java代码进行post请求带X-WSSE头部验证示例

由于项目上要调用中国移动的接口，用到了X-WSSE头部验证，通过百度找到了写法，写了个Demo。

package com.epoint.test;

import java.io.IOException;
import java.net.URLDecoder;
import java.security.MessageDigest;
import java.security.NoSuchAlgorithmException;
import java.text.SimpleDateFormat;
import java.util.Calendar;
import java.util.TimeZone;
import java.util.UUID;

import org.apache.commons.codec.binary.Base64;
import org.apache.http.HttpResponse;
import org.apache.http.client.methods.HttpPost;
import org.apache.http.entity.StringEntity;
import org.apache.http.impl.client.DefaultHttpClient;
import org.apache.http.util.EntityUtils;
import net.sf.json.JSONObject;

public class TestSms
{

    public static void main(String[] args) throws NoSuchAlgorithmException {
        String httpResponse = post();
        System.out.println(httpResponse);
    }

    /** 
     * 发送 post请求 
     * @param url 访问的接口地址 
     * @param appKey app名 
     * @param appSecret 密码 
     * @param jsonParam 查询参数 
     * @return HttpResponse 该类包含请求方法的态码及返回的数据 
     * @throws NoSuchAlgorithmException 
     */
    public static String post() throws NoSuchAlgorithmException {
        String appKey = "e9774d93e1e7491cbfba31ecbcbed1be";
        String appSecret = "853ea5b5f4e98387";
        String jsonParam = "{\"from\":\"106575261108138\",\"to\":\"+8613862114469\", \"smsTemplateId\":\"f285dc66-4eec-44ee-82d5-17ae726658c0\", \"paramValue\":{\"name\":\"aa\",\"taskname\":\"aa\",\"time\":\"11\"}}";
        String url = "http://aep.api.cmccopen.cn/entireSms/sendTemplateSms/v1";
        //post请求返回结果  
        DefaultHttpClient httpClient = new DefaultHttpClient();
        JSONObject jsonResult = null;
        HttpPost method = new HttpPost(url);
        method.addHeader("Authorization", "WSSE realm=\"SDP\", profile=\"UsernameToken\", type=\"Appkey\"");
        String s = getXWSSE(appKey, appSecret);
        method.addHeader("X-WSSE", s);
        System.out.println(s);
        try {
            if (null != jsonParam) {
                //解决中文乱码问题  
                StringEntity entity = new StringEntity(jsonParam, "utf-8");
                entity.setContentEncoding("UTF-8");
                entity.setContentType("application/json");
                method.setEntity(entity);
            }
            HttpResponse result = httpClient.execute(method);
            url = URLDecoder.decode(url, "UTF-8");
            /**请求发送成功，并得到响应**/
            String str = "";
            try {
                /**读取服务器返回过来的json字符串数据**/
                str = EntityUtils.toString(result.getEntity());
                /**把json字符串转换成json对象**/
                jsonResult = JSONObject.fromObject(str);
            }
            catch (Exception e) {
                //                logger.error("post请求提交失败:" + url, e);  
            }
            //            }
        }
        catch (IOException e) {
            //        logger.error("post请求提交失败:" + url, e);  
        }
        return jsonResult.toString();
    }

    private static String getXWSSE(String appKey, String appSecret) throws NoSuchAlgorithmException {
        //取值为：UsernameToken Username="App Key的值",PasswordDigest="PasswordDigest的值", Nonce="随机数", Created="随机数生成时间"。
        //Created
        Calendar calendar = Calendar.getInstance();
        SimpleDateFormat sdf = new SimpleDateFormat("yyyy-MM-dd'T'HH:mm:ss'Z'");
        sdf.setTimeZone(TimeZone.getTimeZone("UTC"));
        String stTime = sdf.format(calendar.getTime());
        System.out.println(stTime);
        // user
        String stUserName = appKey;
        // nonce
        String stNonce = UUID.randomUUID().toString().replace("-", "").toUpperCase();

        String stCombine = stNonce + stTime + appSecret;

        String stPassWordDigiest = SHA256Encrypt(stCombine);

        String stXsse = "UsernameToken Username=" + "\"" + stUserName + "\"" + "," + "PasswordDigest=" + "\""
                + stPassWordDigiest + "\"" + "," + "Nonce=" + "\"" + stNonce + "\"" + "," + "Created=" + "\"" + stTime
                + "\"";
        return stXsse;
    }

    public static String SHA256Encrypt(String strSrc) throws NoSuchAlgorithmException {
        //SHA-256加密 
        MessageDigest msgDigest = MessageDigest.getInstance("SHA-256");
        //加密字符串 
        msgDigest.update(strSrc.getBytes());
        String string = Base64.encodeBase64String(msgDigest.digest());
        System.out.println(string);
        return string;
    }
}