JAX-WS实作webservice验证

在JAX WS标准中,作websevice变得容易,都是用注解等就能够实现了,其中用来作
webservice的权限也是很容易的,好比要根据用户名和密码才能访问ws,下面直接代码,
给出对应的例子,使用的是cxf了.


1 ws接口类
   [code="java"]
import javax.jws.WebMethod;
import javax.jws.WebService;
import javax.jws.soap.SOAPBinding;
import javax.jws.soap.SOAPBinding.Style;


 
@WebService
@SOAPBinding(style = Style.RPC)
public interface HelloWorld {
    @WebMethod
    String getHelloWorldMessage();


} 


[/code]


2 WS 接口实现类:
   [code="java"]
@WebService(endpointInterface = "com.ws.HelloWorld")
public class HelloWorldImpl implements HelloWorld {
    @Resource     WebServiceContext wsctx;     @Override     public String getHelloWorldMessage() {         MessageContext mctx = wsctx.getMessageContext();         // 取得报文头         Map http_headers =             (Map) mctx.get(             MessageContext.HTTP_REQUEST_HEADERS);         List<String> userList = (List) http_headers.get("Username");         List<String> passList = (List) http_headers.get("Password");         String username = "";         String password = "";         if (userList != null) {             username = userList.get(0);         }         if (passList != null) {             password = passList.get(0);         }         if (username.equals("test")&&password.equals("password")) {             return "Hello "                 + username +                 " to world of Jax WS - Valid User!";         } else {             return " User No Valid!";         }     }   }  [/code]   其中,其实就是取出header的信息取进行判断是否有这个权限了,很容易明白. 3 而后是发布这个ws    [code="java"]   public static void main(String[] args){        Endpoint.publish(        "http://localhost:9000/ws/hello", new HelloWorldImpl());          } [/code] 4 客户端去调用这个WS,其中注意要用户名和密码的传递,这里为了简单,没用证书等了, 只是示意,其实是复杂多了:   [code="java"]  public class HelloWorldClient {     private static final String WS_URL =             "http://localhost:9000/ws/hello?wsdl";     public static void main(String[] args) throws Exception {         URL url = new URL(WS_URL);         QName qname = new QName(             "http://ws.test.com/",             "HelloWorldImplService");         Service service = Service.create(url, qname);         HelloWorld hello = service.getPort(HelloWorld.class);         BindingProvider provider = (BindingProvider) hello;         Map<String, Object> req_ctx = provider.getRequestContext();         req_ctx.put(         BindingProvider.ENDPOINT_ADDRESS_PROPERTY, WS_URL); //调用的用户名和密码,用map Map<String, List<String>> headers = new HashMap<String, List<String>>();         headers.put("Username", Collections.singletonList("test"));         headers.put("Password",             Collections.singletonList("password"));         req_ctx.put(MessageContext.HTTP_REQUEST_HEADERS, headers);     } } [/code]   其实核心就是:   headers.put("Username", Collections.singletonList("test"));         headers.put("Password",             Collections.singletonList("password"));         req_ctx.put(MessageContext.HTTP_REQUEST_HEADERS, headers); 在消息头中设置好MAP就能够了.