Question

我试图从我的Java应用程序（FileNet P8中的事件操作处理程序）访问Content Navigator上的PluginService。该应用程序使用JAXRS登录服务从Content Navigator服务器接收security_token。但是，如果我尝试调用PluginService，则会收到我的登录已过期的响应。

我能够获得安全令牌，如此代码块中所述：

URL logonUrl = new URL("http://icn-host:9081/jaxrs/logon"
    + "?userid=user"
    + "&password=password"
    + "&desktop=admin"
    + "&contextPath=%2Fnavigator");
HttpURLConnection logonConnection = (HttpURLConnection)logonUrl.openConnection();
logonConnection.setRequestMethod("POST");
logonConnection.setRequestProperty("Content-Type",
    "application/x-www-form-urlencoded");
logonConnection.setDoOutput(true);
InputStream logonResponse = logonConnection.getInputStream();
String responseText = IOUtils.toString(logonResponse, "UTF-8")
    .replaceFirst("^\\{}&&", "");
JSONObject responseJson = JSONObject.parse(responseText);
return (String)responseJson.get("security_token");

但是当我尝试发出另一个请求时，我收到错误回复：

URL requestUrl = new URL("http://icn-host:9081/plugin.do"
    + "?plugin=myPlugin&action=myPluginService&myRequestProps=foobar");
HttpURLConnection requestConnection =
    (HttpURLConnection)requestUrl.openConnection();
requestConnection.setRequestMethod("GET");
String securityToken = getSecurityToken(); // calls above code
requestConnection.setRequestProperty("security_token", securityToken);
equestConnection.setDoOutput(true);
InputStream responseStream = requestConnection.getInputStream();
String responseText = IOUtils.toString(responseStream, "UTF-8")
    .replaceFirst("^\\{}&&", "");
log.info("response was: " + responseText);

我总是得到以下回复：

{
  "messagesEncoded":true,
  "errors": [
    {
      "adminResponse":null,
      "moreInformation":null,
      "explanation":"Your session expired because of inactivity.",
      "number":"1003",
      "userResponse":"Log in again.",
      "text":"Your session expired."
    }
  ]
}

我也尝试过设置Cookie，但没有成功。

java.net.CookieManager cookieManager = new java.net.CookieManager();
Map<String, List<String>> headerFields = logonConnection.getHeaderFields();
List<String> cookiesHeader = headerFields.get("Set-Cookie");
if (cookiesHeader != null) {
  for (String cookie : cookiesHeader) {
    cookieManager.getCookieStore().add(null, HttpCookie.parse(cookie).get(0));
  }
}

// ...

StringBuilder cookieHeader = new StringBuilder();
List<HttpCookie> cookies = cookieManager.getCookieStore().getCookies();

for (int i = 0; i < cookies.size(); i++) {
  if (i > 0) {
    cookieHeader.append(";");
  }

  HttpCookie cookie = cookies.get(i);
  log.info("Cookie " + i + ": " + cookie.toString());
  cookieHeader.append(cookie.toString());
}

requestConnection.setRequestProperty("Cookie", cookieHeader.toString());

我尝试在Content Navigator窗口中使用XMLHttpRequest复制请求，它按预期工作：

var xhr = new XMLHttpRequest();
xhr.open("GET", "plugin.do" +
    "?plugin=myPlugin" +
    "&action=myPluginService" +
    "&myRequestProps=foobar");
xhr.setRequestHeader("security_token", ecm.model.Request._security_token);
xhr.send();

Answer 1

几个月前，我遇到了类似的客户挑战，我必须自动化安装插件和为CI目的应用配置的过程。

我发现在登录会话后获得桌面作为第一个api调用是关键是成为'有效'。

首先是jaxrs / logon，然后是jaxrs / getDesktop，然后你的服务调用。

一点注意事项：如果您计划稍后进行容器管理身份验证，则该过程将有所不同。 jaxrs / logon将不起作用，而jaxrs / getDesktop将提供security_token。

虽然有点评论：拥有一个共享库是不是更好的解决方案，你可以将你的事件动作用作ICN服务？

Answer 2

使用共享库（请参阅Ivo的回答）绝对是最好的方法，调用jaxrs/getDesktop并不适合我。相反，我只是使用Maven Assembly Plugin来包含更新版本的org.apache.httpcomponents依赖项，并使用HttpClient调用请求。

我的最终代码如下所示：

CloseableHttpClient httpClient = HttpClients.custom()
  .setDefaultCookieStore(cookieStore)
  .setDefaultRequestConfig(requestConfig)
  .build();
HttpUriRequest logonRequest = RequestBuilder.post()
  .setUri("http://icn-host:9081/navigator/jarxrs/logon")
  .addParameter("desktop", "admin")
  .addParameter("contextPath", "/navigator")
  .addParameter("userid", "icnadmin")
  .addParameter("password", "password")
  .build();
CloseableHttpResponse logonResponse = httpClient.execute(logonRequest);
HttpEntity responseEntity = logonResponse.getEntity();
String responseText = EntityUtils.toString(responseEntity)
  .replaceFirst("^\\{}&&", "");
JSONObject responseJson = JSONObject.parse(responseText);
String securityToken = (String) responseJson.get("security_token");
HttpUriRequest request = RequestBuilder.get()
  .setUri("http://icn-host:9081/navigator/plugin.do")
  .addParameter("plugin", "myPlugin")
  .addParameter("action", "myPluginService")
  .addParameter("myRequestProps", "foobar")
  .addHeader("security_token", securityToken)
  .build();
HttpClientContext context = HttpClientContext.create();
CookieStore cookieStore = new BasicCookieStore();
context.setCookieStore(cookieStore);
CloseableHttpResponse response = httpClient.execute(request, context);

从外部应用程序登录Content Navigator

2 个答案: