XFire中通过Soap Header 实现简单的验证

本文是XFire+Spring的结合使用:

xfire_servlet.xml的内容

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE beans PUBLIC "-//SPRING//DTD BEAN//EN" "http://www.springframework.org/dtd/spring-beans.dtd"  >

<beans>
    <!-- START SNIPPET: xfire -->
    <bean class="org.springframework.web.servlet.handler.SimpleUrlHandlerMapping">
        <property name="urlMap">
            <map>
                <entry key="/QueryService">
                    <ref bean="query"/>
                </entry>                 
           
                                 
            </map>
        </property>
       
    </bean>
   
    <!-- Declare a parent bean with all properties common to both services -->
    <bean id="query" class="org.codehaus.xfire.spring.remoting.XFireExporter">
        <property name="serviceFactory">
            <ref bean="xfire.serviceFactory"/>
        </property>
        <property name="xfire">
            <ref bean="xfire"/>
        </property>
        <property name="serviceBean">
            <ref bean="QueryHibRis"/>
        </property>
        <property name="serviceClass">
            <value>com.spring.Iquery</value>
        </property>
       
        <property name="inHandlers">
  <ref bean="authenticationHandler"/>
  </property>
       
    </bean>
    
  
   
    <!-- END SNIPPET: xfire -->
</beans>

applicationContext.xml文件的内容authenticationHandler的定义

 

<bean id="authenticationHandler" class="com.security.AuthenticationHandler"></bean>

 

 

com.security.AuthenticationHandler类的内容:

 

package com.security;

import org.apache.log4j.Logger;
import org.codehaus.xfire.MessageContext;
import org.codehaus.xfire.exchange.InMessage;
import org.codehaus.xfire.fault.XFireFault;
import org.codehaus.xfire.handler.AbstractHandler;
import org.jdom.Element;
import org.jdom.Namespace;

/**
 * XFire的回调的Handler，在XFire配置文件中配置
 * Server端的认证模块，回调处理模块
 *
 * ClientAuthHandler跟AuthenticationHandler要一起用，或者都不用
 *
 * 
 * 

 *
 */

public class AuthenticationHandler extends AbstractHandler {
 private static final Logger log = Logger
   .getLogger(AuthenticationHandler.class);

 public void invoke(MessageContext context) throws Exception {

  log.info("#AuthenticationHandler is invoked");
  InMessage message = context.getInMessage();

  final Namespace TOKEN_NS = Namespace.getNamespace("SpringSide",
    "http://spring.com");
  
   
  if (message.getHeader() == null) {
   throw new XFireFault("GetRelation Service Should be Authenticated",
     XFireFault.SENDER);
  }
  
 // System.out.println("dd"+message.getHeader());
  

  Element token = message.getHeader().getChild("AuthenticationToken",
    TOKEN_NS);
  if (token == null) {
   throw new XFireFault("Request must include authentication token.",
     XFireFault.SENDER);
  }

  String username = token.getChild("Username", TOKEN_NS).getValue();
  String password = token.getChild("Password", TOKEN_NS).getValue();

  if (username == null || password == null)
   throw new XFireFault("Supplied Username and Password Please",
     XFireFault.SENDER);
  
  
  /**
   /** */
  /**
   * 检查用户名密码是否正确
   */
  if (!username.equals("user") || !password.equals("ddd"))
   throw new XFireFault(
     " Authentication Fail! Check username/password ",
     XFireFault.SENDER);

 }
}