通知 网站从因情语写改为晴雨,这个网站的模板也从calmlog_ex改为 whimurmur

webserive学习记录5-拦截器完成登陆校验

1901人浏览 / 0人评论 / | 作者:因情语写  | 分类: 网络  | 标签: 网络  /  webservice  | 

作者:因情语写

链接:https://www.proprogrammar.com/article/428

声明:请尊重原作者的劳动,如需转载请注明出处


  说说cxf中的拦截器,可以分为系统拦截器(如日志拦截器)和自定义拦截器,也可以分为出拦截器和入拦截器,也可以分为服务器拦截器和客户端拦截器。

  下面将实现一个可以进行登陆验证的拦截器,其中用户名作为方法参数传递,密码放在发送给服务器的xml的header中。

  服务端

  代码结构如下:

 

  ValidUser:

  applicationContext

  CXFServices

<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:jaxws="http://cxf.apache.org/jaxws"
    xmlns:soap="http://cxf.apache.org/bindings/soap"
    xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd 
            http://cxf.apache.org/jaxws http://cxf.apache.org/schemas/jaxws.xsd 
            http://cxf.apache.org/bindings/soap http://cxf.apache.org/schemas/configuration/soap.xsd">
 
    <!-- 1.使用jaxws:endpoint标签的配置发布一个 webservice 2.用implementor属性配置服务提供实现类
        3.address属性配置外部访问的相对路径 4.使用 jaxws:inInterceptors 标签配置2个日志拦截器,用来打印调用时的日志信息
        5.注意:在此配置文件中,需加入jaxws与soap命名空间 -->
         
    <!-- <import resource="classpath*:META-INF/cxf/cxf.xml" />
    <import resource="classpath*:META-INF/cxf/cxf-extension-soap.xml" /> 
    <import resource="classpath*:META-INF/cxf/cxf-servlet.xml" />  -->
     
    <bean id="jaxWsServiceFactoryBean" class="org.apache.cxf.jaxws.support.JaxWsServiceFactoryBean">
        <property name="wrapped" value="true" />
    </bean>
         
    <jaxws:endpoint id="loginCheckService"
        implementor="login.check.ws.impl.LoginCheck" address="/loginCheck">
        <jaxws:inInterceptors>
            <bean id="inLoggingInterceptor" class="org.apache.cxf.interceptor.LoggingInInterceptor" />
            <bean id="outLoggingInterceptor" class="org.apache.cxf.interceptor.LoggingOutInterceptor" />
            <bean id="loginCheckInterceptor" class="login.check.ws.impl.LoginCheck" />
        </jaxws:inInterceptors>
        <jaxws:serviceFactory>
            <ref bean="jaxWsServiceFactoryBean" />
        </jaxws:serviceFactory>
    </jaxws:endpoint>
 
</beans> 

    web.xml文件

<?xml version="1.0" encoding="UTF-8"?>
<web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://java.sun.com/xml/ns/javaee" xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd" id="WebApp_ID" version="3.0">
   <display-name>logincheckws</display-name>
   <welcome-file-list>
     <welcome-file>index.html</welcome-file>
     <welcome-file>index.htm</welcome-file>
     <welcome-file>index.jsp</welcome-file>
     <welcome-file>default.html</welcome-file>
     <welcome-file>default.htm</welcome-file>
     <welcome-file>default.jsp</welcome-file>
   </welcome-file-list>
   
   <!-- 加入spring --> 
   <context-param> 
     <param-name>contextConfigLocation</param-name> 
     <param-value>classpath:applicationContext*.xml</param-value> 
   </context-param> 
   <listener> 
    <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class> 
   </listener> 
   
  <!-- 加入CXF支持 --> 
   <servlet> 
        <description>Apache CXF Endpoint</description> 
        <display-name>cxf</display-name> 
        <servlet-name>cxf</servlet-name> 
        <servlet-class>org.apache.cxf.transport.servlet.CXFServlet</servlet-class> 
        <load-on-startup>1</load-on-startup> 
    </servlet> 
    <servlet-mapping> 
        <servlet-name>cxf</servlet-name> 
        <url-pattern>/services/*</url-pattern> 
    </servlet-mapping>
     
</web-app>

  LoginCheck:继承了AbstractPhaseInterceptor,实现了handleMessage方法,用来从客户端发来soap消息头中获取密码,并会保存在ThreadLocal变量中,供校验用户时使用。

package login.check.ws.impl;
 
import java.util.List;
 
import javax.jws.WebService;
import javax.xml.namespace.QName;
 
import org.apache.cxf.binding.soap.SoapMessage;
import org.apache.cxf.headers.Header;
import org.apache.cxf.interceptor.Fault;
import org.apache.cxf.phase.AbstractPhaseInterceptor;
import org.apache.cxf.phase.Phase;
import org.w3c.dom.Element;
import org.w3c.dom.NodeList;
 
import login.check.constant.ValidUser;
import login.check.ws.interf.ILoginCheck;
 
@WebService(endpointInterface="login.check.ws.interf.ILoginCheck", targetNamespace="http://login.check.ws")
public class LoginCheck extends AbstractPhaseInterceptor<SoapMessage> implements ILoginCheck{
 
    private static final ThreadLocal<String> passwords = new ThreadLocal<>();
     
    public LoginCheck() {
        super(Phase.PRE_PROTOCOL);
    }
 
    @Override
    public boolean checkUser(String username) {
        return ValidUser.validUser.get(username).equals(passwords.get());
    }
 
    @Override
    public void handleMessage(SoapMessage message) throws Fault {
        List<Header> headers = message.getHeaders();
        if(headers == null || headers.size() == 0)
        {
            throw new Fault(new RuntimeException("无密码信息"));
        }
         
        Element passwordEle = null;
 
        for(Header header: headers)
        {
            QName qName = header.getName();
            String nameSpace = qName.getNamespaceURI();
            String tagName = qName.getLocalPart();
             
            if(nameSpace != null && nameSpace.equals("http://login.check.ws.password") && tagName != null)
            {
                passwordEle = (Element)header.getObject();
                break;
            }
        }
         
        if(null == passwordEle)
        {
            throw new Fault(new RuntimeException("无密码信息"));
        }
         
        NodeList passwordList = passwordEle.getElementsByTagName("password");
         
        if(passwordList == null || passwordList.getLength() != 1)
        {
            throw new Fault(new RuntimeException("密码信息错误"));
        }
         
        passwords.set(passwordList.item(0).getTextContent());
    }
 
}

   客户端

  首先是生成客户端代码,在此不在赘述,

    

 

  然后自定义一个拦截器,向soap消息头中写入密码信息,这里密码的获取也用到的ThreadLocal变量,在测试类中将密码存入ThreadLocal变量中,然后在拦截器中就可以获取到密码了。

  拦截器代码如下:

package login.check.ws.client;
 
import java.util.List;
 
import javax.xml.namespace.QName;
 
import org.apache.cxf.binding.soap.SoapMessage;
import org.apache.cxf.headers.Header;
import org.apache.cxf.helpers.DOMUtils;
import org.apache.cxf.interceptor.Fault;
import org.apache.cxf.phase.AbstractPhaseInterceptor;
import org.apache.cxf.phase.Phase;
import org.w3c.dom.Document;
import org.w3c.dom.Element;
 
import login.check.ws.test.LoginTest;
 
public class PasswordInterceptor extends AbstractPhaseInterceptor<SoapMessage> {
 
    public PasswordInterceptor() {
        super(Phase.PREPARE_SEND);
    }
 
    @Override
    public void handleMessage(SoapMessage message) throws Fault {
        List<Header> headers = message.getHeaders();
        Document doc = DOMUtils.createDocument();
         
        Element passwordNS = doc.createElementNS("http://login.check.ws.password", "loginCheck");
        Element password = doc.createElement("password");
        password.setTextContent(LoginTest.password.get());
         
        passwordNS.appendChild(password);
         
        headers.add(new Header(new QName("loginCheck"), passwordNS));
    }
 
}

   测试代码如下:

  使用了三个拦截器并将密码存入了ThreadLocal中,

  测试结果如下:

   代码地址:logincheckwebservice.rar


亲爱的读者:有时间可以点赞评论一下

点赞(0) 打赏

全部评论

还没有评论!
广告位-帮帮忙点下广告