Digest Auth 摘要认证

最新推荐文章于 2024-11-05 09:18:10 发布
最新推荐文章于 2024-11-05 09:18:10 发布
阅读量123 收藏
点赞数

1、该代码展示了使用Apache HttpClient库进行HTTP请求，并处理基于MD5的HTTP Digest认证的过程。 Digests类实现了MD5加密算法，HttpUtils类处理了GET、POST方法的请求，包括设置请求头、生成授权信息和处理响应。

2、请求流程

2.1.发送一个请求

2.2.服务器返回401响应头,要求输入用户凭据（建立通信，发起请求。如果返回401，继续下一次请求。重新设置响应，并获取随机数，通过md5加密返回）

2.3.输入凭据后再发送请求

2.4.服务端验证通过后返回数据

 

2.4代码示例：本案例使用xml请求并返回xml数据响应，json请求同理

 

复制代码 
        <dependency>
            <groupId>org.apache.httpcomponents</groupId>
            <artifactId>httpclient</artifactId>
            <version>4.5</version>
        </dependency>
        <dependency>
            <groupId>org.apache.httpcomponents</groupId>
            <artifactId>httpmime</artifactId>
            <version>4.5</version>
        </dependency>
        <dependency>
            <groupId>org.apache.httpcomponents</groupId>
            <artifactId>httpcore</artifactId>
            <version>4.4.1</version>
        </dependency>
        <dependency>
            <groupId>org.apache.commons</groupId>
            <artifactId>commons-lang3</artifactId>
            <version>3.8.1</version>
        </dependency>
复制代码

 

 

 

复制代码 
package com.ywb.common.utils.http;

import com.ywb.common.constant.Constants;
import org.junit.Test;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

import javax.net.ssl.*;
import java.io.*;
import java.net.ConnectException;
import java.net.SocketTimeoutException;
import java.net.URL;
import java.net.URLConnection;
import java.security.cert.X509Certificate;

import org.apache.commons.codec.digest.DigestUtils;
import org.apache.commons.lang3.StringUtils;
import org.apache.http.Header;
import org.apache.http.HeaderElement;
import org.apache.http.HttpEntity;
import org.apache.http.HttpStatus;
import org.apache.http.client.config.RequestConfig;
import org.apache.http.client.methods.CloseableHttpResponse;
import org.apache.http.client.methods.HttpPost;
import org.apache.http.entity.StringEntity;
import org.apache.http.impl.client.CloseableHttpClient;
import org.apache.http.impl.client.HttpClients;
import org.apache.http.util.EntityUtils;

import java.io.*;
import java.nio.charset.StandardCharsets;
import java.util.HashMap;


/**
 * 通用http发送方法
 *
 * @author ywb
 */
public class HttpUtils {
    private static final Logger log = LoggerFactory.getLogger(HttpUtils.class);

    /**
     * 向指定 URL 发送GET方法的请求
     *
     * @param url   发送请求的 URL
     * @param param 请求参数，请求参数应该是 name1=value1&name2=value2 的形式。
     * @return 所代表远程资源的响应结果
     */
    public static String sendGet(String url, String param) {
        return sendGet(url, param, Constants.UTF8);
    }

    /**
     * 向指定 URL 发送GET方法的请求
     *
     * @param url         发送请求的 URL
     * @param param       请求参数，请求参数应该是 name1=value1&name2=value2 的形式。
     * @param contentType 编码类型
     * @return 所代表远程资源的响应结果
     */
    public static String sendGet(String url, String param, String contentType) {
        StringBuilder result = new StringBuilder();
        BufferedReader in = null;
        try {
            String urlNameString = url + "?" + param;
            log.info("sendGet - {}", urlNameString);
            URL realUrl = new URL(urlNameString);
            URLConnection connection = realUrl.openConnection();
            connection.setRequestProperty("accept", "*/*");
            connection.setRequestProperty("connection", "Keep-Alive");
            connection.setRequestProperty("user-agent", "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;SV1)");
            connection.connect();
            in = new BufferedReader(new InputStreamReader(connection.getInputStream(), contentType));
            String line;
            while ((line = in.readLine()) != null) {
                result.append(line);
            }
            log.info("recv - {}", result);
        } catch (ConnectException e) {
            log.error("调用HttpUtils.sendGet ConnectException, url=" + url + ",param=" + param, e);
        } catch (SocketTimeoutException e) {
            log.error("调用HttpUtils.sendGet SocketTimeoutException, url=" + url + ",param=" + param, e);
        } catch (IOException e) {
            log.error("调用HttpUtils.sendGet IOException, url=" + url + ",param=" + param, e);
        } catch (Exception e) {
            log.error("调用HttpsUtil.sendGet Exception, url=" + url + ",param=" + param, e);
        } finally {
            try {
                if (in != null) {
                    in.close();
                }
            } catch (Exception ex) {
                log.error("调用in.close Exception, url=" + url + ",param=" + param, ex);
            }
        }
        return result.toString();
    }

    /**
     * 向指定 URL 发送POST方法的请求
     *
     * @param url   发送请求的 URL
     * @param param 请求参数，请求参数应该是 name1=value1&name2=value2 的形式。
     * @return 所代表远程资源的响应结果
     */
    public static String sendPost(String url, String param) {
        PrintWriter out = null;
        BufferedReader in = null;
        StringBuilder result = new StringBuilder();
        try {
            String urlNameString = url;
            log.info("sendPost - {}", urlNameString);
            URL realUrl = new URL(urlNameString);
            URLConnection conn = realUrl.openConnection();
            conn.setRequestProperty("accept", "*/*");
            conn.setRequestProperty("connection", "Keep-Alive");
            conn.setRequestProperty("user-agent", "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;SV1)");
            conn.setRequestProperty("Accept-Charset", "utf-8");
            conn.setRequestProperty("contentType", "utf-8");
            conn.setDoOutput(true);
            conn.setDoInput(true);
            out = new PrintWriter(conn.getOutputStream());
            out.print(param);
            out.flush();
            in = new BufferedReader(new InputStreamReader(conn.getInputStream(), "utf-8"));
            String line;
            while ((line = in.readLine()) != null) {
                result.append(line);
            }
            log.info("recv - {}", result);
        } catch (ConnectException e) {
            log.error("调用HttpUtils.sendPost ConnectException, url=" + url + ",param=" + param, e);
        } catch (SocketTimeoutException e) {
            log.error("调用HttpUtils.sendPost SocketTimeoutException, url=" + url + ",param=" + param, e);
        } catch (IOException e) {
            log.error("调用HttpUtils.sendPost IOException, url=" + url + ",param=" + param, e);
        } catch (Exception e) {
            log.error("调用HttpsUtil.sendPost Exception, url=" + url + ",param=" + param, e);
        } finally {
            try {
                if (out != null) {
                    out.close();
                }
                if (in != null) {
                    in.close();
                }
            } catch (IOException ex) {
                log.error("调用in.close Exception, url=" + url + ",param=" + param, ex);
            }
        }
        return result.toString();
    }

    public static String sendSSLPost(String url, String param) {
        StringBuilder result = new StringBuilder();
        String urlNameString = url + "?" + param;
        try {
            log.info("sendSSLPost - {}", urlNameString);
            SSLContext sc = SSLContext.getInstance("SSL");
            sc.init(null, new TrustManager[]{new TrustAnyTrustManager()}, new java.security.SecureRandom());
            URL console = new URL(urlNameString);
            HttpsURLConnection conn = (HttpsURLConnection) console.openConnection();
            conn.setRequestProperty("accept", "*/*");
            conn.setRequestProperty("connection", "Keep-Alive");
            conn.setRequestProperty("user-agent", "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;SV1)");
            conn.setRequestProperty("Accept-Charset", "utf-8");
            conn.setRequestProperty("contentType", "utf-8");
            conn.setDoOutput(true);
            conn.setDoInput(true);

            conn.setSSLSocketFactory(sc.getSocketFactory());
            conn.setHostnameVerifier(new TrustAnyHostnameVerifier());
            conn.connect();
            InputStream is = conn.getInputStream();
            BufferedReader br = new BufferedReader(new InputStreamReader(is));
            String ret = "";
            while ((ret = br.readLine()) != null) {
                if (ret != null && !"".equals(ret.trim())) {
                    result.append(new String(ret.getBytes("ISO-8859-1"), "utf-8"));
                }
            }
            log.info("recv - {}", result);
            conn.disconnect();
            br.close();
        } catch (ConnectException e) {
            log.error("调用HttpUtils.sendSSLPost ConnectException, url=" + url + ",param=" + param, e);
        } catch (SocketTimeoutException e) {
            log.error("调用HttpUtils.sendSSLPost SocketTimeoutException, url=" + url + ",param=" + param, e);
        } catch (IOException e) {
            log.error("调用HttpUtils.sendSSLPost IOException, url=" + url + ",param=" + param, e);
        } catch (Exception e) {
            log.error("调用HttpsUtil.sendSSLPost Exception, url=" + url + ",param=" + param, e);
        }
        return result.toString();
    }

    /**
     * 摘要认证 两次请求
     *
     * @param url
     * @return 返回结果
     */
    public static String doPostDigest(String url, String uri, String username, String password, String requestXml) {
        CloseableHttpClient httpClient = null;
        CloseableHttpResponse response = null;
        HttpPost httpPost = null;
        String strResponse = null;
        try {
            httpClient = HttpClients.createDefault();
//            httpClient = new SSLClient();
            httpPost = new HttpPost(url);
            // 构造请求头
            httpPost.setHeader("Content-Type", "application/xml");
            httpPost.setHeader("X-Requested-With", "XMLHttpRequest");
            httpPost.addHeader("Cache-Control", "no-cache"); //设置缓存
            httpPost.setHeader("Connection", "Close");

            RequestConfig.Builder builder = RequestConfig.custom();
            builder.setSocketTimeout(5000); //设置请求时间
            builder.setConnectTimeout(8000); //设置超时时间
            builder.setRedirectsEnabled(false);//设置是否跳转链接(反向代理)
            // 设置 连接 属性
            httpPost.setConfig(builder.build());
            StringEntity entityss = new StringEntity(requestXml, "utf-8");
            httpPost.setEntity(entityss);
            // 执行请求
            response = httpClient.execute(httpPost);
            HttpEntity responseEntity = response.getEntity();
            // 检验返回码
            int statusCode = response.getStatusLine().getStatusCode();
            log.debug("第一次发送摘要认证 Post请求 返回码:{}" + statusCode);
            if (401 == statusCode) {
                strResponse = EntityUtils.toString(responseEntity, "utf-8");
                log.debug("Post请求401返回结果:{}" + strResponse);

                // 组织参数，发起第二次请求
                Header[] headers = response.getHeaders("WWW-Authenticate");
                HeaderElement[] elements = headers[0].getElements();
                String realm = null;
                String qop = null;
                String nonce = null;
                String opaque = null;
                String method = "POST";
                for (HeaderElement element : elements) {
                    if (element.getName().equals("Digest realm")) {
                        realm = element.getValue();
                    } else if (element.getName().equals("qop")) {
                        qop = element.getValue();
                    } else if (element.getName().equals("nonce")) {
                        nonce = element.getValue();
                    } else if (element.getName().equals("opaque")) {
                        opaque = element.getValue();
                    }
                }
                // 以上为 获取第一次请求后返回的 数据
                String nc = "00000001";
                String cnonce = "uniview";
                // 后期变成可配置
                String a1 = username + ":" + realm + ":" + password;
                String a2 = method + ":" + uri;
                String response1 = null;
                // 获取 Digest 这个字符串
                String backString = response.getFirstHeader("WWW-Authenticate").getValue();
                try {
                    response1 = DigestUtils.md5Hex((DigestUtils.md5Hex(a1.getBytes("UTF-8")) + ":" + nonce + ":" + nc
                            + ":" + "uniview" + ":" + qop + ":" + DigestUtils.md5Hex(a2.getBytes("UTF-8"))).getBytes("UTF-8"));
                } catch (UnsupportedEncodingException e) {
                    log.error("MD5异常:{}" + e.getLocalizedMessage(), e);
                }
                httpPost.addHeader("Authorization", backString + ",username=\"" + username + "\"" + ",realm=\"" + realm + "\""
                        + ",nonce=\"" + nonce + "\"" + ",uri=\"" + uri + "\"" + ",qop=\"" + qop + "\"" + ",nc=\"" + nc + "\""
                        + ",cnonce=\"" + cnonce + "\"" + ",response=\"" + response1 + "\"" + ",opaque=\"" + opaque);

                // 发送第二次请求
                response = httpClient.execute(httpPost);
                HttpEntity entity = response.getEntity();
                int statusCode1 = response.getStatusLine().getStatusCode();
                log.debug("第二次发送摘要认证 Post请求 返回码:{}" + statusCode1);
                if (HttpStatus.SC_OK == statusCode1) {
                    strResponse = EntityUtils.toString(entity, StandardCharsets.UTF_8);
                    log.debug("第二次发送strResponse" + strResponse);
                    return strResponse;
                } else {
                    strResponse = EntityUtils.toString(entity, StandardCharsets.UTF_8);
                    log.debug("第二次鉴权认证请求非 200 返回结果:{}" + strResponse);
                    return strResponse;
                }
            } else {
                strResponse = EntityUtils.toString(responseEntity, StandardCharsets.UTF_8);
                log.error("第一次鉴权认证请求非401 返回结果:{}" + strResponse);
            }
        } catch (Exception e) {
            log.error("摘要认证 发送请求失败" + e.getLocalizedMessage(), e);
        } finally {
            if (null != httpPost) {
                httpPost.releaseConnection();
            }
            if (null != response) {
                try {
                    response.close();
                } catch (IOException e) {
                    log.error("httpResponse流关闭异常：", e);
                }
            }
            if (null != httpClient) {
                try {
                    httpClient.close();
                } catch (IOException e) {
                    log.error("httpClient 流关闭异常：", e);
                }
            }
        }
        return strResponse;
    }


    private static class TrustAnyTrustManager implements X509TrustManager {
        @Override
        public void checkClientTrusted(X509Certificate[] chain, String authType) {
        }

        @Override
        public void checkServerTrusted(X509Certificate[] chain, String authType) {
        }

        @Override
        public X509Certificate[] getAcceptedIssuers() {
            return new X509Certificate[]{};
        }
    }

    private static class TrustAnyHostnameVerifier implements HostnameVerifier {
        @Override
        public boolean verify(String hostname, SSLSession session) {
            return true;
        }
    }

    @Test
    public void testHttpPostRaw() {
        final String url = "http://18.18.167.120/ISAPI/Traffic/ContentMgmt/Statistic/operator";
        final String uri = "/ISAPI/Traffic/ContentMgmt/Statistic/operator";
        final String encode = "utf-8";
        String requestXml = "<?xml version='1.0' encoding='utf-8'?>" +
                "<StatisticOperator>" +
                "<operationType>search</operationType>" +
                "<searchCond>" +
                "<searchID>CAD8E0D6-1480-0001-C0B7-1E50E290140D</searchID>" +
                "<timeSpanList><timeSpan>" +
                "<startTime>2024-06-21T15:25:10Z</startTime>" +
                "<endTime>2024-06-21T15:27:59Z</endTime>" +
                "</timeSpan></timeSpanList>" +
                "<maxResults>20</maxResults>" +
                "<searchResultPosition>0</searchResultPosition>" +
                "</searchCond>" +
                "</StatisticOperator>";
        final HashMap<String, String> headers = new HashMap<String, String>();
        headers.put("Content-Type", "application/x-www-form-urlencoded");
        headers.put("X-Requested-With", "XMLHttpRequest");

        System.out.println(doPostDigest(url, uri, "admin", "123456", requestXml));
复制代码
复制代码 
<?xml version="1.0" encoding="UTF-8"?>

-<StatisticOperatorResult xmlns="http://www.isapi.org/ver20/XMLSchema" version="2.0">

<statusCode>1</statusCode>

<description>OK</description>

<searchID>CAD8E0D6-1480-0001-C0B7-1E50E290140D</searchID>

<numOfMatches>2</numOfMatches>

<totalMatches>2</totalMatches>


-<StatisticList>


-<Statistic>

<ID max="65535" min="1">1</ID>

<direction>0</direction>

<laneNo>18</laneNo>

<vehicleType>0</vehicleType>

<startTime>2024-06-21T15:26:03</startTime>

<endTime>2024-06-21T15:27:03</endTime>

<timePoint>2024-06-21T15:26:03</timePoint>

<channel>1</channel>

<carFlux>2</carFlux>

<smallCarFlux>0</smallCarFlux>

<bigCarFlux>1</bigCarFlux>

<passerbyFlux>0</passerbyFlux>

<averOccpancy>26.2</averOccpancy>

<averSpeed>0</averSpeed>

<averCarDis>0</averCarDis>

<midCarFlux>0</midCarFlux>

<averTimeOccupancy>50</averTimeOccupancy>

<averQueueLength>35</averQueueLength>

<averTimeHeadway>102</averTimeHeadway>

<nonmotorFlux>1</nonmotorFlux>

</Statistic>


-<Statistic>

<ID max="65535" min="1">2</ID>

<direction>0</direction>

<laneNo>19</laneNo>

<vehicleType>0</vehicleType>

<startTime>2024-06-21T15:26:03</startTime>

<endTime>2024-06-21T15:27:03</endTime>

<timePoint>2024-06-21T15:26:03</timePoint>

<channel>1</channel>

<carFlux>0</carFlux>

<smallCarFlux>0</smallCarFlux>

<bigCarFlux>0</bigCarFlux>

<passerbyFlux>0</passerbyFlux>

<averOccpancy>0.0</averOccpancy>

<averSpeed>0</averSpeed>

<averCarDis>0</averCarDis>

<midCarFlux>0</midCarFlux>

<averTimeOccupancy>0</averTimeOccupancy>

<averQueueLength>0</averQueueLength>

<averTimeHeadway>0</averTimeHeadway>

<nonmotorFlux>0</nonmotorFlux>

</Statistic>


-<Statistic>

<ID max="65535" min="1">3</ID>

<direction>0</direction>

<laneNo>3</laneNo>

<vehicleType>0</vehicleType>

<startTime>2024-06-21T15:26:03</startTime>

<endTime>2024-06-21T15:27:03</endTime>

<timePoint>2024-06-21T15:26:03</timePoint>

<channel>1</channel>

<carFlux>0</carFlux>

<smallCarFlux>0</smallCarFlux>

<bigCarFlux>0</bigCarFlux>

<passerbyFlux>0</passerbyFlux>

<averOccpancy>0.0</averOccpancy>

<averSpeed>0</averSpeed>

<averCarDis>0</averCarDis>

<midCarFlux>0</midCarFlux>

<averTimeOccupancy>0</averTimeOccupancy>

<averQueueLength>0</averQueueLength>

<averTimeHeadway>0</averTimeHeadway>

<nonmotorFlux>0</nonmotorFlux>

</Statistic>


-<Statistic>

<ID max="65535" min="1">4</ID>

<direction>0</direction>

<laneNo>18</laneNo>

<vehicleType>0</vehicleType>

<startTime>2024-06-21T15:27:03</startTime>

<endTime>2024-06-21T15:28:03</endTime>

<timePoint>2024-06-21T15:27:03</timePoint>

<channel>1</channel>

<carFlux>1</carFlux>

<smallCarFlux>0</smallCarFlux>

<bigCarFlux>1</bigCarFlux>

<passerbyFlux>0</passerbyFlux>

<averOccpancy>27.0</averOccpancy>

<averSpeed>0</averSpeed>

<averCarDis>0</averCarDis>

<midCarFlux>0</midCarFlux>

<averTimeOccupancy>98</averTimeOccupancy>

<averQueueLength>35</averQueueLength>

<averTimeHeadway>54</averTimeHeadway>

<nonmotorFlux>0</nonmotorFlux>

</Statistic>


-<Statistic>

<ID max="65535" min="1">5</ID>

<direction>0</direction>

<laneNo>19</laneNo>

<vehicleType>0</vehicleType>

<startTime>2024-06-21T15:27:03</startTime>

<endTime>2024-06-21T15:28:03</endTime>

<timePoint>2024-06-21T15:27:03</timePoint>

<channel>1</channel>

<carFlux>0</carFlux>

<smallCarFlux>0</smallCarFlux>

<bigCarFlux>0</bigCarFlux>

<passerbyFlux>0</passerbyFlux>

<averOccpancy>0.0</averOccpancy>

<averSpeed>0</averSpeed>

<averCarDis>0</averCarDis>

<midCarFlux>0</midCarFlux>

<averTimeOccupancy>0</averTimeOccupancy>

<averQueueLength>0</averQueueLength>

<averTimeHeadway>0</averTimeHeadway>

<nonmotorFlux>0</nonmotorFlux>

</Statistic>


-<Statistic>

<ID max="65535" min="1">6</ID>

<direction>0</direction>

<laneNo>3</laneNo>

<vehicleType>0</vehicleType>

<startTime>2024-06-21T15:27:03</startTime>

<endTime>2024-06-21T15:28:03</endTime>

<timePoint>2024-06-21T15:27:03</timePoint>

<channel>1</channel>

<carFlux>0</carFlux>

<smallCarFlux>0</smallCarFlux>

<bigCarFlux>0</bigCarFlux>

<passerbyFlux>0</passerbyFlux>

<averOccpancy>0.0</averOccpancy>

<averSpeed>0</averSpeed>

<averCarDis>0</averCarDis>

<midCarFlux>0</midCarFlux>

<averTimeOccupancy>0</averTimeOccupancy>

<averQueueLength>0</averQueueLength>

<averTimeHeadway>0</averTimeHeadway>

<nonmotorFlux>0</nonmotorFlux>

</Statistic>

</StatisticList>

</StatisticOperatorResult>
复制代码

 

 

原创作者: ywbmaster 转载于: https://www.cnblogs.com/ywbmaster/p/18350767
斯提利科
关注
HTTP Digest authentication
Andrea的笔记
05-14 1万+
最近学习了HTTP Digest，并且分别在php和android实现了server端和服务器端逻辑
Digest Auth 认证
雨陆聪辰的博客
01-22 4745
本人写的Digest 认证一次通过，不需要按照常规的方式来  public void postMethod(String url, String query) { try { CredentialsProvider credsProvider = new BasicCredentialsProvider(); credsProvider.setCred...
HTTP Digest Auth
VFSSoft Blogs
04-22 1321
相比于 Basic，Digest 不需要在网络上传输用户的密码。但是它依然不是一个身份验证的完美方案，它没有提供认证消息内容加密的机制。这个协议的目的是创建一个简单的认证方法，避免 Basic 的严重缺陷。
Python HTTP客户端认证：Basic Auth, Digest Auth, OAuth
weixin_73725158的博客
08-27 457
Python作为广泛使用的编程语言，提供了多种库和框架来支持不同类型的HTTP客户端认证机制，包括Basic Auth、Digest Auth和OAuth。尽管实现简单，但Basic Auth的安全性较低，因为Base64编码可以被轻易解码，从而暴露用户名和密码。在Python中，使用。综上所述，Python通过其丰富的库和框架支持多种HTTP客户端认证机制，从简单的Basic Auth到更为安全的Digest Auth，再到功能强大的OAuth，开发者可以根据应用的需求和安全要求选择合适的认证方式。
http-digest的认证
kongyun的博客
08-18 1887
摘要认证 digest authentication　　　←　HTTP1.1提出的基本认证的替代方法     服务器端以nonce进行质询，客户端以用户名，密码，nonce，HTTP方法，请求的URI等信息为基础产生的response信息进行认证的方式。     ※　不包含密码的明文传递          摘要认证步骤：      1. 客户端访问一个受http摘要认证保护的资源。  
Laravel开发-digest-auth
08-28
Laravel开发-digest-auth 内腔的摘要式身份验证RFC 2617
OkHttp3 发送Digest Auth摘要认证
坚持就是胜利的博客
04-18 587
okhttp3.0 Digest Auth
okhttp-digest:okhttp的摘要身份验证器
05-04
okhttp-digest okhttp的摘要身份验证器。 大多数代码是从Apache Http Client移植的。重要的该工件已从jcenter转移到了Maven Central！ 坐标已从com.burgstaller:okhttp-digest:<version>到io.github.rburgst:okhttp-...
http-client-digest_auth：针对Crystal的RFC 2617摘要访问身份验证的实现
02-04
总的来说，`http-client-digest_auth`库为Crystal开发者提供了方便且安全的摘要认证解决方案，遵循了RFC 2617标准，确保了与各种支持摘要认证的服务器的兼容性。理解和正确使用这个库，能够帮助提升你的应用程序在...
SpringBoot使用RestTemplate 摘要认证
weixin_30615767的博客
10-22 1174
SpringBoot使用RestTempate SpringBoot使用RestTemplate摘要认证 SpringBoot使用RestTemplate基础认证 SpringBoot使用RestTemplate 调用exchange方法 显示错误信息 pom文件引用 <?xml version="1.0" encoding="UTF-8"?> <pr...
摘要认证 java_摘要认证及实现HTTP digest authentication
weixin_36029647的博客
02-21 1621
最近工作需要做了摘要认证(digest authentication)，下面就工作中遇到的问题及过程做一个总结。第一次客户端请求GET/POST服务器产生一个随机数nonce，服务器将这个随机数放在WWW-Authenticate响应头，与服务器支持的认证算法列表，认证的域realm一起发送给客户端，如下例子：HTTP /1.1 401 UnauthorizedWWW-Authenticate:D...
HTTP Digest Auth 及HTTP长连接 Libcurl c++实现
勤又氪猿的博客
02-24 1254
HTTP Digest Auth 及HTTP长连接 Libcurl c++实现
Python进行HTTP认证：Basic Auth和Digest Auth
最新发布
2401_86544677的博客
11-05 763
根据具体情况，定制错误处理逻辑，如触发二次认证或通知管理员。通过这些方法，开发者可以有效处理认证失败情况，提高应用程序的弹性和用户体验。
java httpClient Digest Auth 认证
coderYJ的博客
06-30 3193
技术交流QQ群 933925017 java httpClient Digest Auth 认证 因为项目需要,请求海康摄像头,进行抓图以及云台控制等功能, 海康有http协议,但是需要进行请求头认证,因为海康给的资料已经过时,所以找了很久 1.先上postMan测试通过 2.httpClient代码 - 发送普通的请求 DefaultHttpClient httpclient = new DefaultHttpClient(); String hostUrl = "http://172.16.1.1.
使用Spring Security REST服务的基本/Digest身份验证
qianmoQ - 关注云计算,关注大数据
08-01 967
使用Spring Security REST服务的基本/Digest身份验证 案例概述 本文讨论如何在REST API的相同URI结构上设置基本身份验证和Digest身份验证。在前一篇文章中，我们讨论了另一种保护REST服务的方法 - 基于表单的身份验证，因此Basic和Digest身份验证是自然的替代方案，也是更RESTful的身份验证方法。 基本的认证配置 基于表单的身份验...
HTTP 基本认证（basic auth）和摘要认证（digest auth）区别
Dontla的博客
02-07 4152
Basic认证是一种较为简单的HTTP认证方式，客户端通过明文（Base64编码格式）传输用户名和密码到服务端进行认证，通常需要配合HTTPS来保证信息传输的安全。Digest认证是为了修复基本认证协议的严重缺陷而设计的，秉承“绝不通过明文在网络发送密码”的原则，通过“密码摘要”进行认证，大大提高了安全性。绝不通过明文在网络上发送密码可以有效防止恶意用户进行重放攻击可以有选择的防止对报文内容的篡改。
OKHTTP3+springboot
qq_35761348的博客
12-29 728
1.pom文件添加 <dependency> <groupId>com.squareup.okhttp3</groupId> <artifactId>okhttp</artifactId> </dependency> 2.工具类创建 import java.io.IOException; import java.net.InetSocketAddress; import java.net.Proxy; import java
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值