无法处理 mustUnderstand 标头：http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0

Posted 2023-02-19

【中文标题】无法处理 mustUnderstand 标头：http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd安全。返回故障

【英文标题】：Could not handle mustUnderstand headers: http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsdSecurity. Returning fault无法处理 mustUnderstand 标头：http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd安全。返回故障

【发布时间】：2020-06-01 06:10:21

【问题描述】：

我浏览了如下链接：SOAPFaultException "MustUnderstand headers (oasis-200401-wss-wssecurity-secext-1.0.xsd) are not understood"，但仍在苦苦挣扎。

我正在使用Spring Boot v2.2.2..RELEASE and SOAP 项目。

我正在将两个不同的 WSDL 文件加载到我的项目中。一个 URL 生成到 http://localhost:8080/employee/employee-soap，它工作正常。但是http://localhost:8080/student/student-soap 这给出了以下错误。

2020-02-17 15:31:00.241 WARN 20236 --- [nio-8080-exec-5] o.s.w.soap.server.SoapMessageDispatcher：无法处理 mustUnderstand 标头：http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd安全。返回故障

Java代码：

@EnableWs
@Configuration
public class AppConfig extends WsConfigurerAdapter 

    @SuppressWarnings( "rawtypes", "unchecked" )
    @Bean
    public ServletRegistrationBean messageDispatcherServlet(ApplicationContext applicationContext) 
        MessageDispatcherServlet servlet = new MessageDispatcherServlet();
        servlet.setApplicationContext(applicationContext);
        servlet.setTransformWsdlLocations(true);
        return new ServletRegistrationBean(servlet, "/*");
    

    @Bean
    public SaajSoapMessageFactory messageFactory() 
        SaajSoapMessageFactory messageFactory = new SaajSoapMessageFactory();
        messageFactory.setSoapVersion(SoapVersion.SOAP_11);
        messageFactory.afterPropertiesSet();
        return messageFactory;
    

    @Bean("empXSD")
    public XsdSchema organizationSchema() 
        return new SimpleXsdSchema(new ClassPathResource("/xsd/employee.xsd"));
    


    @Bean(name = "employee")
    public DefaultWsdl11Definition defaultWsdl11Definition(@Qualifier("empXSD") XsdSchema schema) 
        DefaultWsdl11Definition wsdl11Definition = new DefaultWsdl11Definition();
        wsdl11Definition.setPortTypeName("employee");
        wsdl11Definition.setLocationUri("employee/employee-soap");
        wsdl11Definition.setTargetNamespace("urn:example.com:dms:wsdls:employee");
        wsdl11Definition.setSchema(schema);
        wsdl11Definition.setCreateSoap11Binding(true);
        return wsdl11Definition;
    

    @Bean
    @Qualifier(value="stuXSD")
    public XsdSchema stuSchema() 
        return new SimpleXsdSchema(new ClassPathResource("/xsd/student.xsd"));
    

    @Bean(name = "student")
    public DefaultWsdl11Definition geographyWsdl11Definition(@Qualifier("stuXSD") XsdSchema schema) 
        DefaultWsdl11Definition wsdl11Definition = new DefaultWsdl11Definition();
        wsdl11Definition.setPortTypeName("student");
        wsdl11Definition.setLocationUri("student-soap");
        wsdl11Definition.setTargetNamespace("urn:example.com:dms:wsdls:student");
        wsdl11Definition.setSchema(schema);
        wsdl11Definition.setCreateSoap11Binding(true);
        return wsdl11Definition;
    


    @Override
    public void addInterceptors(List<EndpointInterceptor> interceptors) 
        interceptors.add(new Interceptor(endpoints, req));
    

代码：

@Configuration
public class SimpleMustUnderstandEndpointInterceptor implements SoapEndpointInterceptor
    private final String SAMPLE_NS = "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";

    @Override
    public boolean handleRequest(MessageContext messageContext, Object endpoint) throws Exception 
        return true;
    

    @Override
    public boolean handleResponse(MessageContext messageContext, Object endpoint) throws Exception 
        return true;
    

    @Override
    public boolean handleFault(MessageContext messageContext, Object endpoint) throws Exception 
        return true;
    

    @Override
    public void afterCompletion(MessageContext messageContext, Object endpoint, Exception ex) throws Exception 

    

    @Override
    public boolean understands(SoapHeaderElement header) 
        if(header.getName().getNamespaceURI().equalsIgnoreCase(SAMPLE_NS)) 
            return true;
        
        return false;
    

根据观察，看起来即使是这个 SoapEndpointInterceptor 也没有调用，在此之前只有它给出的错误。

在调用 SOAP 端点期间，下面的标头信息正在运行，并且它给出了我上面提到的错误。有什么指点吗？

<soapenv:Header><wsse:Security soapenv:mustUnderstand="1" 
xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity- 
secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401- 
wss-wssecurity-utility-1.0.xsd"><wsse:UsernameToken wsu:Id="UsernameToken- 
518482F2CDC2F635FF158202815227129"><wsse:Username>aispoc_usr1</wsse:Username> 
<wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss- 
username-token-profile-1.0#PasswordText">aispoc_usr1</wsse:Password><wsse:Nonce 
EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap- 
message-security-1.0#Base64Binary">/fdGCEilz/dkVeZE05b7LQ==</wsse:Nonce> 

2020-02-18T12:15:52.271Z

【参考方案1】：

您可以尝试以下配置来解决问题。

@Bean
public Wss4jSecurityInterceptor securityInterceptor() 
    Wss4jSecurityInterceptor security = new Wss4jSecurityInterceptor();
    security.setValidationActions("NoSecurity");
    security.setValidateRequest(false);
    security.setValidateResponse(true);
    return security;


@Override
public void addInterceptors(List<EndpointInterceptor> interceptors) 
    interceptors.add(securityInterceptor());

【参考方案2】：

我通过查看https://docs.spring.io/spring-ws/site/apidocs/org/springframework/ws/soap/security/wss4j/Wss4jSecurityInterceptor.html 和https://memorynotfound.com/spring-ws-username-password-authentication-wss4j/ 找到了解决方案。

我只是在下面使用了 bean，它开始工作正常。

@Bean
public Wss4jSecurityInterceptor securityInterceptor() 
  Wss4jSecurityInterceptor security = new Wss4jSecurityInterceptor();
  security.setSecurementActions("NoSecurity");
  security.setSecurementPasswordType(WSConstants.PW_TEXT);
  return security;