spring boot cxf 安全认证

向右看齐 2023-07-24 02:40 20阅读 0赞

# 项目结构 #

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzI2MjY0MjM3_size_16_color_FFFFFF_t_70]

# spring boot cxf #

[https://blog.csdn.net/qq\_26264237/article/details/105373000][https_blog.csdn.net_qq_26264237_article_details_105373000]

# 在上个项目基础上修改 #

安全认证使用`spring-ws-security`

<parent>
    		<groupId>org.springframework.boot</groupId>
    		<artifactId>spring-boot-parent</artifactId>
    		<version>1.4.5.RELEASE</version>
    	</parent>
    	<properties>
    		<maven.compiler.source>1.8</maven.compiler.source>
    		<maven.compiler.target>1.8</maven.compiler.target>
    	</properties>
    	<dependencies>
    		<dependency>
    			<groupId>org.apache.cxf</groupId>
    			<artifactId>cxf-spring-boot-starter-jaxws</artifactId>
    			<version>3.1.12</version>
    		</dependency>
    		<dependency>
    			<groupId>org.springframework.ws</groupId>
    			<artifactId>spring-ws-security</artifactId>
    		</dependency>
    	</dependencies>

AuthInterceptor为权限过滤

import java.util.List;
    import org.apache.cxf.binding.soap.SoapHeader;
    import org.apache.cxf.binding.soap.SoapMessage;
    import org.apache.cxf.headers.Header;
    import org.apache.cxf.interceptor.Fault;
    import org.apache.cxf.phase.AbstractPhaseInterceptor;
    import org.apache.cxf.phase.Phase;
    import org.opensaml.ws.soap.common.SOAPException;
    import org.springframework.stereotype.Component;
    import org.springframework.util.StringUtils;
    import org.w3c.dom.Element;
    @Component
    public class AuthInterceptor extends AbstractPhaseInterceptor<SoapMessage> { 
    	private static final String USERNAME = "root";
    	private static final String PASSWORD = "admin";
    	public AuthInterceptor() { 
    		// 定义在哪个阶段进行拦截
    		super(Phase.PRE_PROTOCOL);
    	}
    	@Override
    	public void handleMessage(SoapMessage soapMessage) throws Fault { 
    		List<Header> headers = soapMessage.getHeaders();
    		String username = null;
    		String password = null;
    		if (headers == null || headers.isEmpty()) { 
    			throw new Fault(new IllegalArgumentException("找不到Header，无法验证用户信息"));
    		}
    		// 获取用户名,密码
    		for (Header header : headers) { 
    			SoapHeader soapHeader = (SoapHeader) header;
    			Element e = (Element) soapHeader.getObject();
    			username = e.getAttribute("username");
    			password = e.getAttribute("password");
    			if (StringUtils.isEmpty(username) || StringUtils.isEmpty(password)) { 
    				throw new Fault(new IllegalArgumentException("用户信息为空"));
    			}
    		}
    		// 校验用户名密码
    		if (!(USERNAME.equals(username) && PASSWORD.equals(password))) { 
    			SOAPException soapExc = new SOAPException("认证失败");
    			System.err.println("用户认证信息错误");
    			throw new Fault(soapExc);
    		}
    	}
    }

@Configuration
    public class CxfConfig { 
    	@Autowired
    	private Bus bus;
    	@Autowired
    	private HelloService helloService;
    	@Autowired
    	AuthInterceptor authInterceptor;
    	@Bean
    	public Endpoint endpoint() { 
    		EndpointImpl endpoint = new EndpointImpl(bus, helloService);
    		endpoint.publish("/helloService");
    		endpoint.getInInterceptors().add(authInterceptor);
    		// 访问连接： http://localhost:8080/services/helloService?wsdl
    		return endpoint;
    	}
    }

# 启动后访问 #

访问连接： http://localhost:8080/services/helloService?wsdl  
是否增加过滤器对生成的wsdl文件并无影响  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzI2MjY0MjM3_size_16_color_FFFFFF_t_70 1]

# 客户端增加认证信息(soapHeader) #

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzI2MjY0MjM3_size_16_color_FFFFFF_t_70 2]

<dependencies>
    		<dependency>
    			<groupId>org.apache.commons</groupId>
    			<artifactId>commons-lang3</artifactId>
    			<version>3.10</version>
    		</dependency>
    		<dependency>
    			<groupId>org.apache.cxf</groupId>
    			<artifactId>cxf-rt-transports-http</artifactId>
    			<version>3.1.12</version>
    		</dependency>
    		<dependency>
    			<groupId>org.apache.cxf</groupId>
    			<artifactId>cxf-rt-frontend-jaxws</artifactId>
    			<version>3.1.12</version>
    		</dependency>
    	</dependencies>

/** * 添加soapHeader */
    public class ClientCheckInterceptor extends AbstractPhaseInterceptor<SoapMessage> { 
    	private static final String USERNAME = "root";
    	private static final String PASSWORD = "admin";
    	public ClientCheckInterceptor() { 
    		super(Phase.PREPARE_SEND);
    	}
    	@Override
    	public void handleMessage(SoapMessage message) throws Fault { 
    		List<Header> headers = message.getHeaders();
    		Document document = DOMUtils.createDocument();
    		Element authorEle = document.createElement("author");
    		authorEle.setAttribute("username", USERNAME);
    		authorEle.setAttribute("password", PASSWORD);
    		headers.add(new Header(new QName(""), authorEle));
    	}
    }

import org.apache.cxf.endpoint.Client;
    import org.apache.cxf.frontend.ClientProxy;
    import org.junit.Test;
    import com.sky.cxf01.interceptor.ClientCheckInterceptor;
    import com.sky.cxf01.service.HelloService;
    import com.sky.cxf01.service.impl.HelloServiceImplService;
    public class DemoClient { 
    	@Test
    	public void testCxfSecurityServer() { 
    		HelloService service = new HelloServiceImplService().getHelloServiceImplPort();
    		Client client = ClientProxy.getClient(service);
    		client.getOutInterceptors().add(new ClientCheckInterceptor());
    		String sayHello = service.sayHello("Lebron");
    		System.err.println("sayHello=" + sayHello);
    		// sayHello=Hello, Lebron
    	}
    }

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzI2MjY0MjM3_size_16_color_FFFFFF_t_70]: /images/20230528/36e4d01e69c04aef84c8e452ac6a58af.png
[https_blog.csdn.net_qq_26264237_article_details_105373000]: https://blog.csdn.net/qq_26264237/article/details/105373000
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzI2MjY0MjM3_size_16_color_FFFFFF_t_70 1]: /images/20230528/8da5f0dc7bf24081909f1010d7a9c2cc.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzI2MjY0MjM3_size_16_color_FFFFFF_t_70 2]: /images/20230528/481e4588c0f14075b7a6a0662f6943cc.png