构建基于CXF的WebService服务（3）-- 利用拦截器实现权限验证

package com.tiamaes.webservice.auth;

import java.util.List;

import org.apache.cxf.binding.soap.SoapMessage;
import org.apache.cxf.headers.Header;
import org.apache.cxf.interceptor.Fault;
import org.apache.cxf.phase.AbstractPhaseInterceptor;
import org.apache.cxf.phase.Phase;
import org.w3c.dom.Element;
import org.w3c.dom.NodeList;

/**  
 * 
类描述：用户权限验证拦截器  
 * 
修改人：王成委 
 * 
修改时间：2014-5-10 下午03:16:16  
 * @version  
 */
public class AuthInterceptor extends AbstractPhaseInterceptor {

	//在调用之前拦截
	public AuthInterceptor() {
		super(Phase.PRE_INVOKE);
	}

	/**
	 * 自定义拦截器需要实现handleMessage方法，该方法抛出Fault异常，可以自定义异常集成自Fault，
	 * 也可以new Fault(new Throwable())
	 */
	public void handleMessage(SoapMessage soap) throws Fault {
		System.out.println("开始验证用户信息");
		List
 headers = soap.getHeaders();
		
		//检查headers是否存在
		if(headers == null | headers.size()
2、客户端发送用户信息
客户端则需要添加out拦截器，在out拦截器中加入消息头


客户端拦截器：ClienLoginInterceptor

package com.tiamaes.webservice.auth;

import java.util.List;

import javax.xml.namespace.QName;

import org.apache.cxf.binding.soap.SoapMessage;
import org.apache.cxf.headers.Header;
import org.apache.cxf.helpers.DOMUtils;
import org.apache.cxf.interceptor.Fault;
import org.apache.cxf.phase.AbstractPhaseInterceptor;
import org.apache.cxf.phase.Phase;
import org.w3c.dom.Document;
import org.w3c.dom.Element;

/**  
 * 
类描述：  
 * 
修改记录 ---------------- 
 * 
修改人：王成委 
 * 
修改时间：2014-5-10 下午03:58:10  
 * 
修改备注：  
 * @version  
 */
public class ClientLoginInterceptor extends AbstractPhaseInterceptor {

	private String username;
	private String password;
	public void setUsername(String username) {
		this.username = username;
	}
	public void setPassword(String password) {
		this.password = password;
	}
	/**
	 * 创建一个新的实例 ClientLoginInterceptor.
	 *
	 * @param username
	 * @param password
	 */
	public ClientLoginInterceptor(String username, String password) {
		super(Phase.PREPARE_SEND);
		this.username = username;
		this.password = password;
	}
	/* (non-Javadoc)
	 * @see org.apache.cxf.interceptor.Interceptor#handleMessage(org.apache.cxf.message.Message)
	 */
	public void handleMessage(SoapMessage soap) throws Fault {
		// TODO Auto-generated method stub
		List
 headers = soap.getHeaders();
		
		Document doc = DOMUtils.createDocument();
		
		Element auth = doc.createElement("authrity");
		Element username = doc.createElement("username");
		Element password = doc.createElement("password");
		
		username.setTextContent(this.username);
		password.setTextContent(this.password);
		
		auth.appendChild(username);
		auth.appendChild(password);
		//doc.appendChild(auth);
		
		headers.add(0, new Header(new QName("tiamaes"),auth));
	}

}



客户端添加ClientLoginInterceptor

	public static void main(String[] args) {
		JaxWsDynamicClientFactory dcf = JaxWsDynamicClientFactory.newInstance();
		Client client = dcf.createClient("http://127.0.0.1:8080/hello?wsdl");
		client.getOutInterceptors().add(new ClientLoginInterceptor("admin", "admin"));
		try {
			Object[] objs = client.invoke("syaHello", "Tom");
			System.out.println(objs[0].toString());
		} catch (Exception e) {
			e.printStackTrace();
		}
	}


构建基于CXF的WebService服务（3）-- 利用拦截器实现权限验证,搜素材,soscw.com
构建基于CXF的WebService服务（3）-- 利用拦截器实现权限验证
标签：cxf   web services   webservice   
原文地址：http://blog.csdn.net/jaune161/article/details/25602655