webservice添加用户密码验证

一、增加maven 依赖

    
    
   
   
 
    
 
     
 
      
 
     
 
     
 
      
 
       <dependency> 
      
 
     
 
    
 
     
 
      
 
     
 
     
 
      
 
       <groupId>org.apache.cxf 
       </groupId> 
      
 
     
 
    
 
     
 
      
 
     
 
     
 
      
 
       <artifactId>cxf-rt-ws-security 
       </artifactId> 
      
 
     
 
    
 
     
 
      
 
     
 
     
 
      
 
       <version>3.1.8 
       </version> 
      
 
     
 
    
 
     
 
      
 
     
 
     
 
      
 
       </dependency> 
      
 
     
 
   
   
   
  
  

二、spring-context配置拦截器

    
    
   
   
 
    
 
     
 
      
 
     
 
     
 
      
 
       <jaxws:endpoint > 
      
 
     
 
    
 
     
 
      
 
     
 
     
 
      
 
       <jaxws:inInterceptors> 
      
 
     
 
    
 
     
 
      
 
     
 
     
 
      
 
       <bean class="org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor"> 
      
 
     
 
    
 
     
 
      
 
     
 
     
 
      
 
       <constructor-arg> 
      
 
     
 
    
 
     
 
      
 
     
 
     
 
      
 
       <map> 
      
 
     
 
    
 
     
 
      
 
     
 
     
 
      
 
       <entry key="action" value="UsernameToken" /> 
      
 
     
 
    
 
     
 
      
 
     
 
     
 
      
 
       <entry key="passwordType" value="PasswordDigest" /> 
      
 
     
 
    
 
     
 
      
 
     
 
     
 
      
 
       <entry key="passwordCallbackRef"> 
      
 
     
 
    
 
     
 
      
 
     
 
     
 
      
 
       <bean class="com.interceptor.PasswordCallback"> 
       </bean> 
      
 
     
 
    
 
     
 
      
 
     
 
     
 
      
 
       </entry> 
      
 
     
 
    
 
     
 
      
 
     
 
     
 
      
 
       </map> 
      
 
     
 
    
 
     
 
      
 
     
 
     
 
      
 
       </constructor-arg> 
      
 
     
 
    
 
     
 
      
 
     
 
     
 
      
 
       </bean> 
      
 
     
 
    
 
     
 
      
 
     
 
     
 
      
 
       </jaxws:inInterceptors> 
      
 
     
 
    
 
     
 
      
 
     
 
     
 
      
 
       </jaxws:endpoint> 
      
 
     
 
   
   
   
  
  

三、编写PasswordCallback

    
    
   
   
 
    
 
     
 
      
 
     
 
     
 
      
 
       import javax.security.auth.callback.Callback; 
      
 
     
 
    
 
     
 
      
 
     
 
     
 
      
 
       import javax.security.auth.callback.CallbackHandler; 
      
 
     
 
    
 
     
 
      
 
     
 
     
 
      
 
       import javax.security.auth.callback.UnsupportedCallbackException; 
      
 
     
 
    
 
     
 
      
 
     
 
     
 
      
 
      
 
     
 
    
 
     
 
      
 
     
 
     
 
      
 
       import org.apache.wss4j.common.ext.WSPasswordCallback; 
      
 
     
 
    
 
     
 
      
 
     
 
     
 
      
 
      
 
     
 
    
 
     
 
      
 
     
 
     
 
      
 
       import java.io.IOException; 
      
 
     
 
    
 
     
 
      
 
     
 
     
 
      
 
      
 
     
 
    
 
     
 
      
 
     
 
     
 
      
 
      
 
     
 
    
 
     
 
      
 
     
 
     
 
      
 
       public 
       class PasswordCallback implements CallbackHandler { 
      
 
     
 
    
 
     
 
      
 
     
 
     
 
      
 
       public void handle(Callback[] callbacks) throws IOException, 
      
 
     
 
    
 
     
 
      
 
     
 
     
 
      
 
        UnsupportedCallbackException { 
      
 
     
 
    
 
     
 
      
 
     
 
     
 
      

        WSPasswordCallback pc = (WSPasswordCallback) callbacks[ 
       0]; 
      
 
     
 
    
 
     
 
      
 
     
 
     
 
      

        String idf = pc.getIdentifier(); 
       //ws传过来的用户名 
      
 
     
 
    
 
     
 
      
 
     
 
     
 
      

        String pwd = 
       null; 
       //需查数据库获得密码 
      
 
     
 
    
 
     
 
      
 
     
 
     
 
      

        String cfgUser = 
       "aaa"; 
      
 
     
 
    
 
     
 
      
 
     
 
     
 
      
 
       if(cfgUser!= 
       null && cfgUser.equals(idf)) { 
      
 
     
 
    
 
     
 
      
 
     
 
     
 
      

        pwd = 
       "123456"; 
      
 
     
 
    
 
     
 
      
 
     
 
     
 
      

        } 
       else { 
      
 
     
 
    
 
     
 
      
 
     
 
     
 
      

        pwd = 
       "error"; 
      
 
     
 
    
 
     
 
      
 
     
 
     
 
      

        } 
      
 
     
 
    
 
     
 
      
 
     
 
     
 
      

        pc.setPassword(pwd); 
      
 
     
 
    
 
     
 
      
 
     
 
     
 
      

        } 
      
 
     
 
    
 
     
 
      
 
     
 
     
 
      
 
      
 
     
 
    
 
     
 
      
 
     
 
     
 
      

        } 
      
 
     
 
   
   
   
  
  

四、soapUI 调用时设置用户名密码

右键，show Interface view