback.Callback;import javax.security.auth.callback.CallbackHandler;import javax.security.auth.callback.UnsupportedCallbackException;import org.apache.ws.security.WSPasswordCallback;/**** @author leno**/public class ClientAuthHandler implements CallbackHandler {private final static String USERNAME = "csxt";private final static String PASSWORD = "123456";/*** 〈一句话功能简述〉〈功能详细描述〉** @seejavax.security.auth.callback.CallbackHandler#handle(javax.security.auth.cal lback.Callback[])* @param callbacks* @throws IOException* @throws UnsupportedCallbackException*/@Overridepublic void handle(Callback[] callbacks) throws IOException, UnsupportedCallbackException {//客户端 wss4j内容发送到服务端.W SPasswordCallback pCallback = (WSPasswordCallback) callbacks[0];S tring id = pCallback.getIdentifer();//客户端===getIdentifer==="+idi f (USERNAME.equals(id)) {pCallback.setPassword(PASSWORD);}}}3.2、DocumentClient.java 内容如下：package com.client;import org.apache.axiom.om.OMAbstractFactory;import org.apache.axiom.om.OMElement;import org.apache.axiom.om.OMFactory;import org.apache.axiom.om.OMNamespace;import org.apache.axis2.addressing.EndpointReference;import org.apache.axis2.client.Options;import org.apache.axis2.client.ServiceClient;import org.apache.axis2.context.ConfigurationContext;import org.apache.axis2.context.ConfigurationContextFactory;/*** @see ws客户端* @author leno**/public class DocumentClient {//服务地址private static EndpointReference targetEPR = new EndpointReference( "http://localhost:80/datatransmission/services/BusinessService");/*** @see获取repository路径* @return*/private String getAxis2ConfPath() {StringBuilder confPath = new StringBuilder();confPath.append(this.getClass().getResource("/").getPath());confPath.append("repository");return confPath.toString();}/*** @see获取repository路径下axis2.xml文件* @return*/private String getAxis2ConfFilePath() {String confFilePath = "";confFilePath = getAxis2ConfPath() + "/axis2.xml";return confFilePath;}public void invokeRampartService() {Options options = new Options();options.setTo(targetEPR);options.setAction("urn:rampartMethod");ServiceClient sender = null;try {String confPath = getAxis2ConfPath();String confFilePath = getAxis2ConfFilePath();ConfigurationContext configContext = ConfigurationContextFactory .createConfigurationContextFromFileSystem(confPath, confFilePath);sender = new ServiceClient(configContext, null);sender.setOptions(options);OMFactory fac = OMAbstractFactory.getOMFactory();OMNamespace omNs = fac.createOMNamespace("","");OMElement callMethod = fac.createOMElement("getCurData", omNs);// //传参数--(参数名称/参数值)// OMElement inner1 = fac.createOMElement("param", omNs);// inner1.setText("abc");// callMethod.addChild(inner1);OMElement response = sender.sendReceive(callMethod);//获取返回来的参数--XML格式//System.out.println("response ====>" + response);//取出XML格式下第一个参数(所有的数据：封装为json数据格式)System.out.println(response.getFirstElement().getText());} catch (Exception e) {e.printStackTrace();} finally {if (sender != null)sender.disengageModule("addressing");try {sender.cleanup();} catch (Exception e) {e.printStackTrace();}}}public static void main(String[] args) {DocumentClient documentClient = new DocumentClient();documentClient.invokeRampartService();}}4、客户端搭建完毕。