CXF的版本是2.6.1的
服务端回调Java代码:
ServerAuthHandler.java
package com.jysd.ms.entity; import java.io.IOException; import javax.security.auth.callback.Callback; import javax.security.auth.callback.CallbackHandler; import javax.security.auth.callback.UnsupportedCallbackException; import org.apache.ws.security.WSPasswordCallback; public class ServerAuthHandler implements CallbackHandler { public void handle(Callback[] callbacks) throws IOException,UnsupportedCallbackException { WSPasswordCallback pc = (WSPasswordCallback) callbacks[0]; if(pc.getIdentifier().equals("jysd")){ pc.setPassword("jysdsoft"); if(!pc.getpassword().equals("jysdsoft")){ System.out.println("密码错误"); throw new SecurityException("密码错误!"); } } else { System.out.println("用户名错误"); throw new SecurityException("用户名错误!"); } } }
服务端spring配置文件:
bean.xml
<beans xmlns="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:context="http://www.springframework.org/schema/context" xmlns:tx="http://www.springframework.org/schema/tx" xmlns:aop="http://www.springframework.org/schema/aop" xmlns:jaxws="http://cxf.apache.org/jaxws" xsi:schemaLocation=" http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.0.xsd http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context-3.0.xsd http://www.springframework.org/schema/aop http://www.springframework.org/schema/aop/spring-aop-3.0.xsd http://www.springframework.org/schema/tx http://www.springframework.org/schema/tx/spring-tx-3.0.xsd http://cxf.apache.org/jaxws http://cxf.apache.org/schemas/jaxws.xsd"> <import resource="classpath:meta-inf/cxf/cxf.xml" /> <import resource="classpath:meta-inf/cxf/cxf-extension-soap.xml"/> <import resource="classpath:meta-inf/cxf/cxf-servlet.xml" /> <aop:aspectj-autoproxy/> <context:component-scan base-package="com.jysd"/> <bean id="entityManagerFactory" class="org.springframework.orm.jpa.LocalEntityManagerfactorybean"> <property name="persistenceUnitName" value="bjjysd"/> </bean> <bean id="transactionManager" class="org.springframework.orm.jpa.JpaTransactionManager"> <property name="entityManagerFactory" ref="entityManagerFactory"/> </bean> <tx:annotation-driven transaction-manager="transactionManager"/> <jaxws:endpoint id="csh" implementor="com.jysd.ms.service.imp.UserServiceImpl" address="/csh" > <!--配置拦截器--> <jaxws:inInterceptors> <bean class="org.apache.cxf.binding.soap.saaj.saajInInterceptor" /> <bean class="org.apache.cxf.interceptor.LoggingInInterceptor" /> <!-- <bean class="org.web.soapHeader.ReadSoapHeader"/>--> <bean class="org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor" > <constructor-arg > <map > <entry key="action" value="Usernametoken" /> <entry key="passwordType" value="PasswordText" /> <entry key="passwordCallbackClass" value="com.jysd.ms.entity.ServerAuthHandler" /> </map> </constructor-arg> </bean> </jaxws:inInterceptors> <!--配置拦截器结束 --> </jaxws:endpoint> </beans>
客户端回调java代码:
ClientAuthHandler.java
package com.jysd.ms.client; import java.io.IOException; import javax.security.auth.callback.Callback; import javax.security.auth.callback.CallbackHandler; import javax.security.auth.callback.UnsupportedCallbackException; import org.apache.ws.security.WSPasswordCallback; public class ClientAuthHandler implements CallbackHandler { public void handle(Callback[] callbacks) throws IOException,UnsupportedCallbackException { WSPasswordCallback pc = (WSPasswordCallback) callbacks[0]; int usage = pc.getUsage(); System.out.println("identifier: "+pc.getIdentifier()); System.out.println("usage: "+pc.getUsage()); if(usage == WSPasswordCallback.USERNAME_TOKEN){ pc.setPassword("jysdsoft"); } } }
客户端spring配置:
beans.xml
<?xml version="1.0" encoding="UTF-8"?> <!-- START SNIPPET: beans --> <beans xmlns="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:jaxws="http://cxf.apache.org/jaxws" xsi:schemaLocation=" http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd http://cxf.apache.org/jaxws http://cxf.apache.org/schema/jaxws.xsd"> <bean id="client" class="com.jysd.ms.UserService" factory-bean="clientFactory" factory-method="create"/> <bean id="clientFactory" class="org.apache.cxf.jaxws.JaxWsProxyfactorybean"> <property name="address" value="http://localhost:8080/CSHServer/csh"/> <property name="serviceClass" value="com.jysd.ms.UserService"/> <property name="outInterceptors"> <list> <bean class="org.apache.cxf.interceptor.LoggingOutInterceptor"/> <!-- <bean class="org.web.soapHeader.AddSoapHeader"/> --> <bean class="org.apache.cxf.binding.soap.saaj.saajOutInterceptor" /> <bean class="org.apache.cxf.ws.security.wss4j.WSS4JOutInterceptor" > <constructor-arg > <map > <entry key="action" value="Usernametoken" /> <entry key="passwordType" value="PasswordText" /> <entry key="user" value="jysd" /> <entry key="passwordCallbackRef" value="com.jysd.ms.entity.ClientAuthHandler" /> </map> </constructor-arg> </bean> </list> </property> </bean> </beans>
<?xml version="1.0" encoding="UTF-8"?> <!-- START SNIPPET: beans --> <beans xmlns="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:jaxws="http://cxf.apache.org/jaxws" xsi:schemaLocation=" http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd http://cxf.apache.org/jaxws http://cxf.apache.org/schema/jaxws.xsd"> <bean id="client" class="com.jysd.ms.UserService" factory-bean="clientFactory" factory-method="create"/> <bean id="clientFactory" class="org.apache.cxf.jaxws.JaxWsProxyfactorybean"> <property name="address" value="http://localhost:8080/CSHServer/csh"/> <property name="serviceClass" value="com.jysd.ms.UserService"/> <property name="outInterceptors"> <list> <bean class="org.apache.cxf.interceptor.LoggingOutInterceptor"/> <!-- <bean class="org.web.soapHeader.AddSoapHeader"/> --> <bean class="org.apache.cxf.binding.soap.saaj.saajOutInterceptor" /> <bean class="org.apache.cxf.ws.security.wss4j.WSS4JOutInterceptor" > <constructor-arg > <map > <entry key="action" value="Usernametoken" /> <entry key="passwordType" value="PasswordText" /> <entry key="user" value="jysd" /> <entry key="passwordCallbackRef" value="com.jysd.ms.entity.ClientAuthHandler" /> </map> </constructor-arg> </bean> </list> </property> </bean> </beans>
客户端运行:
package com.jysd.ms.client; import java.util.HashMap; import java.util.Map; import org.apache.cxf.jaxws.JaxWsProxyfactorybean; import org.apache.cxf.ws.security.wss4j.WSS4JOutInterceptor; import org.springframework.context.ApplicationContext; import org.springframework.context.support.ClasspathXmlApplicationContext; import com.jysd.ms.UserInfo; import com.jysd.ms.UserService; @SuppressWarnings("all") public class Client { public static void main(String[] args) { ApplicationContext context=new ClasspathXmlApplicationContext("beans.xml"); UserService us=(UserService) context.getBean("client"); String name = us.getName(new Integer(1)); System.out.println("id=1,name="+name); } }
在没有配置WSS4JOutInterceptor的时候,运行main方法的时候可以运行,并能打印,浏览器能访问并返回信息。
在配置WSS4JOutInterceptor之后,浏览器也能访问并返回信息,但当运行main方法报异常,异常代码如下:
警告: Interceptor for {http://service.ms.jysd.com/}UserServiceService#{http://service.ms.jysd.com/}getName has thrown exception,unwinding Now
java.lang.classCastException: java.lang.String cannot be cast to javax.security.auth.callback.CallbackHandler
at org.apache.ws.security.handler.WSHandler.getCallbackHandler(WSHandler.java:858)
at org.apache.ws.security.handler.WSHandler.getpasswordCallbackHandler(WSHandler.java:879)
at org.apache.ws.security.action.UsernametokenAction.execute(UsernametokenAction.java:35)
at org.apache.ws.security.handler.WSHandler.doSenderAction(WSHandler.java:202)
at org.apache.cxf.ws.security.wss4j.WSS4JOutInterceptor.access$200(WSS4JOutInterceptor.java:52)
at org.apache.cxf.ws.security.wss4j.WSS4JOutInterceptor$WSS4JOutInterceptorInternal.handleMessage(WSS4JOutInterceptor.java:260)
at org.apache.cxf.ws.security.wss4j.WSS4JOutInterceptor$WSS4JOutInterceptorInternal.handleMessage(WSS4JOutInterceptor.java:136)
at org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:262)
at org.apache.cxf.endpoint.ClientImpl.doInvoke(ClientImpl.java:532)
at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:464)
at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:367)
at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:320)
at org.apache.cxf.frontend.ClientProxy.invokeSync(ClientProxy.java:89)
at org.apache.cxf.jaxws.JaxWsClientProxy.invoke(JaxWsClientProxy.java:134)
at $Proxy39.getName(UnkNown Source)
at com.jysd.ms.client.Client.main(Client.java:27)
Exception in thread "main" javax.xml.ws.soap.soAPFaultException: java.lang.String cannot be cast to javax.security.auth.callback.CallbackHandler
at org.apache.cxf.jaxws.JaxWsClientProxy.invoke(JaxWsClientProxy.java:156)
at $Proxy39.getName(UnkNown Source)
at com.jysd.ms.client.Client.main(Client.java:27)
Caused by: java.lang.classCastException: java.lang.String cannot be cast to javax.security.auth.callback.CallbackHandler
at org.apache.ws.security.handler.WSHandler.getCallbackHandler(WSHandler.java:858)
at org.apache.ws.security.handler.WSHandler.getpasswordCallbackHandler(WSHandler.java:879)
at org.apache.ws.security.action.UsernametokenAction.execute(UsernametokenAction.java:35)
at org.apache.ws.security.handler.WSHandler.doSenderAction(WSHandler.java:202)
at org.apache.cxf.ws.security.wss4j.WSS4JOutInterceptor.access$200(WSS4JOutInterceptor.java:52)
at org.apache.cxf.ws.security.wss4j.WSS4JOutInterceptor$WSS4JOutInterceptorInternal.handleMessage(WSS4JOutInterceptor.java:260)
at org.apache.cxf.ws.security.wss4j.WSS4JOutInterceptor$WSS4JOutInterceptorInternal.handleMessage(WSS4JOutInterceptor.java:136)
at org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:262)
at org.apache.cxf.endpoint.ClientImpl.doInvoke(ClientImpl.java:532)
at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:464)
at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:367)
at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:320)
at org.apache.cxf.frontend.ClientProxy.invokeSync(ClientProxy.java:89)
at org.apache.cxf.jaxws.JaxWsClientProxy.invoke(JaxWsClientProxy.java:134)
... 2 more
有哪位大神可以指点一下?
版权声明:本文内容由互联网用户自发贡献,该文观点与技术仅代表作者本人。本站仅提供信息存储空间服务,不拥有所有权,不承担相关法律责任。如发现本站有涉嫌侵权/违法违规的内容, 请发送邮件至 [email protected] 举报,一经查实,本站将立刻删除。