HttpClient模拟登录12306购票网站 -

a137268431

浏览: 157580 次

最近访客更多访客>>

DeilSky

lesliehanhan

fireflybird

suncong1024

博主相关

博客

微博

相册

留言

关于我

文章分类

全部博客 (245)

社区版块

存档分类

2014-02 ( 53)
2014-01 ( 69)
2013-12 ( 120)
更多存档...

HttpClient模拟登录12306购票网站

首先12306网站前缀为“https://”表明是用SSL加密。

用HttpClient去模拟发送请求时，对于URL用为“https”时，先要解决证书问题，有两种解决方案：

　　　a.使证书被信任。

　　在查找相关资料时，对于这种方法有点麻烦，最后就没有去尝试，有兴趣的朋友可以试试。

b.使用httpClient时不检测服务器证书是否可信

　　　　扩展HttpClient类实现自动接受证书，因为这种方法自动接收所有证书，因此存在一定的安全问题，所以在使用这种方法前请仔细考虑您的系统的安全需求。

具体的步骤如下：

•提供一个自定义的socket factory（test.MySecureProtocolSocketFactory）。这个自定义的类必须实现接口

org.apache.commons.httpclient.protocol.SecureProtocolSocketFactory，在实现接口的类中调用自定义的

X509TrustManager(test.MyX509TrustManager)

•创建一个org.apache.commons.httpclient.protocol.Protocol的实例，指定协议名称和默认的端口号

Protocol myhttps = new Protocol("https", new MySecureProtocolSocketFactory (), 443);

•注册刚才创建的https协议对象

Protocol.registerProtocol("https ", myhttps);

具体代码如下：

  1 package org.study.meteor.ticket.util;
  2 
  3 import java.io.IOException;    
  4 import java.net.InetAddress;    
  5 import java.net.InetSocketAddress;    
  6 import java.net.Socket;    
  7 import java.net.SocketAddress;    
  8 import java.net.UnknownHostException;    
  9 import java.security.KeyManagementException;    
 10 import java.security.NoSuchAlgorithmException;    
 11 import java.security.cert.CertificateException;    
 12 import java.security.cert.X509Certificate;    
 13     
 14 import javax.net.SocketFactory;    
 15 import javax.net.ssl.SSLContext;    
 16 import javax.net.ssl.TrustManager;    
 17 import javax.net.ssl.X509TrustManager;    
 18     
 19 import org.apache.commons.httpclient.ConnectTimeoutException;    
 20 import org.apache.commons.httpclient.params.HttpConnectionParams;    
 21 import org.apache.commons.httpclient.protocol.SecureProtocolSocketFactory; 
 22 
 23 /**
 24  * MySecureProtocolSocketFactory.java.java Create on 2012-9-26下午1:15:03
 25  * 
 26  * 
 27  * Copyright (c) 2012 by MTA.
 28  * 
 29  * @author lmeteor
 30  * @Email txin0814@sina.com
 31  * @description 自定义的socket factory 实现自动接受证书
 32  * @version 1.0
 33  */
 34 public class MySecureProtocolSocketFactory implements
 35         SecureProtocolSocketFactory
 36 {
 37 
 38     private SSLContext sslcontext = null;
 39 
 40     private SSLContext createSSLContext()
 41     {
 42         SSLContext sslcontext = null;
 43         try
 44         {
 45             sslcontext = SSLContext.getInstance("SSL");
 46             sslcontext.init(null, new TrustManager[]
 47             { new TrustAnyTrustManager() }, new java.security.SecureRandom());
 48         }
 49         catch (NoSuchAlgorithmException e)
 50         {
 51             e.printStackTrace();
 52         }
 53         catch (KeyManagementException e)
 54         {
 55             e.printStackTrace();
 56         }
 57         return sslcontext;
 58     }
 59 
 60     private SSLContext getSSLContext()
 61     {
 62         if (this.sslcontext == null)
 63         {
 64             this.sslcontext = createSSLContext();
 65         }
 66         return this.sslcontext;
 67     }
 68 
 69     public Socket createSocket(Socket socket, String host, int port,
 70             boolean autoClose) throws IOException, UnknownHostException
 71     {
 72         return getSSLContext().getSocketFactory().createSocket(socket, host,
 73                 port, autoClose);
 74     }
 75 
 76     public Socket createSocket(String host, int port) throws IOException,
 77             UnknownHostException
 78     {
 79         return getSSLContext().getSocketFactory().createSocket(host, port);
 80     }
 81 
 82     public Socket createSocket(String host, int port, InetAddress clientHost,
 83             int clientPort) throws IOException, UnknownHostException
 84     {
 85         return getSSLContext().getSocketFactory().createSocket(host, port,
 86                 clientHost, clientPort);
 87     }
 88 
 89     public Socket createSocket(String host, int port, InetAddress localAddress,
 90             int localPort, HttpConnectionParams params) throws IOException,
 91             UnknownHostException, ConnectTimeoutException
 92     {
 93         if (params == null)
 94         {
 95             throw new IllegalArgumentException("Parameters may not be null");
 96         }
 97         int timeout = params.getConnectionTimeout();
 98         SocketFactory socketfactory = getSSLContext().getSocketFactory();
 99         if (timeout == 0)
100         {
101             return socketfactory.createSocket(host, port, localAddress,
102                     localPort);
103         }
104         else
105         {
106             Socket socket = socketfactory.createSocket();
107             SocketAddress localaddr = new InetSocketAddress(localAddress,
108                     localPort);
109             SocketAddress remoteaddr = new InetSocketAddress(host, port);
110             socket.bind(localaddr);
111             socket.connect(remoteaddr, timeout);
112             return socket;
113         }
114     }
115 
116     // 自定义私有类
117     private static class TrustAnyTrustManager implements X509TrustManager
118     {
119 
120         public void checkClientTrusted(X509Certificate[] chain, String authType)
121                 throws CertificateException
122         {
123         }
124 
125         public void checkServerTrusted(X509Certificate[] chain, String authType)
126                 throws CertificateException
127         {
128         }
129 
130         public X509Certificate[] getAcceptedIssuers()
131         {
132             return new X509Certificate[]
133             {};
134         }
135     }
136 }

下面的是httpClient的具体实现类:

  1 package org.study.meteor.ticket.util;
  2 
  3 import java.io.BufferedInputStream;
  4 import java.io.File;
  5 import java.io.FileOutputStream;
  6 import java.io.IOException;
  7 import java.io.InputStream;
  8 import java.io.UnsupportedEncodingException;
  9 import java.util.ArrayList;
 10 import java.util.List;
 11 
 12 import org.apache.commons.httpclient.HttpClient;
 13 import org.apache.commons.httpclient.HttpException;
 14 import org.apache.commons.httpclient.NameValuePair;
 15 import org.apache.commons.httpclient.methods.PostMethod;
 16 import org.apache.commons.httpclient.params.HttpMethodParams;
 17 import org.apache.commons.httpclient.protocol.Protocol;
 18 
 19 /**
 20  * HttpDoPostUtils.java Create on 2012-9-7下午3:08:18
 21  * 
 22  * 
 23  * Copyright (c) 2012 by MTA.
 24  * 
 25  * @author lmeteor
 26  * @Email txin0814@sina.com
 27  * @description 模拟HTTP发送请求得到报文
 28  * @version 1.0
 29  */
 30 @SuppressWarnings("deprecation")
 31 public class HttpDoPostUtils
 32 {
 33 
 34     
 35     private static HttpClient httpClient = null;
 36     
 37     static
 38     {
 39         //指定协议名称和默认的端口号
 40         Protocol myhttps = new Protocol("https", new MySecureProtocolSocketFactory(), 443);
 41         //注册刚才创建的https 协议对象
 42         Protocol.registerProtocol("https", myhttps); 
 43         httpClient = new HttpClient();
 44     }
 45     
 46     /**
 47      * 发送请求报文，得到响应报文
 48      * @param url
 49      *             登录请求URL
 50      * @param pList
 51      *             是否包含请求参数
 52      * @return
 53      * @throws UnsupportedEncodingException
 54      */
 55     public static String doRequestToString(String url,List<NameValuePair> pList) throws UnsupportedEncodingException
 56     {
 57         //获得postMethod对象
 58         PostMethod pmethod = getPostMethod(url);
 59         pmethod.getParams().setParameter(HttpMethodParams.HTTP_CONTENT_CHARSET, "utf-8");
 60         //判断是否包含参数
 61         if(null != pList && pList.size() > 0)
 62         {
 63             pmethod.setRequestBody(pList.toArray(new NameValuePair[pList.size()]));
 64         }
 65         String value = "";
 66         try
 67         {
 68             httpClient.executeMethod(pmethod);
 69             value = pmethod.getResponseBodyAsString();
 70         }
 71         catch ( HttpException e )
 72         {
 73             e.printStackTrace();
 74         }
 75         catch ( IOException e )
 76         {
 77             e.printStackTrace();
 78         }
 79         
 80         return value;
 81     }
 82     
 83     /**
 84      * 获得12306网站的登录验证码
 85      * @param url
 86      *             请求URL
 87      * @param filePath
 88      *             验证码保存路径 如:e:\\login.jpg
 89      * @return
 90      */
 91     public static File doGetFile(String url,String filePath)
 92     {
 93         PostMethod pmethod = getPostMethod(url);
 94         pmethod.getParams().setParameter(HttpMethodParams.HTTP_CONTENT_CHARSET, "utf-8");
 95         try
 96         {
 97             httpClient.executeMethod(pmethod);
 98             //得到响应中的流对象
 99             InputStream in = pmethod.getResponseBodyAsStream();
100             //包装 并读出流信息
101             BufferedInputStream bis = new BufferedInputStream(in);
102             File file = new File(filePath);
103             FileOutputStream fs = new FileOutputStream(file);
104 
105             byte[] buf = new byte[1024];
106             int len = bis.read(buf);
107             if(len == -1 || len == 0){
108                 file.delete();
109                 file = null;
110             }
111             while (len != -1) {
112                 fs.write(buf, 0, len);
113                 len = bis.read(buf);
114             }
115             fs.flush();
116             fs.close();
117             return file;
118         }
119         catch (HttpException e)
120         {
121             e.printStackTrace();
122         }
123         catch (IOException e)
124         {
125             e.printStackTrace();
126         }
127         return null;
128         
129     }
130     
131     public static List<NameValuePair> createNameValuePair(String params) {
132         List<NameValuePair> nvps = new ArrayList<NameValuePair>();
133         if (null != params && !params.trim().equals("")) {
134             String[] _params = params.split("&");
135             // userCookieList = new AttributeList();
136             for (int i = 0; i < _params.length; i++) {
137                 int _i = _params[i].indexOf("=");
138                 if (_i != -1) {
139                     String name = _params[i].substring(0, _i);
140                     String value = _params[i].substring(_i + 1);
141                     nvps.add(new NameValuePair(name, value));
142                 }
143             }
144         }
145         return nvps;
146     }
147     
148     
149     public static PostMethod getPostMethod(String url)
150     {
151         PostMethod pmethod = new PostMethod(url);
152         //设置响应头信息
153         pmethod.addRequestHeader("Connection", "keep-alive");
154         pmethod.addRequestHeader("Cache-Control", "max-age=0");
155         pmethod.addRequestHeader("User-Agent", "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0) ");
156         pmethod.addRequestHeader("Accept", "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8");
157         return pmethod;
158     }
159     
160 }

模拟请求的类已经出来，现在开始进行模拟登录，登录前必须知道12306自身是怎样提交请求，并包含哪些参数到后台，通过firebug就很容易找到这些东西了。

12306登录之前会调用“https://dynamic.12306.cn/otsweb/loginAction.do?method=loginAysnSuggest”，后台返回一串JSON报文，如下：

1 {"loginRand":"652","randError":"Y"}

当randError为“Y”时，才对表单FORM提交，并且将loginRand的值初始化到表单里的隐藏域中，作为参数传到后台

现在最后一步就是拼接参数了，具体操作代码如下：

 1 package org.study.meteor.ticket.util;
 2 
 3 import java.io.BufferedReader;
 4 import java.io.InputStreamReader;
 5 import java.io.UnsupportedEncodingException;
 6 
 7 import org.study.meteor.ticket.domain.LoginBeforeValidatior;
 8 
 9 import net.sf.json.JSONObject;
10 
11 /**
12  * Login.java.java Create on 2012-9-26下午1:48:42 
13  * 
14  * 
15  * Copyright (c) 2012 by MTA.
16  * 
17  * @author lmeteor
18  * @Email txin0814@sina.com
19  * @description 
20  * @version 1.0
21  */
22 public class Login
23 {
24     
25     /**
26      * 获取验证码
27      * @param filePath
28      * @return
29      */
30     public static String getRandCode(String filePath)
31     {
32         String randCode = "";
33         /** 获取验证码 */
34         HttpDoPostUtils.doGetFile(PropertiesUtils.newInstance().getPropertiesValue("loginCode"),filePath);
35         randCode = readString("请输入登录验证码：");
36         return randCode;
37     }
38     
39 
40     /**
41      * 实现登录操作
42      * @throws UnsupportedEncodingException
43      */
44     public static void doLogin() throws UnsupportedEncodingException
45     {
46         String randCode = getRandCode("e:\\login.jpg");
47         /** 登录前 提交得到报文 */
48         String loginBeforeVal = HttpDoPostUtils.doRequestToString(PropertiesUtils.newInstance().getPropertiesValue("loginBeforeValidatiorUrl"),null);
49         //将返回的JSON报文转换成指定的对象
50         JSONObject jsonObj = JSONObject.fromObject(loginBeforeVal);
51         LoginBeforeValidatior loginBefore = new LoginBeforeValidatior();
52         loginBefore = (LoginBeforeValidatior) JSONObject.toBean(jsonObj, LoginBeforeValidatior.class);
53         //拼接参数
54         StringBuffer params = new StringBuffer();
55         params.append("loginRand="+loginBefore.getLoginRand()).append("&")
56                 .append("refundLogin=N").append("&")
57                 .append("refundFlag=Y").append("&")
58                 .append("loginUser.user_name="+PropertiesUtils.newInstance().getPropertiesValue("username")).append("&")
59                 .append("nameErrorFocus=&")
60                 .append("user.password="+PropertiesUtils.newInstance().getPropertiesValue("password")).append("&")
61                 .append("passwordErrorFocus=&")
62                 .append("randCode="+randCode).append("&")
63                 .append("randErrorFocus=");
64         //像服务器发送登录请求 并返回对应的报文
65         String loginResponseText = HttpDoPostUtils.doRequestToString(PropertiesUtils.newInstance().getPropertiesValue("loginUrl"),HttpDoPostUtils.createNameValuePair(params.toString()));
66         System.out.println(loginResponseText);
67         
68     }
69     
70     
71     /**
72      * 多控制台读取验证码
73      * @param msg
74      * @return
75      * @throws Exception
76      */
77     private static String readString(String msg)
78     {
79         BufferedReader bufferedReader = new BufferedReader(new InputStreamReader(System.in));
80         try{
81             System.out.print(msg+": ");
82             return bufferedReader.readLine();
83         }catch(Exception e){
84         }
85         return "1245";
86     }
87     
88     public static void main(String[] args) throws UnsupportedEncodingException
89     {
90         //Login login = new Login();
91         //login.doLogin();
92         Login.doLogin();
93     }
94 }

URL都是在配置文件中的，大致如下：

 1 #12306登录之前调用URL
 2 loginBeforeValidatiorUrl=https://dynamic.12306.cn/otsweb/loginAction.do?method=loginAysnSuggest
 3 #12306登录验证码的地址
 4 loginCode=https://dynamic.12306.cn/otsweb/passCodeAction.do?rand=sjrand
 5 #登录URL
 6 loginUrl=https://dynamic.12306.cn/otsweb/loginAction.do?method=login
 7 #用户名
 8 username=xxxx
 9 #密码
10 password=xxx