1500字范文,内容丰富有趣,写作好帮手!
1500字范文 > 使用HttpClient发送WebService Security(WSS)请求

使用HttpClient发送WebService Security(WSS)请求

时间:2023-11-13 15:56:47

相关推荐

使用HttpClient发送WebService Security(WSS)请求

分享一下我老师大神的人工智能教程!零基础,通俗易懂!/jiangjunshow

也欢迎大家转载本篇文章。分享知识,造福人民,实现我们中华民族伟大复兴!

使用HttpClient发起普通的WebService还是非常方便的,为了测试代码能够正常运行,最好是先准备以下的JAR包:

commons-codec-1.3.jar

commons-httpclient-3.1.jar

commons-logging-1.1.1.jar

not-yet-commons-ssl-0.3.11.jar

saxon-9.1.0.8j.jar

wsdl4j-1.6.2-fixed.jar

wss4j-1.5.8.jar

xalan-2.7.1.jar

xbean-fixed-2.4.0.jar

xbean_xpath-2.4.0.jar

xercesImpl.jar

xml-apis-2.9.1.jar

xml-apis.jar

xmlpublic-2.4.0.jar

xmlsec-1.4.3.jar

这里先看一个简单的调用示例,几行代码就可以搞定:

public static void sendWSRequest() throws IOException, SAXException, ParserConfigurationException{ String soapRequestXml = "(You soapRequest Xml)"; PostMethod postmethod = new PostMethod("http://****/soapAddress"); byte[] b = soapRequestXml.getBytes("UTF-8"); InputStream is = new ByteArrayInputStream(b, 0, b.length); RequestEntity re = new InputStreamRequestEntity(is, b.length,"application/xop+xml; charset=UTF-8; type=\"text/xml\""); postmethod.setRequestEntity(re); HttpClient httpClient = new HttpClient(); httpClient.executeMethod(postmethod); System.out.println(postmethod.getResponseBodyAsString()); }

这里的soapReuqestXml是符合soap请求规范的XML String,如下:

<soapenv:Envelope xmlns:soapenv="/soap/envelope/"> <soapenv:Header> </soapenv:Header> <soapenv:Body><Field1>600001</Field1><Field2>3123619</Field2><Field3>HK</Field3> </soapenv:Body></soapenv:Envelope>

这里的Header因为是普通的SOAP请求,所以是可以为空的;如果是WebService Security请求,我们需要做的就是在Header里面补充上Security Header就OK了,而下面我们要继续的就是为WSS请求补充Security Header。

这里假设你已经准备好了JKS文件了,并且知道JKS的密码和需要使用的ALIAS的密码,后面要做的就是使用Apache的WS Security生成Security Header了。

第一步,先获取Crypto,下面是一个我去掉了一些东西,但是功能完整实现类,不过使用者需要根据自己的情况修改JKS文件名以及密码等:

import java.io.FileInputStream;import java.io.IOException;import java.io.InputStream;import java.security.KeyStore;import java.util.Properties;import mons.ssl.KeyStoreBuilder;import mons.ssl.Util;import org.apache.ponents.crypto.CredentialException;import org.apache.ponents.crypto.Crypto;import org.apache.ponents.crypto.Merlin;public class KeyMaterialWssCrypto{private KeyStore keyStore;private static Crypto crypto;//Notice: This must be modified.String jksFile = "Your JKS File.";String jksPass = "Your JKS Password.";String alias = "The jks alias";String aliasPass = "The jks alias password";public KeyStore load() throws Exception{if( keyStore != null ){return keyStore;}if( !isEmpty( alias ) && !isEmpty( aliasPass ) ){keyStore = KeyStoreBuilder.build( Util.streamToBytes( new FileInputStream( jksFile ) ),alias.getBytes(), jksPass.toCharArray(), aliasPass.toCharArray() );}else{keyStore = KeyStoreBuilder.build( Util.streamToBytes( new FileInputStream( jksFile ) ),jksPass.toCharArray() );}return keyStore;}public Crypto getCrypto() throws CredentialException, IOException{if(crypto==null){Properties properties = new Properties();properties.put( "org.apache.ws.security.crypto.merlin.file", jksFile );properties.put( "org.apache.ws.security.crypto.merlin.keystore.provider", "this" );if( !isEmpty( alias ) )properties.put( "org.apache.ws.security.crypto.merlin.keystore.alias", alias );if( !isEmpty( aliasPass ) )properties.put( "org.apache.ws.security.crypto.merlin.alias.password", aliasPass );crypto = new KeyMaterialCrypto( properties );}return crypto;}private class KeyMaterialCrypto extends Merlin{private KeyMaterialCrypto( Properties properties ) throws CredentialException, IOException{super( properties );}@Overridepublic KeyStore load( InputStream input, String storepass, String provider, String type )throws CredentialException{if( "this".equals( provider ) ){try{return CopyOfKeyMaterialWssCrypto.this.load();}catch( Exception e ){throw new CredentialException( 0, null, e );}}elsereturn super.load( input, storepass, provider, type );}}public static boolean isEmpty(String str){if(str==null || "".equals(str.trim())){return true;}return false;}}

第二步,根据生成的Crypto生成WSS Header,首先需要将WS请求字符串转换为Document对象,然后才可以的,看下面源码:

import java.io.IOException;import org.apache.ws.security.WSSecurityException;import org.apache.ponents.crypto.CredentialException;import org.apache.ws.security.message.WSSecHeader;import org.apache.ws.security.message.WSSecSignature;import org.w3c.dom.Document;import com.ubs.tools.wsclient.util.StringUtil;import com.ubs.tools.wsclient.wsdl.wss.crypto.KeyMaterialWssCrypto;import com.ubs.tools.wsclient.wsdl.wss.crypto.WssCrypto;/*** * @author libinfeng**/public class CopyOfWSSUtil {/** * Add Web Service Security Header to Request Document * @param doc * @param wssEntry * @return * @throws IOException * @throws CredentialException * @throws WSSecurityException * @throws Exception */public static void addWSSecurity(Document doc, WSSEntry wssEntry ) throws WSSecurityException, CredentialException, IOException{KeyMaterialWssCrypto wssCrypto = new KeyMaterialWssCrypto(wssEntry);WSSecSignature wssSign = new WSSecSignature();wssSign.setUserInfo( wssEntry.getAlias(), wssEntry.getAliasPassword() );if( wssEntry.getKeyIdentifierType() != 0 )wssSign.setKeyIdentifierType( wssEntry.getKeyIdentifierType() );if( !StringUtil.isEmpty( wssEntry.getSignatureAlgorithm() ) )wssSign.setSignatureAlgorithm( wssEntry.getSignatureAlgorithm() );if( !StringUtil.isEmpty( wssEntry.getSignatureCanonicalization() ) )wssSign.setSigCanonicalization( wssEntry.getSignatureCanonicalization() );wssSign.setUseSingleCertificate( Boolean.FALSE );WSSecHeader secHeader = new WSSecHeader(); secHeader.insertSecurityHeader(doc); wssSign.build( doc, wssCrypto.getCrypto(), secHeader );}class WSSEntry {private String jksFile;private String jksPass;private String alias;private String aliasPassword;private int keyIdentifierType=3;private String signatureAlgorithm;private String signatureCanonicalization;private String cryptoProvider;//omit get and set method}}

通过调用方法addWSSecurity后,Document对象就包含了WSS Header了,此时只需要把这个Document对象转换为字符串,再通过HttpClient发送就OK了。

本文出自:冯立彬的博客

给我老师的人工智能教程打call!/jiangjunshow

本内容不代表本网观点和政治立场,如有侵犯你的权益请联系我们处理。
网友评论
网友评论仅供其表达个人看法,并不表明网站立场。