webserive学习记录5-拦截器完成登陆校验

Posted 2020-10-23 liunianfeiyu

　　说说cxf中的拦截器，可以分为系统拦截器（如日志拦截器)和自定义拦截器，也可以分为出拦截器和入拦截器，也可以分为服务器拦截器和客户端拦截器。

　　下面将实现一个可以进行登陆验证的拦截器，其中用户名作为方法参数传递，密码放在发送给服务器的xml的header中。

　　服务端

　　代码结构如下：

 

　　ValidUser：

　　applicationContext

　　CXFServices

<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:jaxws="http://cxf.apache.org/jaxws"
	xmlns:soap="http://cxf.apache.org/bindings/soap"
	xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd  
            http://cxf.apache.org/jaxws http://cxf.apache.org/schemas/jaxws.xsd  
            http://cxf.apache.org/bindings/soap http://cxf.apache.org/schemas/configuration/soap.xsd">

	<!-- 1.使用jaxws:endpoint标签的配置发布一个 webservice 2.用implementor属性配置服务提供实现类 
		3.address属性配置外部访问的相对路径 4.使用 jaxws:inInterceptors 标签配置2个日志拦截器，用来打印调用时的日志信息 
		5.注意：在此配置文件中，需加入jaxws与soap命名空间 -->
		
	<!-- <import resource="classpath*:META-INF/cxf/cxf.xml" /> 
	<import resource="classpath*:META-INF/cxf/cxf-extension-soap.xml" />  
	<import resource="classpath*:META-INF/cxf/cxf-servlet.xml" />	 -->
	
	<bean id="jaxWsServiceFactoryBean" class="org.apache.cxf.jaxws.support.JaxWsServiceFactoryBean">
		<property name="wrapped" value="true" />
	</bean>
		
	<jaxws:endpoint id="loginCheckService"
		implementor="login.check.ws.impl.LoginCheck" address="/loginCheck">
		<jaxws:inInterceptors>
			<bean id="inLoggingInterceptor" class="org.apache.cxf.interceptor.LoggingInInterceptor" />
			<bean id="outLoggingInterceptor" class="org.apache.cxf.interceptor.LoggingOutInterceptor" />
			<bean id="loginCheckInterceptor" class="login.check.ws.impl.LoginCheck" />
		</jaxws:inInterceptors>
		<jaxws:serviceFactory>
			<ref bean="jaxWsServiceFactoryBean" />
		</jaxws:serviceFactory>
	</jaxws:endpoint>

</beans>  

　　web.xml文件

<?xml version="1.0" encoding="UTF-8"?>
<web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://java.sun.com/xml/ns/javaee" xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd" id="WebApp_ID" version="3.0">
   <display-name>logincheckws</display-name>
   <welcome-file-list>
     <welcome-file>index.html</welcome-file>
     <welcome-file>index.htm</welcome-file>
     <welcome-file>index.jsp</welcome-file>
     <welcome-file>default.html</welcome-file>
     <welcome-file>default.htm</welcome-file>
     <welcome-file>default.jsp</welcome-file>
   </welcome-file-list>
  
   <!-- 加入spring -->  
   <context-param>  
     <param-name>contextConfigLocation</param-name>  
     <param-value>classpath:applicationContext*.xml</param-value>  
   </context-param>  
   <listener>  
    <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>  
   </listener>  
  
  <!-- 加入CXF支持 -->  
   <servlet>  
        <description>Apache CXF Endpoint</description>  
        <display-name>cxf</display-name>  
        <servlet-name>cxf</servlet-name>  
        <servlet-class>org.apache.cxf.transport.servlet.CXFServlet</servlet-class>  
        <load-on-startup>1</load-on-startup>  
    </servlet>  
    <servlet-mapping>  
        <servlet-name>cxf</servlet-name>  
        <url-pattern>/services/*</url-pattern>  
    </servlet-mapping>
    
</web-app>

　　LoginCheck：继承了AbstractPhaseInterceptor，实现了handleMessage方法，用来从客户端发来soap消息头中获取密码，并会保存在ThreadLocal变量中，供校验用户时使用。

package login.check.ws.impl;

import java.util.List;

import javax.jws.WebService;
import javax.xml.namespace.QName;

import org.apache.cxf.binding.soap.SoapMessage;
import org.apache.cxf.headers.Header;
import org.apache.cxf.interceptor.Fault;
import org.apache.cxf.phase.AbstractPhaseInterceptor;
import org.apache.cxf.phase.Phase;
import org.w3c.dom.Element;
import org.w3c.dom.NodeList;

import login.check.constant.ValidUser;
import login.check.ws.interf.ILoginCheck;

@WebService(endpointInterface="login.check.ws.interf.ILoginCheck", targetNamespace="http://login.check.ws")
public class LoginCheck extends AbstractPhaseInterceptor<SoapMessage> implements ILoginCheck{

	private static final ThreadLocal<String> passwords = new ThreadLocal<>();
	
	public LoginCheck() {
		super(Phase.PRE_PROTOCOL);
	}

	@Override
	public boolean checkUser(String username) {
		return ValidUser.validUser.get(username).equals(passwords.get());
	}

	@Override
	public void handleMessage(SoapMessage message) throws Fault {
		List<Header> headers = message.getHeaders();
		if(headers == null || headers.size() == 0)
		{
			throw new Fault(new RuntimeException("无密码信息"));
		}
		
		Element passwordEle = null;

		for(Header header: headers)
		{
			QName qName = header.getName();
			String nameSpace = qName.getNamespaceURI();
			String tagName = qName.getLocalPart();
			
			if(nameSpace != null && nameSpace.equals("http://login.check.ws.password") && tagName != null)
			{
				passwordEle = (Element)header.getObject();
				break;
			}
		}
		
		if(null == passwordEle)
		{
			throw new Fault(new RuntimeException("无密码信息"));
		}
		
		NodeList passwordList = passwordEle.getElementsByTagName("password");
		
		if(passwordList == null || passwordList.getLength() != 1)
		{
			throw new Fault(new RuntimeException("密码信息错误"));
		}
		
		passwords.set(passwordList.item(0).getTextContent());
	}

}

 　　客户端

　　首先是生成客户端代码，在此不在赘述，

　　　　

 

　　然后自定义一个拦截器，向soap消息头中写入密码信息，这里密码的获取也用到的ThreadLocal变量，在测试类中将密码存入ThreadLocal变量中，然后在拦截器中就可以获取到密码了。

　　拦截器代码如下：

package login.check.ws.client;

import java.util.List;

import javax.xml.namespace.QName;

import org.apache.cxf.binding.soap.SoapMessage;
import org.apache.cxf.headers.Header;
import org.apache.cxf.helpers.DOMUtils;
import org.apache.cxf.interceptor.Fault;
import org.apache.cxf.phase.AbstractPhaseInterceptor;
import org.apache.cxf.phase.Phase;
import org.w3c.dom.Document;
import org.w3c.dom.Element;

import login.check.ws.test.LoginTest;

public class PasswordInterceptor extends AbstractPhaseInterceptor<SoapMessage> {

	public PasswordInterceptor() {
		super(Phase.PREPARE_SEND);
	}

	@Override
	public void handleMessage(SoapMessage message) throws Fault {
		List<Header> headers = message.getHeaders();
		Document doc = DOMUtils.createDocument();
		
		Element passwordNS = doc.createElementNS("http://login.check.ws.password", "loginCheck");
		Element password = doc.createElement("password");
		password.setTextContent(LoginTest.password.get());
		
		passwordNS.appendChild(password);
		
		headers.add(new Header(new QName("loginCheck"), passwordNS));
	}

}

 　　测试代码如下：

　　使用了三个拦截器并将密码存入了ThreadLocal中，

　　测试结果如下：

 　　代码地址：https://files.cnblogs.com/files/liunianfeiyu/logincheckwebservice.rar