HttpClient模擬登錄12306購票網站

  首先12306網站前綴為“https://” 表明是用SSL加密。

  用HttpClient去模擬發送請求時，對於URL用為“https”時，先要解決證書問題，有兩種解決方案：

　　　a.使證書被信任。

　　   在查找相關資料時，對於這種方法有點麻煩，最后就沒有去嘗試，有興趣的朋友可以試試。

        b.使用httpClient時不檢測服務器證書是否可信

　　　　擴展HttpClient 類實現自動接受證書，因為這種方法自動接收所有證書，因此存在一定的安全問題，所以在使用這種方法前請仔細考慮您的系統的安全需求。

           具體的步驟如下：

             •提供一個自定義的socket factory （test.MySecureProtocolSocketFactory ）。這個自定義的類必須實現接口                

              org.apache.commons.httpclient.protocol.SecureProtocolSocketFactory ，在實現接口的類中調用自定義的                          

              X509TrustManager(test.MyX509TrustManager) 

             •創建一個org.apache.commons.httpclient.protocol.Protocol 的實例，指定協議名稱和默認的端口號

              Protocol myhttps = new Protocol("https", new MySecureProtocolSocketFactory (), 443);

             •注冊剛才創建的https 協議對象

              Protocol.registerProtocol("https ", myhttps);

具體代碼如下：

package org.study.meteor.ticket.util;

import java.io.IOException;    
import java.net.InetAddress;    
import java.net.InetSocketAddress;    
import java.net.Socket;    
import java.net.SocketAddress;    
import java.net.UnknownHostException;    
import java.security.KeyManagementException;    
import java.security.NoSuchAlgorithmException;    
import java.security.cert.CertificateException;    
import java.security.cert.X509Certificate;    
    
import javax.net.SocketFactory;    
import javax.net.ssl.SSLContext;    
import javax.net.ssl.TrustManager;    
import javax.net.ssl.X509TrustManager;    
    
import org.apache.commons.httpclient.ConnectTimeoutException;    
import org.apache.commons.httpclient.params.HttpConnectionParams;    
import org.apache.commons.httpclient.protocol.SecureProtocolSocketFactory; 

/**
 * MySecureProtocolSocketFactory.java.java Create on 2012-9-26下午1:15:03
 * 
 * 
 * Copyright (c) 2012 by MTA.
 * 
 * @author lmeteor
 * @Email [e-mail]
 * @description 自定義的socket factory 實現自動接受證書
 * @version 1.0
 */
public class MySecureProtocolSocketFactory implements
        SecureProtocolSocketFactory
{

    private SSLContext sslcontext = null;

    private SSLContext createSSLContext()
    {
        SSLContext sslcontext = null;
        try
        {
            sslcontext = SSLContext.getInstance("SSL");
            sslcontext.init(null, new TrustManager[]
            { new TrustAnyTrustManager() }, new java.security.SecureRandom());
        }
        catch (NoSuchAlgorithmException e)
        {
            e.printStackTrace();
        }
        catch (KeyManagementException e)
        {
            e.printStackTrace();
        }
        return sslcontext;
    }

    private SSLContext getSSLContext()
    {
        if (this.sslcontext == null)
        {
            this.sslcontext = createSSLContext();
        }
        return this.sslcontext;
    }

    public Socket createSocket(Socket socket, String host, int port,
            boolean autoClose) throws IOException, UnknownHostException
    {
        return getSSLContext().getSocketFactory().createSocket(socket, host,
                port, autoClose);
    }

    public Socket createSocket(String host, int port) throws IOException,
            UnknownHostException
    {
        return getSSLContext().getSocketFactory().createSocket(host, port);
    }

    public Socket createSocket(String host, int port, InetAddress clientHost,
            int clientPort) throws IOException, UnknownHostException
    {
        return getSSLContext().getSocketFactory().createSocket(host, port,
                clientHost, clientPort);
    }

    public Socket createSocket(String host, int port, InetAddress localAddress,
            int localPort, HttpConnectionParams params) throws IOException,
            UnknownHostException, ConnectTimeoutException
    {
        if (params == null)
        {
            throw new IllegalArgumentException("Parameters may not be null");
        }
        int timeout = params.getConnectionTimeout();
        SocketFactory socketfactory = getSSLContext().getSocketFactory();
        if (timeout == 0)
        {
            return socketfactory.createSocket(host, port, localAddress,
                    localPort);
        }
        else
        {
            Socket socket = socketfactory.createSocket();
            SocketAddress localaddr = new InetSocketAddress(localAddress,
                    localPort);
            SocketAddress remoteaddr = new InetSocketAddress(host, port);
            socket.bind(localaddr);
            socket.connect(remoteaddr, timeout);
            return socket;
        }
    }

    // 自定義私有類
    private static class TrustAnyTrustManager implements X509TrustManager
    {

        public void checkClientTrusted(X509Certificate[] chain, String authType)
                throws CertificateException
        {
        }

        public void checkServerTrusted(X509Certificate[] chain, String authType)
                throws CertificateException
        {
        }

        public X509Certificate[] getAcceptedIssuers()
        {
            return new X509Certificate[]
            {};
        }
    }
}

下面的是httpClient的具體實現類:

package org.study.meteor.ticket.util;

import java.io.BufferedInputStream;
import java.io.File;
import java.io.FileOutputStream;
import java.io.IOException;
import java.io.InputStream;
import java.io.UnsupportedEncodingException;
import java.util.ArrayList;
import java.util.List;

import org.apache.commons.httpclient.HttpClient;
import org.apache.commons.httpclient.HttpException;
import org.apache.commons.httpclient.NameValuePair;
import org.apache.commons.httpclient.methods.PostMethod;
import org.apache.commons.httpclient.params.HttpMethodParams;
import org.apache.commons.httpclient.protocol.Protocol;

/**
 * HttpDoPostUtils.java Create on 2012-9-7下午3:08:18
 * 
 * 
 * Copyright (c) 2012 by MTA.
 * 
 * @author lmeteor
 * @Email [e-mail]
 * @description 模擬HTTP發送請求得到報文
 * @version 1.0
 */
@SuppressWarnings("deprecation")
public class HttpDoPostUtils
{

    
    private static HttpClient httpClient = null;
    
    static
    {
        //指定協議名稱和默認的端口號
        Protocol myhttps = new Protocol("https", new MySecureProtocolSocketFactory(), 443);
        //注冊剛才創建的https 協議對象
        Protocol.registerProtocol("https", myhttps); 
        httpClient = new HttpClient();
    }
    
    /**
     * 發送請求報文，得到響應報文
     * @param url
     *             登錄請求URL
     * @param pList
     *             是否包含請求參數
     * @return
     * @throws UnsupportedEncodingException
     */
    public static String doRequestToString(String url,List<NameValuePair> pList) throws UnsupportedEncodingException
    {
        //獲得postMethod對象
        PostMethod pmethod = getPostMethod(url);
        pmethod.getParams().setParameter(HttpMethodParams.HTTP_CONTENT_CHARSET, "utf-8");
        //判斷是否包含參數
        if(null != pList && pList.size() > 0)
        {
            pmethod.setRequestBody(pList.toArray(new NameValuePair[pList.size()]));
        }
        String value = "";
        try
        {
            httpClient.executeMethod(pmethod);
            value = pmethod.getResponseBodyAsString();
        }
        catch ( HttpException e )
        {
            e.printStackTrace();
        }
        catch ( IOException e )
        {
            e.printStackTrace();
        }
        
        return value;
    }
    
    /**
     * 獲得12306網站的登錄驗證碼
     * @param url
     *             請求URL
     * @param filePath
     *             驗證碼保存路徑 如:e:\\login.jpg
     * @return
     */
    public static File doGetFile(String url,String filePath)
    {
        PostMethod pmethod = getPostMethod(url);
        pmethod.getParams().setParameter(HttpMethodParams.HTTP_CONTENT_CHARSET, "utf-8");
        try
        {
            httpClient.executeMethod(pmethod);
            //得到響應中的流對象
            InputStream in = pmethod.getResponseBodyAsStream();
            //包裝 並讀出流信息
            BufferedInputStream bis = new BufferedInputStream(in);
            File file = new File(filePath);
            FileOutputStream fs = new FileOutputStream(file);

            byte[] buf = new byte[1024];
            int len = bis.read(buf);
            if(len == -1 || len == 0){
                file.delete();
                file = null;
            }
            while (len != -1) {
                fs.write(buf, 0, len);
                len = bis.read(buf);
            }
            fs.flush();
            fs.close();
            return file;
        }
        catch (HttpException e)
        {
            e.printStackTrace();
        }
        catch (IOException e)
        {
            e.printStackTrace();
        }
        return null;
        
    }
    
    public static List<NameValuePair> createNameValuePair(String params) {
        List<NameValuePair> nvps = new ArrayList<NameValuePair>();
        if (null != params && !params.trim().equals("")) {
            String[] _params = params.split("&");
            // userCookieList = new AttributeList();
            for (int i = 0; i < _params.length; i++) {
                int _i = _params[i].indexOf("=");
                if (_i != -1) {
                    String name = _params[i].substring(0, _i);
                    String value = _params[i].substring(_i + 1);
                    nvps.add(new NameValuePair(name, value));
                }
            }
        }
        return nvps;
    }
    
    
    public static PostMethod getPostMethod(String url)
    {
        PostMethod pmethod = new PostMethod(url);
        //設置響應頭信息
        pmethod.addRequestHeader("Connection", "keep-alive");
        pmethod.addRequestHeader("Cache-Control", "max-age=0");
        pmethod.addRequestHeader("User-Agent", "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0) ");
        pmethod.addRequestHeader("Accept", "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8");
        return pmethod;
    }
    
}

模擬請求的類已經出來，現在開始進行模擬登錄，登錄前必須知道12306自身是怎樣提交請求，並包含哪些參數到后台，通過firebug就很容易找到這些東西了。

12306登錄之前會調用“https://dynamic.12306.cn/otsweb/loginAction.do?method=loginAysnSuggest”，后台返回一串JSON報文，如下：

{"loginRand":"652","randError":"Y"}

當randError為“Y”時，才對表單FORM提交，並且將loginRand的值初始化到表單里的隱藏域中，作為參數傳到后台

現在最后一步就是拼接參數了，具體操作代碼如下：

package org.study.meteor.ticket.util;

import java.io.BufferedReader;
import java.io.InputStreamReader;
import java.io.UnsupportedEncodingException;

import org.study.meteor.ticket.domain.LoginBeforeValidatior;

import net.sf.json.JSONObject;

/**
 * Login.java.java Create on 2012-9-26下午1:48:42 
 * 
 * 
 * Copyright (c) 2012 by MTA.
 * 
 * @author lmeteor
 * @Email [e-mail]
 * @description 
 * @version 1.0
 */
public class Login
{
    
    /**
     * 獲取驗證碼
     * @param filePath
     * @return
     */
    public static String getRandCode(String filePath)
    {
        String randCode = "";
        /** 獲取驗證碼 */
        HttpDoPostUtils.doGetFile(PropertiesUtils.newInstance().getPropertiesValue("loginCode"),filePath);
        randCode = readString("請輸入登錄驗證碼：");
        return randCode;
    }
    

    /**
     * 實現登錄操作
     * @throws UnsupportedEncodingException
     */
    public static void doLogin() throws UnsupportedEncodingException
    {
        String randCode = getRandCode("e:\\login.jpg");
        /** 登錄前 提交得到報文 */
        String loginBeforeVal = HttpDoPostUtils.doRequestToString(PropertiesUtils.newInstance().getPropertiesValue("loginBeforeValidatiorUrl"),null);
        //將返回的JSON報文轉換成指定的對象
        JSONObject jsonObj = JSONObject.fromObject(loginBeforeVal);
        LoginBeforeValidatior loginBefore = new LoginBeforeValidatior();
        loginBefore = (LoginBeforeValidatior) JSONObject.toBean(jsonObj, LoginBeforeValidatior.class);
        //拼接參數
        StringBuffer params = new StringBuffer();
        params.append("loginRand="+loginBefore.getLoginRand()).append("&")
                .append("refundLogin=N").append("&")
                .append("refundFlag=Y").append("&")
                .append("loginUser.user_name="+PropertiesUtils.newInstance().getPropertiesValue("username")).append("&")
                .append("nameErrorFocus=&")
                .append("user.password="+PropertiesUtils.newInstance().getPropertiesValue("password")).append("&")
                .append("passwordErrorFocus=&")
                .append("randCode="+randCode).append("&")
                .append("randErrorFocus=");
        //像服務器發送登錄請求 並返回對應的報文
        String loginResponseText = HttpDoPostUtils.doRequestToString(PropertiesUtils.newInstance().getPropertiesValue("loginUrl"),HttpDoPostUtils.createNameValuePair(params.toString()));
        System.out.println(loginResponseText);
        
    }
    
    
    /**
     * 多控制台讀取驗證碼
     * @param msg
     * @return
     * @throws Exception
     */
    private static String readString(String msg)
    {
        BufferedReader bufferedReader = new BufferedReader(new InputStreamReader(System.in));
        try{
            System.out.print(msg+": ");
            return bufferedReader.readLine();
        }catch(Exception e){
        }
        return "1245";
    }
    
    public static void main(String[] args) throws UnsupportedEncodingException
    {
        //Login login = new Login();
        //login.doLogin();
        Login.doLogin();
    }
}

URL都是在配置文件中的，大致如下：

#12306登錄之前調用URL
loginBeforeValidatiorUrl=https://dynamic.12306.cn/otsweb/loginAction.do?method=loginAysnSuggest
#12306登錄驗證碼的地址
loginCode=https://dynamic.12306.cn/otsweb/passCodeAction.do?rand=sjrand
#登錄URL
loginUrl=https://dynamic.12306.cn/otsweb/loginAction.do?method=login
#用戶名
username=xxxx
#密碼
password=xxx

通過返回的HTML，如果看到自己的名字，就說明登錄成功了。如果大家還想做什么動作，就可以發揮大家的想像力了。