Question

所以，我正在eclipse中使用rampart和axis2开发一个Web服务。我正在尝试实现一个简单的用户名/密码身份验证方案，但我有一些问题。

我的代码现在基本上正常工作，但在我的SOAP请求中添加了3（！）次：

        <wsse:UsernameToken xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="UsernameToken-1">
           <wsse:Username>test</wsse:Username>
           <wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">pass</wsse:Password>
        </wsse:UsernameToken>
        <wsse:UsernameToken xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="UsernameToken-2">
           <wsse:Username>test</wsse:Username>
           <wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">pass</wsse:Password>
        </wsse:UsernameToken>
        <wsse:UsernameToken xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="UsernameToken-3">
           <wsse:Username>test</wsse:Username>
           <wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">pass</wsse:Password>
        </wsse:UsernameToken>

我得到的回答是正确的，所以我真的不明白为什么相同的标题元素被添加三次。有人可以帮忙吗？

我的services.xml如下所示：

请在此输入您的服务说明

<wsp:Policy wsu:Id="UTOverTransport"
    xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"
    xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy">
    <wsp:ExactlyOne>
        <wsp:All>
            <sp:SignedSupportingTokens
                xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
                <wsp:Policy>
                    <sp:UsernameToken
                        sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/AlwaysToRecipient" />
                </wsp:Policy>
            </sp:SignedSupportingTokens>
            <ramp:RampartConfig xmlns:ramp="http://ws.apache.org/rampart/policy">
                <ramp:passwordCallbackClass>sec.PWCBHandler</ramp:passwordCallbackClass>
            </ramp:RampartConfig>

        </wsp:All>
    </wsp:ExactlyOne>
</wsp:Policy>


<messageReceivers>
    <messageReceiver mep="http://www.w3.org/2004/08/wsdl/in-only" class="org.apache.axis2.rpc.receivers.RPCInOnlyMessageReceiver" />
    <messageReceiver  mep="http://www.w3.org/2004/08/wsdl/in-out"  class="org.apache.axis2.rpc.receivers.RPCMessageReceiver"/>
</messageReceivers>
<parameter name="ServiceClass" locked="false">sec.add</parameter>

在客户端，我的axis2.xml看起来像这样：

<wsp:Policy wsu:Id="UTOverTransport" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy">
    <wsp:ExactlyOne>
      <wsp:All>
        <sp:SignedSupportingTokens xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
            <wsp:Policy>
                <sp:UsernameToken sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/AlwaysToRecipient" />
          </wsp:Policy>
        </sp:SignedSupportingTokens>
        <ramp:RampartConfig xmlns:ramp="http://ws.apache.org/rampart/policy"> 
            <ramp:user>test</ramp:user>
            <ramp:passwordCallbackClass>sec.PWCBHandler</ramp:passwordCallbackClass>
        </ramp:RampartConfig>
      </wsp:All>
    </wsp:ExactlyOne>
</wsp:Policy>

我的Client.java实现如下：

public void invokeService(){

    ConfigurationContext ctx;
    try {
        ctx = ConfigurationContextFactory.createConfigurationContextFromFileSystem(this.path, null);
        AddStub stub = new AddStub(ctx,this.EPR);

        ServiceClient client = stub._getServiceClient();
        Options o = client.getOptions();
                    o.setUsername("test");
                    o.setPassword("pass");
        client.engageModule("rampart");

        AddStub.AddNumbers add = new AddStub.AddNumbers();
        add.setA(this.a);
        add.setB(this.b);

        System.out.println("Requesting");
        AddStub.AddNumbersResponse response = stub.addNumbers(add);
        System.out.println(response.get_return());

    } catch (AxisFault e) {
        // TODO Auto-generated catch block
        e.printStackTrace();
    } 
    catch (RemoteException e) {
        e.printStackTrace();
    }
}

Rampart Axis2请求中的多个<wsse：security>标头（错误）</wsse：security>

0 个答案: