一区国严二区亚洲三区,亚洲精品天堂无码中文字幕,亚洲最大中文字幕

Lib — Wed, 19 Mar 2008 02:10:00 GMT

�?a href="http://www.tkk7.com/jacally/articles/186655.html">WebService开发笔�?1中我们创��Z��一个WebService��单实�?下面我们通过一个简单的用户口��o验证机制来加��Z��下WebService的安全�?

1.修改WebService 服务�?spring 配置文�g ws-context.xml

2.服务端添加passwordCallbackClass回调�c?该类�q�行用户口��o验证:

package cn.org.coral.biz.examples.webservice.handler;
import java.io.IOException;
import javax.security.auth.callback.Callback;
import javax.security.auth.callback.CallbackHandler;
import javax.security.auth.callback.UnsupportedCallbackException;
import org.apache.ws.security.WSPasswordCallback;
public class WsAuthHandler  implements CallbackHandler{
public void handle(Callback[] callbacks) throws IOException, UnsupportedCallbackException {
WSPasswordCallback pc = (WSPasswordCallback) callbacks[0];
if (pc.getIdentifer().equals("ws-client")){
if (!pc.getPassword().equals("admin")) {
throw new SecurityException("wrong password");
}
}else{
throw new SecurityException("wrong username");
}
}
}

3.客户端修改spring 配置文�g wsclient-context.xml 如下:























passwordCallbackRef

4.客户端添加passwordCallback�c?通过该类讄��讉K��口��o

package cn.org.coral.biz.examples.webservice.handler;
import java.io.IOException;
import javax.security.auth.callback.Callback;
import javax.security.auth.callback.CallbackHandler;
import javax.security.auth.callback.UnsupportedCallbackException;
import org.apache.ws.security.WSPasswordCallback;
public class WsClinetAuthHandler  implements CallbackHandler{
public void handle(Callback[] callbacks) throws IOException,
UnsupportedCallbackException {
for (int i = 0; i < callbacks.length; i++) {
WSPasswordCallback pc = (WSPasswordCallback) callbacks[0];
int usage = pc.getUsage();
System.out.println("identifier: " + pc.getIdentifer());
System.out.println("usage: " + pc.getUsage());
if (usage == WSPasswordCallback.USERNAME_TOKEN) {
// username token pwd...
pc.setPassword("admin");
} else if (usage == WSPasswordCallback.SIGNATURE) {
// set the password for client's keystore.keyPassword
pc.setPassword("keyPassword");
}
}
}
}

5.junit单元��试�E�序:

package cn.org.coral.biz.examples.webservice;
import org.springframework.test.AbstractDependencyInjectionSpringContextTests;
import org.springframework.util.Assert;
public class TestWebService extends AbstractDependencyInjectionSpringContextTests {
WebServiceSample webServiceSampleClient;
@Override
protected String[] getConfigLocations() {
setAutowireMode(AUTOWIRE_BY_NAME);
return new String[] { "classpath:/cn/org/coral/biz/examples/webservice/wsclient-context.xml" };
}
/**
* @param webServiceSampleClient the webServiceSampleClient to set
*/
public void setWebServiceSampleClient(WebServiceSample webServiceSampleClient) {
this.webServiceSampleClient = webServiceSampleClient;
}
public void testSay(){
String result = webServiceSampleClient.say(" world");
Assert.hasText(result);
}
}

Lib 2008-03-19 10:10 发表评论

Lib — Sun, 16 Mar 2008 13:41:00 GMT

�|�站: JavaEye 作�? jacally 链接�Q?a style="color: red" >http://lib.javaeye.com/blog/170628 发表旉��: 2008�q?3�?2�?

声明�Q�本文系JavaEye�|�站发布的原创博客文章，未经作者书面许可，严禁��M��|�站转蝲本文�Q�否则必��追�I�法律责任！

1.首先在vs中新建项�?

2.��d��web引用....

3.输入WebService地址�Q�http://88.148.29.54:8080/aio/services/WebServiceSample?wsdl最后点�?#8220;��d��引用”

4.创徏一个简单的form

5.�~�写按钮事�g代码

using System;

using System.Collections.Generic;

using System.ComponentModel;

using System.Data;

using System.Drawing;

using System.Text;

using System.Net;



using System.Windows.Forms;





using WindowsApplication1.WebReference;



namespace WindowsApplication1

{

public partial class Form1 : Form

{

WindowsApplication1.WebReference.WebServiceSampleImplService service = null;



public Form1()

{



InitializeComponent();

}



private void button1_Click(object sender, EventArgs e)

{





String str = "";



try

{

str = service.say("Libin");



}

catch (Exception we)

{

str = we.Message;

}



//MessageBox.Show(str);



textBox1.Text = str ;





}



private void Form1_Load(object sender, EventArgs e)

{

service = new WebServiceSampleImplService();



label1.Text = "WS.url:" + service.Url + "\r\n";



}



private void button2_Click(object sender, EventArgs e)

{

String str = "";



try

{

User user = new User();

user.id = 1;

user.name = "Libin";

str = "userName:" + service.sayUserName(user);



}

catch (Exception we)

{

str = we.Message;

}



//MessageBox.Show(str);



textBox1.Text = str;

}



private void button3_Click(object sender, EventArgs e)

{



String str = "";

try

{



Object[]  users = service.findUsers();

for (int i = 0; i < users.Length; i++)

{

User user = (User)users[i];

str += "id:"+user.id + "  name:" + user.name + "\r\n";

}



}

catch (Exception we)

{

str = we.Message;

}



//MessageBox.Show(str);



textBox1.Text = str;

}

}

}

6.最后点击调试运行，或按F5�q�行�Q�通过点击按钮��可以看到调用WebService的运行结果了

本文的讨��Z��很精彩，��览讨论>>

JavaEye推荐
中国领先的电子商务网站－淘宝�|�招贤纳士，诚聘Java工程�?/span>

文章来源:http://lib.javaeye.com/blog/170628

Lib 2008-03-16 21:41 发表评论

Lib — Sun, 16 Mar 2008 13:40:00 GMT

现在的项目中需要用到SOA概念的地方越来越�?最�q�我接手的一个项目中��提��Z��q�样的业务要�?需要在.net开发的客户端系�l�中讉K��java开发的web�pȝ��,�q�样的业务需求自焉��要通过WebService�q�行信息数据的操作。下面就��我们在开发中摸烦的一点经验教训�ȝ��以下�Q�以供大家参�?

我们��目的整个架构��用的比较��行的WSH MVC�l�合,即webwork2 + Spring + Hibernate;
1.首先集成Apacha CXF WebService �?Spring 框架�?
apache cxf 下蝲地址:http://people.apache.org/dist/incubator/cxf/2.0.4-incubator/apache-cxf-2.0.4-incubator.zip
在spring context配置文�g中引入以下cxf配置

在web.xml中添加过滤器:

	

CXFServlet



org.apache.cxf.transport.servlet.CXFServlet







CXFServlet

/services/*

2.开发服务端WebService接口:

/**

* WebService接口定义�c?

* 

* 使用@WebService���接口中的所有方法输��ZؓWeb Service.

* 可用annotation对设�|�方法、参数和�q�回值在WSDL中的定义.

*/

@WebService

public interface WebServiceSample {





/**

* 一个简单的�Ҏ��,�q�回一个字�W�串

* @param hello

* @return

*/

String say(String hello);



/**

* �E�微复杂一些的�Ҏ��,传递一个对象给服务端处�?br />
* @param user

* @return

*/

String sayUserName(

@WebParam(name = "user") 

UserDTO user);



/**

* 最复杂的方�?�q�回一个List���装的对象集�?br />
* @return

*/

public 

@WebResult(partName="o")

ListObject findUsers();



}

��q��单到复杂定义了三个接�?模拟业务需�?

3.实现接口

/**

* WebService实现�c?

* 

* 使用@WebService指向Interface定义�c�d���?

*/

@WebService(endpointInterface = "cn.org.coral.biz.examples.webservice.WebServiceSample")

public class WebServiceSampleImpl implements WebServiceSample {



public String sayUserName(UserDTO user) {

return "hello "+user.getName();

}



public String say(String hello) {

return "hello "+hello;

}



public ListObject findUsers() {

ArrayList list = new ArrayList();



list.add(instancUser(1,"lib"));

list.add(instancUser(2,"mld"));

list.add(instancUser(3,"lq"));

list.add(instancUser(4,"gj"));

ListObject o = new ListObject();

o.setList(list);

return o;

}



private UserDTO instancUser(Integer id,String name){

UserDTO user = new UserDTO();

user.setId(id);

user.setName(name);

return user;

}

}

4.依赖的两个类:用户对象与List对象

/**

* Web Service传输User信息的DTO.

* 

* 分离entity�c�M��web service接口间的耦合�Q�隔�l�entity�cȝ��修改�Ҏ��口的影响.

* 使用JAXB 2.0的annotation标注JAVA-XML映射�Q�尽量��用默认约�?

* 

*/

@XmlAccessorType(XmlAccessType.FIELD)

@XmlType(name = "User")

public class UserDTO {



protected Integer id;



protected String name;



public Integer getId() {

return id;

}



public void setId(Integer value) {

id = value;

}



public String getName() {

return name;

}



public void setName(String value) {

name = value;

}

}

关于List对象,参照�?a target="_blank">有关JWS的一个问�?/a>中的描述:DK6.0 自带的WebService�?WebMethod的参数好像不能是ArrayList 或者其他List
传递List需要将List 包装在其他对象内部才�?(个�h理解如有不对��h��? ,我在实践中也遇到了此�c�问�?通过以下��装的对象即可以传递List对象.

/**

* Java class for listObject complex type.

* 

* 
The following schema fragment specifies the expected content contained within this class.

* 

* 


* 

*   

*     

*       

*         

*       

*     

*   

* 

* 


* 

* 

*/

@XmlAccessorType(XmlAccessType.FIELD)

@XmlType(name = "listObject", propOrder = { "list" })

public class ListObject {



@XmlElement(nillable = true)

protected List list;



/**

* Gets the value of the list property.

* 

* 

* This accessor method returns a reference to the live list,

* not a snapshot. Therefore any modification you make to the

* returned list will be present inside the JAXB object.

* This is why there is not a set method for the list property.

* 

* 


* For example, to add a new item, do as follows:

* 


*    getList().add(newItem);

* 


* 

* 

* 

* Objects of the following type(s) are allowed in the list

* {@link Object }

* 

* 

*/

public List getList() {

if (list == null) {

list = new ArrayList();

}

return this.list;

}



public void setList(ArrayList list) {

this.list = list;

}



}

5.WebService 服务�?spring 配置文�g ws-context.xml


xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"

xmlns:jaxws="http://cxf.apache.org/jaxws"

xsi:schemaLocation="http://cxf.apache.org/jaxws http://cxf.apache.org/schemas/jaxws.xsd 

http://www.springframework.org/schema/beans  

http://www.springframework.org/schema/beans/spring-beans.xsd"

default-autowire="byName" default-lazy-init="true">




address="/WebServiceSample" implementor="cn.org.coral.biz.examples.webservice.WebServiceSampleImpl"/>

WebService 客户�?spring 配置文�g wsclient-context.xml


xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"

xmlns:jaxws="http://cxf.apache.org/jaxws"

xsi:schemaLocation="http://cxf.apache.org/jaxws 

http://cxf.apache.org/schemas/jaxws.xsd 

http://www.springframework.org/schema/beans  

http://www.springframework.org/schema/beans/spring-beans.xsd"

default-autowire="byName" default-lazy-init="true">






factory-bean="identityValidateServiceClientFactory" factory-method="create" />




class="org.apache.cxf.jaxws.JaxWsProxyFactoryBean">


value="cn.org.coral.admin.service.IdentityValidateService" />


value="http://88.148.29.54:8080/coral/services/IdentityValidateService"/>

6.发布到tomcat服务器以后通过以下地址卛_��查看自定义的webservice接口生成的wsdl:
http://88.148.29.54:8080/aio/services/WebServiceSample?wsdl

7.调用WebService接口的Junit单元��试�E�序

package test.coral.sample;



import org.springframework.test.AbstractDependencyInjectionSpringContextTests;



import cn.org.coral.biz.examples.webservice.WebServiceSample;

import cn.org.coral.biz.examples.webservice.dto.UserDTO;



public class TestWebServiceSample extends

AbstractDependencyInjectionSpringContextTests {

WebServiceSample webServiceSampleClient;



public void setWebServiceSampleClient(WebServiceSample webServiceSampleClient) {

this.webServiceSampleClient = webServiceSampleClient;

}



@Override

protected String[] getConfigLocations() {

setAutowireMode(AUTOWIRE_BY_NAME);

//spring 客户端配�|�文件保存位�|?br />
return new String[] { "classpath:/cn/org/coral/biz/examples/webservice/wsclient-context.xml" };

}



public void testWSClinet(){

Assert.hasText(webServiceSampleClient.say(" world"));

}

}

Lib 2008-03-16 21:40 发表评论

[导入]CAS 单点��d��安装�W�记4 -- asp.net client端的讄��

Lib — Sun, 02 Mar 2008 03:52:00 GMT

�|�站: JavaEye 作�? jacally 链接�Q?a style="color: red;">http://lib.javaeye.com/blog/166619 发表旉��: 2008�q?3�?2�?

声明�Q�本文系JavaEye�|�站发布的原创博客文章，未经作者书面许可，严禁��M��|�站转蝲本文�Q�否则必��追�I�法律责任！

CAS 单点��d��安装�W�记4
--- asp.net client端的讄��

1、首先修改web.Config文�g�Q�加入以下设�|�：

本�h�?net不是很熟悉，感觉�q�里的配�|�类似java web应用�E�序中的�q��o器，当用戯��问web��|��首先跌��{到login.aspx��面�q�行验证�?

2、加入以下c#代码到login.aspx��面的加载事件中�Q?

    //CAS �w�䆾验证 服务器地址

private const string CASHOST = "https://sso.gzps.net:8443/cas/";



protected void Page_Load(object sender, EventArgs e)

{

System.Net.ServicePointManager.CertificatePolicy = new MyPolicy();



// Look for the "ticket=" after the "?" in the URL

string tkt = Request.QueryString["ticket"];



// This page is the CAS service=, but discard any query string residue

string service = Request.Url.GetLeftPart(UriPartial.Path);



// First time through there is no ticket=, so redirect to CAS login

if (tkt == null || tkt.Length == 0)

{

string redir = CASHOST + "login?" +

"service=" + service;

Response.Redirect(redir);

return;

}



// Second time (back from CAS) there is a ticket= to validate

string validateurl = CASHOST + "serviceValidate?" +

"ticket=" + tkt + "&"+

"service=" + service;

StreamReader Reader = new StreamReader( new WebClient().OpenRead(validateurl));

string resp = Reader.ReadToEnd();

// I like to have the text in memory for debugging rather than parsing the stream



// Some boilerplate to set up the parse.

NameTable nt = new NameTable();

XmlNamespaceManager nsmgr = new XmlNamespaceManager(nt);

XmlParserContext context = new XmlParserContext(null, nsmgr, null, XmlSpace.None);

XmlTextReader reader = new XmlTextReader(resp, XmlNodeType.Element, context);



string netid = null;



// A very dumb use of XML. Just scan for the "user". If it isn't there, its an error.

while (reader.Read())

{

if (reader.IsStartElement()) {

string tag = reader.LocalName;

if (tag=="user")

netid = reader.ReadString();

}

}

// if you want to parse the proxy chain, just add the logic above

reader.Close();

// If there was a problem, leave the message on the screen. Otherwise, return to original page.

if (netid == null)

{

Label1.Text = "CAS returned to this application, but then refused to validate your identity.";

}

else

{

Session["UserName"] = netid;

Label1.Text = "Welcome " + netid;

FormsAuthentication.RedirectFromLoginPage(netid, false); // set netid in ASP.NET blocks

}



}

}

以上代码参照了ja-sig�|�站的解��x��案：http://www.ja-sig.org/wiki/display/CASC/ASP.NET+Forms+Authentication

3、以��样就可以了，�q�行时可以蟩到sso服务器进行验证，但蟩转以后报以下错误�Q?
" System.Net.WebException�?基础�q�接已关闭�?无法建立与远�E�服务器信�Q关系 "�?
应该与CAS Server端安装了数字证书�Q��?net Client端�ƈ没有安装相应的证书有兟�?
可以通过配置IIS服务器，支持HTTPS SSL协议实现安全数据交换中介�l�的步骤导入CAS 服务端的数字证书,或者通过http://support.microsoft.com/kb/823177/上介�l�的解决�Ҏ��q�行处理�Q?
实现�c?

using System.Net;

using System.Security.Cryptography.X509Certificates;



public class MyPolicy : ICertificatePolicy {

public bool CheckValidationResult(

ServicePoint srvPoint

, X509Certificate certificate

, WebRequest request

, int certificateProblem) {



//Return True to force the certificate to be accepted.

return true;



} // end CheckValidationResult

} // class MyPolicy

客户端代码中包含下列代码�Q?

   System.Net.ServicePointManager.CertificatePolicy = new MyPolicy();

所有代码见附�gWebSite.rar,��其部��v��C��的IIS服务器就可以了�?
关于IIS服务器的讄��?a target="_blank">asp.net一夜速成教程
本文的讨��Z��很精彩，��览讨论>>

JavaEye推荐
中国领先的电子商务网站－淘宝�|�招贤纳士，诚聘Java工程�?/span>

文章来源:http://lib.javaeye.com/blog/166619

Lib 2008-03-02 11:52 发表评论

[导入]CAS 单点��d��安装�W�记3 -- 与acegi集成

Lib — Thu, 28 Feb 2008 15:39:00 GMT

�|�站: JavaEye 作�? jacally 链接�Q?a style="color: red;">http://lib.javaeye.com/blog/165980 发表旉��: 2008�q?2�?8�?

声明�Q�本文系JavaEye�|�站发布的原创博客文章，未经作者书面许可，严禁��M��|�站转蝲本文�Q�否则必��追�I�法律责任！

CAS 单点��d��安装�W�记3
-- 与acegi集成

在我的项目中应用了acigi安全框架,以下是结合yale cas单点��d��pȝ��q�行的相关配�|?







/j_acegi_cas_security_check




org.acegisecurity.AuthenticationServiceException=/login.do?login_error=user_not_found_error
org.acegisecurity.BadCredentialsException=/login.do?login_error=user_psw_error
org.acegisecurity.concurrent.ConcurrentLoginException=/login.do?login_error=too_many_user_error
org.acegisecurity.DisabledException=/login.do?login_error=disabled_user_error















https://sso.gzps.net:8443/cas/login














my_password_for_this_auth_provider_only


https://sso.gzps.net:8443/cas/proxyValidate






http://localhost:8080/aio/j_acegi_cas_security_check


false
























/casfailed.jsp

/

/j_acegi_cas_security_check

本文的讨��Z��很精彩，��览讨论>>

JavaEye推荐
中国领先的电子商务网站－淘宝�|�招贤纳士，诚聘Java工程�?/span>

文章来源:http://lib.javaeye.com/blog/165980

Lib 2008-02-28 23:39 发表评论

[导入]CAS 单点��d��安装�W�记2 -- 配置CAS,讉K��自己的用戯��

Lib — Wed, 27 Feb 2008 09:46:00 GMT

�|�站: JavaEye 作�? jacally 链接�Q?a style="color: red;">http://lib.javaeye.com/blog/165538 发表旉��: 2008�q?2�?7�?

声明�Q�本文系JavaEye�|�站发布的原创博客文章，未经作者书面许可，严禁��M��|�站转蝲本文�Q�否则必��追�I�法律责任！

CAS 单点��d��安装�W�记2

1.修改cas/webapp/WEB-INF/deployerConfigContext.xml
加入以下定义:

	









       






class="org.jasig.cas.authentication.handler.DefaultPasswordEncoder" autowire="byName">

2.屏蔽原有验证�Ҏ��:

3.加入通过讉K��数据库进行验证的handler:

4.修改cas\webapp\WEB-INF\cas.properties,定义数据库连接资�?本例子是�q�接的oracle数据�?

db.driver=oracle.jdbc.driver.OracleDriver

db.url=jdbc\:oracle\:thin\:@192.168.1.1\:1521\:xxxx

db.username=xxxx

db.password=xxxx

5.增加相关jar包到cas\webapp\WEB-INF\lib\目录�?
cas-server-support-jdbc-3.2.jar (cas�q�接数据库的支持�?
ojdbc14.jar (�q�接oracle数据的jdbc驱动�E�序)
本文的讨��Z��很精彩，��览讨论>>

JavaEye推荐
中国领先的电子商务网站－淘宝�|�招贤纳士，诚聘Java工程�?/span>

文章来源:http://lib.javaeye.com/blog/165538

Lib 2008-02-27 17:46 发表评论

[导入]CAS 单点��d��安装�W�记1 -- 基本讄��与数字证书的安装

Lib — Tue, 26 Feb 2008 08:35:00 GMT

�|�站: JavaEye 作�? jacally 链接�Q?a style="color: red;">http://lib.javaeye.com/blog/165196 发表旉��: 2008�q?2�?6�?

声明�Q�本文系JavaEye�|�站发布的原创博客文章，未经作者书面许可，严禁��M��|�站转蝲本文�Q�否则必��追�I�法律责任！

安装JA-SIG SSO�pȝ��W�记1

(关于配置讉K��数据库的用户表见安装JA-SIG SSO�pȝ��W�记2)
(与acegi�l�合配置�?a target="_blank">安装JA-SIG SSO�pȝ��W�记3)
(ASP.NET client端的讄��?a target="_blank">安装JA-SIG SSO�pȝ��W�记4)

ps:配置中的文�g路径�Ҏ��自己的实际情�늚�讑֮�

1.安装JA-SIG �?TOMCAT;
JA-SIG下蝲地址:
http://www.ja-sig.org/products/cas/downloads/index.html

2.生成数字证书,见批处理文�g"cas 生成数字证书.bat";

3.配置Tomcat的HTTPS服务,修改server.xml

		
port="8443" minSpareThreads="5" maxSpareThreads="75"

enableLookups="true" disableUploadTimeout="true" 

acceptCount="100"  maxThreads="200"

scheme="https" secure="true" SSLEnabled="true"

keystoreFile="C:/Documents and Settings/Administrator/.keystore" keystorePass="changeit"

truststoreFile="D:/Java/jdk1.6.0_02/jre/lib/security/cacerts"

clientAuth="false" sslProtocol="TLS"/>

4.导出 SERVER 的证书，用来�l�所有需要用到的客户端导�?�?导出 cas 数字证书.bat"

5.在客��L��?JVM 里导入信�ȝ�� SERVER 的证�?( �Ҏ��情况有可能需要管理员权限 ),�?导入 cas 证书.bat"�Q?

5.修改客户端服务程�?加入cas�q��o�?修改web.xml

	



CAS Filter

edu.yale.its.tp.cas.client.filter.CASFilter



edu.yale.its.tp.cas.client.filter.loginUrl

https://sso.gzps.net:8443/cas/login





edu.yale.its.tp.cas.client.filter.validateUrl

https://sso.gzps.net:8443/cas/serviceValidate





edu.yale.its.tp.cas.client.filter.serverName

88.148.29.54:8080







CAS Filter

/*

本文的讨��Z��很精彩，��览讨论>>

JavaEye推荐
中国领先的电子商务网站－淘宝�|�招贤纳士，诚聘Java工程�?/span>

文章来源:http://lib.javaeye.com/blog/165196

Lib 2008-02-26 16:35 发表评论

Eclipse 插�g集合

Lib — Tue, 03 Jul 2007 08:43:00 GMT

JSBuilder:
http://download.macromedia.com/pub/labs/jseclipse/autoinstall/
xfire:
ttp://dist.codehaus.org/xfire/update/
m2eclipse:
http://m2eclipse.codehaus.org/

Lib 2007-07-03 16:43 发表评论

改变已经打开的窗口样�?�?

Lib — Thu, 14 Jun 2007 08:45:00 GMT

Lib 2007-06-14 16:45 发表评论

打开和一个图象大��的�H�口�Q�随图象大小��L��变化(�?

Lib — Thu, 14 Jun 2007 08:26:00 GMT

�q�里有一个例子，是打开和一个图象大��的�H�口�Q�随图象大小��L��变化�Q�你可以�怼�发挥。要看更多的请到 http://elove.heha.net

Lib 2007-06-14 16:26 发表评论

一区国严二区亚洲三区,亚洲精品天堂无码中文字幕,亚洲最大中文字幕

[导入]CAS 单点��d��安装�W�记4 -- asp.net client端的讄���