CXF Webservice服務器委託向內部Webservice請求憑證

如何從獲取請求傳遞憑證（基本身份驗證）到另一個Webservice的新請求？CXF Webservice服務器委託向內部Webservice請求憑證

我沒有找到任何可以在一次請求中在攔截器之間共享數據的任何財產包。

澄清：

客戶端[具有基本認證名氣] - >請求 - > WS-1
** WS-1 - >請求 - > WS-2和通通從原始客戶機的憑證
** WS-1 - >請求 - > WS-3（無creds）
WS-1 - >響應 - >客戶端

來源

2014-02-26 Kevin S.

希望這個解決方案，我不會在秒運行。麻煩？

我做了什麼：

添加inInterceptor讀出憑據和遠程IP

AuthorizationPolicy policy = message.get(AuthorizationPolicy.class); 

    if (policy == null) { 
     sendErrorResponse(message, HttpURLConnection.HTTP_UNAUTHORIZED); 
     return; 
    } 


    message.put("request_usr", policy.getUserName()); 
    message.put("request_pwd", policy.getPassword());

操縱CXF生成WebServiceClient此類改變contructors返回值一樣

/** 
* 
* @return returns WebServiceClass 
*/ 
@WebEndpoint(name = "WebServiceClassSoap") 
public WebServiceClassSoap getWebServiceClassSoap() { 
    return dynamicAuthorisation(super.getPort(WebServiceClassSoap, 
      WebServiceClassSoap.class)); 
} 

private WebServiceClassSoap dynamicAuthorisation (WebServiceClassSoap service) { 
    return dynamicAuthorisation(service, 
       PhaseInterceptorChain.getCurrentMessage().get("request_usr").toString(), 
       PhaseInterceptorChain.getCurrentMessage().get("request_pwd").toString()); 
} 


private WebServiceClassSoap dynamicAuthorisation (WebServiceClassSoap service, String username, String password) { 

    Client client = ClientProxy.getClient(service); 
    HTTPConduit http = (HTTPConduit) client.getConduit(); 

    AuthorizationPolicy auth = http.getAuthorization(); 

    auth.setUserName(username); 
    auth.setPassword(password); 

    http.setAuthorization(auth); 

    return service; 
}

離開在beans.xml中的http-conf：conduit.xml

<http-conf:conduit name="{http://schemas.foobar.com/websvc/WebServiceClass/}WebServiceClassSoap.http-conduit"> 
     <http-conf:authorization> 
       <!-- 
       <sec:UserName>${webservices.username}@${webservices.domain}</sec:UserName> 
       <sec:Password>${webservices.password}</sec:Password> 
       --> 
       <sec:AuthorizationType>Basic</sec:AuthorizationType> 
     </http-conf:authorization> 
     <http-conf:client AllowChunking="false" ConnectionTimeout="30000" />    
</http-conf:conduit>

感謝Apache CXF: Forwarding an information from an interceptor to the actual webservice implementation =）

來源

2014-02-28 15:57:39

CXF Webservice服務器委託向內部Webservice請求憑證

回答

相關問題