CXF Webservice Server将请求凭据委托给内部Webservice调用

Question

如何将凭据(basic auth)从一个获取请求传递到另一个Webservice的新请求？

我没有找到任何可以在一个请求中在拦截器之间共享数据的属性包。

为求澄清：

• 具有基本auth cred >请求-> WS-1的客户端
• ** WS-1 ->请求-> WS-2并从原始客户端传递凭据
• ** WS-1 ->请求-> WS-3 (没有with)
• WS-1 ->响应->客户端

Answer 1

希望通过这个解决方案，我不会一秒跑。麻烦？

我所做的：

添加inInterceptor、读出凭据和远程ip

    AuthorizationPolicy policy = message.get(AuthorizationPolicy.class);

    if (policy == null) {
        sendErrorResponse(message, HttpURLConnection.HTTP_UNAUTHORIZED);
        return;
    }


    message.put("request_usr", policy.getUserName());
    message.put("request_pwd", policy.getPassword());

操作CXF生成的WebServiceClient来更改构造器返回值，如

/**
 * 
 * @return returns WebServiceClass
 */
@WebEndpoint(name = "WebServiceClassSoap")
public WebServiceClassSoap getWebServiceClassSoap() {
    return dynamicAuthorisation(super.getPort(WebServiceClassSoap,
            WebServiceClassSoap.class));
} 

private WebServiceClassSoap  dynamicAuthorisation (WebServiceClassSoap  service) {
    return dynamicAuthorisation(service, 
                PhaseInterceptorChain.getCurrentMessage().get("request_usr").toString(),
                PhaseInterceptorChain.getCurrentMessage().get("request_pwd").toString());
}


private WebServiceClassSoap  dynamicAuthorisation (WebServiceClassSoap  service, String username, String password) {

    Client client = ClientProxy.getClient(service);
    HTTPConduit http = (HTTPConduit) client.getConduit();

    AuthorizationPolicy auth = http.getAuthorization();

    auth.setUserName(username);
    auth.setPassword(password);

    http.setAuthorization(auth);

    return service;
}

离开http-conf: beans.xml中的管道

    <http-conf:conduit name="{http://schemas.foobar.com/websvc/WebServiceClass/}WebServiceClassSoap.http-conduit">
        <http-conf:authorization>
                <!-- 
                <sec:UserName>${webservices.username}@${webservices.domain}</sec:UserName>
                <sec:Password>${webservices.password}</sec:Password>
                -->
                <sec:AuthorizationType>Basic</sec:AuthorizationType>
        </http-conf:authorization>
        <http-conf:client AllowChunking="false" ConnectionTimeout="30000" />            
</http-conf:conduit>

感谢Apache CXF: Forwarding an information from an interceptor to the actual webservice implementation =)