webservice的header详解

来源：互联网发布：ext json 编辑：程序博客网时间：2024/06/01 10:45

该webservice是用java axis2做服务端，flex as3做客户端。

一、利用抓包工具抓的请求包如下：

POST /axis2/services/ScService.ScServiceSOAP/ HTTP/1.1Referer: app:/MultimediaDispatch.swfAccept: text/xml, application/xml, application/xhtml+xml, text/html;q=0.9, text/plain;q=0.8, text/css, image/png, image/jpeg, image/gif;q=0.8, application/x-shockwave-flash, video/mp4;q=0.9, flv-application/octet-stream;q=0.8, video/x-flv;q=0.7, audio/mp4, application/futuresplash, */*;q=0.5x-flash-version: 11,1,100,27Content-Type: text/xml; charset=utf-8SOAPAction: "http://www.showclear.cn/ScService/OrgGroupQuery"Content-Length: 492Accept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (Windows; U; zh-CN) AppleWebKit/533.19.4 (KHTML, like Gecko) AdobeAIR/3.1Host: 192.168.2.172:8080Connection: Keep-Alive<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">  <SOAP-ENV:Header>    <AuthHeader>      <password>1</password>      <username>admin</username>    </AuthHeader>  </SOAP-ENV:Header>  <SOAP-ENV:Body>    <tns:CommonReq xmlns:tns="http://www.showclear.cn/ScService/">      <sessionId>1</sessionId>    </tns:CommonReq>  </SOAP-ENV:Body></SOAP-ENV:Envelope>

二、java服务端的处理

ScServiceSkeleton子类重写实现方法：

@Overridepublic OrgGroupQueryResp orgGroupQuery(CommonReq commonReq) {OrgGroupQueryResp resp = new OrgGroupQueryResp();if (!AuthChecker.isAuth()) {resp.setReturnCode(ReturnCode.AUTH_FAIL.getValueS());resp.setTotal(0);} else {Managers.getDbManager().getOrgDao().queryOrgGroup(resp);}return resp;}

权限检测类：

public class AuthChecker {private static final Logger log = Logger.getLogger(AuthChecker.class);@SuppressWarnings("rawtypes")public static boolean isAuth() {boolean result = true;try {MessageContext msgContext = MessageContext.getCurrentMessageContext();OMElement element = msgContext.getEnvelope().getHeader().getFirstElement();Iterator list = (Iterator) msgContext.getEnvelope().getHeader().getFirstElement().getChildElements();String username = "";String password = "";while (list.hasNext()) {element = (OMElement) list.next();if (element.getLocalName().equalsIgnoreCase("username")) {username = element.getText();} else if (element.getLocalName().equalsIgnoreCase("password")) {password = element.getText();}}log.info("username=" + username + ", password=" + password);if (StringUtils.isEmpty(username) || StringUtils.isEmpty(password))result = false;} catch(Exception e) {log.error("AuthChecker error", e);result = false;}return result;}}

三、Flex as3客户端请求

private var ws:WebService;ws = new WebService();ws.wsdl = "http://192.168.2.172:8080/axis2/services/ScService?wsdl";ws.loadWSDL();ws.addEventListener(FaultEvent.FAULT, faultHandler);ws.addHeader(new AuthHeader("admin", "1"));

public function queryOrgGroup():void {ws.addEventListener(ResultEvent.RESULT, resultOrgGroup);//ws.getOperation("OrgGroupQuery").send("1");ws.OrgGroupQuery("1");}private function resultOrgGroup(event:ResultEvent):void { var returnCode:String = event.result.returnCode;var total:int = event.result.total;if (total != 0) {var groups:ArrayCollection = event.result.groups;var size:int = groups.length;var dept:OrgDepartment;for (var i:int=0; i<size; i++) {dept = OrgDepartment.build(groups.getItemAt(i));trace(dept.toString());Managers.getOrgManager().addDept(dept);}}ws.removeEventListener(ResultEvent.RESULT, resultOrgGroup);queryOrgMember();}

AuthHeader类

import mx.rpc.soap.SOAPHeader;public class AuthHeader extends SOAPHeader{public function AuthHeader(username:String, password:String){var content:Object = new Object();content.username = username;content.password = password;var qn:QName = new QName("", "AuthHeader");super(qn, content);}}


	
					
					   webservice的header详解
	  	   HTTP的Header信息详解
	  	   基于Xfire SOAP Header的WebService安全验证教程
	  	   基于Xfire SOAP Header的WebService安全验证教程
	  	   实现Webservice 中Soap Header 的用户验证
	  	   基于Xfire SOAP Header的WebService安全验证教程
	  	   在SOAP Header中携带认证ID的WebService实例
	  	   java调用带有header信息的.net webService
	  	   webservice的handler中对header信息进行校验。
	  	   header详解
	  	   Header详解
	  	   Header详解
	  	   基于header的一些常用指令详解
	  	   php中header的用法详解
	  	   PHP中header的用法详解
	  	   探讨php中header的用法详解
	  	   webservice服务增加header认证
	  	   webService的工作原理详解
	     		  
	  	   浅析组织结构与个人发展的关系
	  	   在C++中子类继承和调用父类的构造函数方法
	  	   Windows Phone 调整屏幕亮度的简单实现
	  	   如何提高网页的运行速度
	  	   Linux下Sniffer程序的实现
	  	   webservice的header详解
	  	   C++的重载，覆盖，隐藏
	  	   SCOI2012——喵星人的点名（后缀数组）
	  	   AS3 位运算
	  	   java 动态AOP
	  	   剑指offer面试题20顺时针打印矩阵
	  	   ZOJ 1868 Airline Hub(枚举)
	  	   回文字符串
	  	   最大子序列、最长递增子序列、最长公共子串、最长公共子序列、字符串编辑距离(链接)