Axis2 客户端抛出 AxisFault:必须了解标头安全性检查失败



我正在使用 Axis2-1.6.1,并且能够成功发送 SOAP 请求。下面是请求的示例:

<?xml version="1.0" encoding="UTF-8"?>
<soapenv:Envelope xmlns:soapenv="http://www.w3.org/2003/05/soap-envelope">
<soapenv:Header>
<wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" soapenv:mustUnderstand="true">
<wsse:UsernameToken xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
<wsse:Username>***username***</wsse:Username>
<wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">***pass***</wsse:Password>
<wsse:Nonce Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary">***nonce***</wsse:Nonce>
<wsu:Created Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary">***datetime***</wsu:Created>
</wsse:UsernameToken>
</wsse:Security>
<wsa:Action xmlns:wsa="http://www.w3.org/2005/08/addressing">http://mysite/contract/users/v3/IUsers/EchoAuthenticated</wsa:Action>
</soapenv:Header>
<soapenv:Body>
<ns6:EchoAuthenticated xmlns:ns6="http://mysite/contract/users/v3">
<ns6:value>success</ns6:value>
</ns6:EchoAuthenticated>
</soapenv:Body>
</soapenv:Envelope>

收到响应后,将引发以下异常:

org.apache.axis2.AxisFault:必须了解标头检查失败 http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd:安全性

在做了一些研究之后,我的印象是 Axis2 不喜欢的响应中有一些东西。感到困惑,我复制了上面的请求并将其粘贴到 SoapUI 中并触发了它。它有效,我收到以下回复。我还使用 Fiddler 确认,这与我在 Eclipse 中发送此请求时得到的响应相同,只是 Axis2 不喜欢客户端,也许必须理解?

以下是响应:

<s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:a="http://www.w3.org/2005/08/addressing" xmlns:u="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
<s:Header>
<a:Action s:mustUnderstand="1">http://mysite/contract/users/v3/IUsers/EchoAuthenticatedResponse</a:Action>
<a:RelatesTo>urn:uuid:***guid***</a:RelatesTo>
<o:Security s:mustUnderstand="1" xmlns:o="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
<u:Timestamp u:Id="_0">
<u:Created>***datetime***</u:Created>
<u:Expires>***datetime***</u:Expires>
</u:Timestamp>
</o:Security>
</s:Header>
<s:Body>
<EchoAuthenticatedResponse xmlns="http://mysite/contract/users/v3">
<EchoAuthenticatedResult>This is the Users service answering back. The value you sent was: success</EchoAuthenticatedResult>
</EchoAuthenticatedResponse>
</s:Body>
</s:Envelope>

我迁移到较新版本的 Axis2 的能力有限,因为它与产品捆绑在一起,但我需要了解如何通过此错误。

我找到了一个解决方案,即在对false的响应中设置mustUnderstanding实例

为此,我做了以下工作:


  1. 创建一个扩展 *org.apache.axis2.handlers.AbstractHandler 的 Handler 类

必须了解处理程序.java

import java.util.Iterator;
import org.apache.axiom.soap.SOAPEnvelope;
import org.apache.axiom.soap.SOAPHeader;
import org.apache.axiom.soap.SOAPHeaderBlock;
import org.apache.axis2.AxisFault;
import org.apache.axis2.context.MessageContext;
public class MustUnderstandHandler extends org.apache.axis2.handlers.AbstractHandler  {
@Override
public InvocationResponse invoke(MessageContext messageContext) throws AxisFault {

try{

System.out.println("RemoveMustUnderstandAll: invoke " + messageContext);

SOAPEnvelope env = messageContext.getEnvelope();
SOAPHeader header = env.getHeader();

if(header != null){

for(Iterator<?> itr = header.getChildElements(); itr.hasNext();){

SOAPHeaderBlock headerBlock = (SOAPHeaderBlock) itr.next();

if(headerBlock.getMustUnderstand()){

headerBlock.setMustUnderstand(false);
System.out.println("RemoveMustUnderstandAll (" + messageContext + "): setMustUnderstand(false) to " + headerBlock.getQName());
}
}
}
}
catch(Exception e){
System.out.println(e.toString());
}

return InvocationResponse.CONTINUE;
}
}

  1. >连接轴配置以使用处理程序类

在生成的存根(从 WSDL2Java 创建)中,我已经找到了它执行客户端的实例,并且在每行之前我都包含以下内容:

我的存根.java

AxisConfiguration axisConfiguration = _messageContext.getConfigurationContext().getAxisConfiguration();
ArrayList arrayList = new ArrayList();
arrayList.add(new MustUnderstandHandler());
axisConfiguration.setInPhasesUptoAndIncludingPostDispatch(arrayList);
// execute the operation client
_operationClient.execute(true);

相关内容

  • 没有找到相关文章

最新更新