sasl java_SASL协议java实现

sasl在很多场景中都有用到，如xmpp,pop3等等。详细协议可参见：

publicclassAuthMain {

/**

*@paramargs

*@throwsSaslException

*/

publicstaticvoidmain(String[] args)throwsSaslException {

Map props =newTreeMap();

props.put(Sasl.QOP,"auth");

SaslServer ss = Sasl.createSaslServer("DIGEST-MD5","xmpp","java.com",

props,newServerCallbackHandler());

byte[] token =newbyte[0];

byte[] challenge

= ss.evaluateResponse(token);

SaslClient sc = Sasl.createSaslClient(newString[] {"DIGEST-MD5"},

"tony","xmpp","java.com",null,newClientCallbackHandler());

byteresponse[];

if(challenge

!=null) {

response = sc.evaluateChallenge(challenge);

}else{

response = sc.evaluateChallenge(null);

}

ss.evaluateResponse(response);

if(ss.isComplete()) {

System.out.println("auth

success");

}

}

}

classClientCallbackHandlerimplementsCallbackHandler {

publicvoidhandle(Callback[] callbacks)throwsIOException,

UnsupportedCallbackException {

for(inti = 0; i < callbacks.length; i++) {

if(callbacks[i]instanceofNameCallback) {

NameCallback ncb = (NameCallback) callbacks[i];

ncb.setName("tony");

}elseif(callbacks[i]instanceofPasswordCallback) {

PasswordCallback pcb = (PasswordCallback) callbacks[i];

pcb.setPassword("admin1".toCharArray());

}elseif(callbacks[i]instanceofRealmCallback) {

RealmCallback rcb = (RealmCallback) callbacks[i];

rcb.setText("java.com");

}else{

thrownewUnsupportedCallbackException(callbacks[i]);

}

}

}

}

classServerCallbackHandlerimplementsCallbackHandler {

publicServerCallbackHandler() {

}

publicvoidhandle(finalCallback[] callbacks)throwsIOException,

UnsupportedCallbackException {

for(Callback callback : callbacks) {

if(callbackinstanceofRealmCallback) {

//do your

business

}elseif(callbackinstanceofNameCallback) {

//do your

business

}elseif(callbackinstanceofPasswordCallback) {

((PasswordCallback) callback).setPassword("admin1"

.toCharArray());

}elseif(callbackinstanceofAuthorizeCallback) {

AuthorizeCallback authCallback = ((AuthorizeCallback)

callback);

authCallback.setAuthorized(true);

}else{

System.out.println(callback.getClass().getName());

thrownewUnsupportedCallbackException(callback,

"Unrecognized

Callback");

}

}

}

}

注意这里只是基本的api如何使用，具体使用(根据自己系统的业务)要自己重新实现两个callbackhandler两个类，里面的用户名，密码，以及realm信息则要根据具体逻辑来写，比如是从数据库系统来，还是文件系统来，或者是SSO认证。