WebService CXF3 范例

有几个原则：
1. 统一接口、统一方法、统一加密解密方式、统一WebService安全认证方式
新工程确认jar是否存在 sxnic-ws-xxx.jar（此包中包括接口、安全认证、WebService客户工具类）  sxnic-comm-3.0.0.jar（此包包括Base64加密解密工具类及Json工具类）

2.加密解密要求：客户端对三个参数都加密，服务端返回的json中只加密业务数据，对status和message不加密

接口如下，仅供参考，无需自己创建

@WebService
public interface SxnicWebService {
/**
* 
* @param siteCode 子系统的编码
* @param func 调用方法名
* @param params
* @return
*/
public String execute(String siteCode,String func,String params);
}

服务端配置
首先实现WebService接口，如下

@WebService
@Service("UcenterNewWebServiceBean")
public class UcenterNewWebServiceImpl implements SxnicWebService {

	private static Logger logger = LoggerFactory.getLogger(UcenterNewWebServiceImpl.class);

	@Autowired
	private WebsiteManager siteManager;

	@Autowired
	private UserExtManager ueManager;

	@Autowired
	private UserManager userManager;

	private String msg;
	
	private String result;

	@Override
	public String execute(String siteCode, String func, String params) {
		logger.debug("===UcenterNewWebServiceImpl===execute start===");
		msg = "200";
		result = "";

		innoExecute(siteCode, func, params);

		if ("200".equals(msg)) {
			// 无需回传数据
			if (StringUtils.isBlank(result)) {
				logger.debug("===UcenterNewWebServiceImpl===处理成功，无需返回数据直接返回Json===");
				result = MsgUtils.crtSuccessMsg("json");
			} else {
				logger.debug("===UcenterNewWebServiceImpl===处理成功，需返回业务数据===");
				result = MsgUtils.crtSuccessMsg(Base64Utils.encode(result), "json");
			}
		} else {
			logger.warn("===UcenterNewWebServiceImpl===errorCode:{}===", msg);
			result = MsgUtils.crtErrorMsg(msg, "json");
		}

		logger.debug("===UcenterNewWebServiceImpl===execute end===status:" + msg);
		return result;
	}

	public void innoExecute(String siteCode, String func, String params) {
		try {
			if (StringUtils.isBlank(siteCode) || StringUtils.isBlank(func)) {
				msg = "450";
				return;
			}

			// 解密
			siteCode = Base64Utils.dccode(siteCode);
			func = Base64Utils.dccode(func);

			if (StringUtils.isNotBlank(params)) {
				params = Base64Utils.dccode(params);
				if (JsonUtils.isBadJson(params)) {
					msg = "451";
					return;
				}
			}

			logger.debug("===UcenterNewWebServiceImpl===参数={}={}={}", new String[] { siteCode, func, params });

			// 验证siteCode合法性
			if (!"dcenter".equals(siteCode) && !WsConstants.WEBSITE_MAP.containsKey(siteCode)) {
				msg = "452";
				return;
			}

			Gson gson = new Gson();

			// 判断func
			if ("getWebSite".equals(func)) {

				// params参数解析，如果没有参数表示查询所有的，如果有参数那么设定参数格式"code":"c1,c2,c3"
				// 具体方法调用
				if (StringUtils.isBlank(params)) {
					result = UcenterWsUtils.WebsiteListtoJson(siteManager.findBy("enabled", true));
				} else {
					String[] codes = StringUtils.split(StringUtils.substringBetween(params, ":\"", "\""), ",");
					HibernateCriteria hc = new HibernateCriteria();
					hc.add(Restrictions.in("code", codes));
					result = UcenterWsUtils.WebsiteListtoJson(siteManager.getByCriteria(hc));
				}
			} else if ("getDept".equals(func)) {
				// 组织机构
				if (StringUtils.isBlank(params)) {
					result = UcenterWsUtils.UserExttoJson(ueManager.findBy("userType", UserExt.USERTYPE_XZDW));
				}
			} else if ("login".equals(func)) {
				Map<String, String> map = gson.fromJson(params, Map.class);
				// 登陆授权
				String usn = map.get("usn");
				String pwd = map.get("pwd");
				// 判断参数是否有效
				if (StringUtils.isBlank(usn) || StringUtils.isBlank(pwd)) {
					msg = "201";
					return;
				}

				Subject subject = SecurityUtils.getSubject();
				UsernamePasswordToken token = new UsernamePasswordToken(usn, pwd, false);

				try {
					subject.login(token);
				} catch (UnknownAccountException ex) {
					msg = "210";
					return;
				} catch (LockedAccountException lae) {
					msg = "211";
					return;
				} catch (AuthenticationException e) {
					msg = "212";
					return;
				} catch (Exception exp) {
					msg = "212";
					return;
				}

				String username = subject.getPrincipal().toString();
				User user = userManager.findByUnique("username", username);
				if (user != null) {
					// 设置user的最后登录时间
					user.setLastLoginDate(new Date());
					user.setLastLoginClient("wsuc_" + siteCode);
					userManager.save(user);
				}
				result = "{\"roles\":\"" + user.getStringRoles() + "\"}";
			} else if ("creUser".equals(func)) {
				// 创建用户
				Map<String, String> map = gson.fromJson(params, Map.class);
				// 登陆授权
				String username = map.get("username");
				String password = map.get("password");
				String email = map.get("email");

				if (StringUtils.isBlank(username) || StringUtils.isBlank(password) || StringUtils.isBlank(email)) {
					msg = "201";
					return;
				}

				User user = userManager.getUserByUsername((String) map.get("username"));
				if (user != null) {
					msg = "218";
					return;
				}
				user = userManager.getUserByEmail((String) map.get("email"));
				if (user != null) {
					msg = "219";
					return;
				}

				user = new User();
				user.setUsername((String) map.get("username"));
				user.setFullname((String) map.get("fullname"));
				user.setPassword((String) map.get("password"));
				user.setEmail((String) map.get("email"));
				// user.setIdcard((String)map.get("idcard"));
				user.setProblem((String) map.get("problem"));
				user.setAnswer((String) map.get("answer"));
				user.setWebsiteId(siteCode);
				user.setPassword(DigestUtils.md5Hex(user.getPassword()));// 对用户+密码加密
				user.setPriority(10);
				user.setUserOrder(1000);
				user.setEnabled(true);
				user.setCreationDate(new Date());
				try {
					userManager.save(user);
				} catch (Exception e) {
					msg = "220";
					return;
				}

			} else {
				// func错误
				msg = "453";
				return;
			}
		} catch (DecodeException e) {
			msg = "450";
			return;
		} catch (Exception e) {
			msg = "500";
			return;
		}
	}

}

spring-cxf配置文件

<jaxws:endpoint id="nucenterSerivce" implementor="#UcenterNewWebServiceBean"
address="/nwsuc">
    <jaxws:inInterceptors>
      <bean class="org.apache.cxf.binding.soap.saaj.SAAJInInterceptor" />
      <ref bean="sxnicWsAuthHandler" />
    </jaxws:inInterceptors>
</jaxws:endpoint>

<bean id="sxnicWsAuthHandler" class="org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor">
  <constructor-arg>
    <map>
      <entry key="action" value="UsernameToken" />
      <entry key="passwordType" value="PasswordText" />
      <entry key="passwordCallbackRef">
       <ref bean="wsServerAuthHandler" />
      </entry>
    </map>
  </constructor-arg>
</bean>

客户端
工具类WsClientUtils
包括两个常用的方式：getUcenterService获取用户中心Service 和 getDcenterService获取数据中心Service
注意上述两方法需要在属性表中有两个参数：ucenter.wsurl 和dcenter.wsurl
客户端Demo（带安全认证）

/**
* 根据WebService的URL建立客户端
* 
* @param url
* @return
* @throws WebServiceException
*/
public static SxnicWebService getServiceByUrl(String url) throws WebServiceException {

try {
JaxWsProxyFactoryBean svr = new JaxWsProxyFactoryBean();
svr.setServiceClass(SxnicWebService.class);
svr.setAddress(url);

Map<String, Object> props = new HashMap<String, Object>();
props.put(WSHandlerConstants.ACTION, WSHandlerConstants.USERNAME_TOKEN);
// 这个WSHandlerConstants.USER 变量暂时不知道什么作用，但是必须有
props.put(WSHandlerConstants.USER, "sxnic");
props.put(WSHandlerConstants.PASSWORD_TYPE, "PasswordText");
props.put(WSHandlerConstants.PW_CALLBACK_CLASS, WsClientAuthHandler.class.getName());

WSS4JOutInterceptor oi = new WSS4JOutInterceptor(props);
svr.getOutInterceptors().add(new SAAJOutInterceptor());
svr.getOutInterceptors().add(oi);
return (SxnicWebService) svr.create();
} catch (Exception e) {
throw new WebServiceException("===WebService客户端构建异常！===");
}
}

工具类：

public class UcenterWsUtils {

	/**
	 * 把WebSite子站点List转换为Json
	 * @param list
	 * @return
	 */
	public static String WebsiteListtoJson(List<Website> list) {

		if (list == null || list.size() == 0) {
			return "{}";
		}

		StringBuffer sb = new StringBuffer();
		sb.append("[");

		for (Website ws : list) {
			sb.append("{");
			sb.append("\"code\":\"" + ws.getCode() + "\",");
			sb.append("\"name\":\"" + ws.getName() + "\",");
			sb.append("\"str1\":\"" + (StringUtils.isBlank(ws.getTokenCode()) ? "token" : ws.getTokenCode()) + "\",");
			sb.append("\"str2\":\"" + (StringUtils.isBlank(ws.getUrl()) ? "url" : ws.getUrl()) + "\",");
			sb.append("\"str3\":\"" + (StringUtils.isBlank(ws.getWsurl()) ? "wsurl" : ws.getWsurl()) + "\"},");
		}

		return StringUtils.removeEnd(sb.toString(), ",") + "]";
	}

	/**
	 * 把服务器返回来的Json中data部分，转化为map，适用于data部分加密的情况下
	 * @param json
	 * @return
	 */
	public static Map<String, WrapperBean> JsonDatatoWebsiteMap(String json) {
		if (JsonUtils.isBadJson(json)) {
			return null;
		}

		Gson gson = new Gson();
		Map<String, WrapperBean> map = new HashMap<String, WrapperBean>();
		List<WrapperBean> list = gson.fromJson(json, new TypeToken<List<WrapperBean>>() {
		}.getType());

		for (WrapperBean b : list) {
			map.put(b.getCode(), b);
		}

		return map;
	}

	/**
	 *  把服务器返回来的Json，转化为map，json不加密的情况下
	 * @param json
	 * @return
	 */
	public static Map<String, WrapperBean> JsontoWebsiteMap(String json) {
		Map<String, WrapperBean> map = new HashMap<String, WrapperBean>();

		if (JsonUtils.isBadJson(json)) {
			return null;
		}

		Gson gson = new Gson();
		Map<String, Object> map1 = gson.fromJson(json, Map.class);
		List<Map> listmap = (List<Map>) map1.get("data");
		for (Map u : listmap) {
			WrapperBean b = gson.fromJson(u.toString(), WrapperBean.class);
			map.put(b.getCode(), b);
		}

		return map;
	}

}

WebService实现类的单元测试

public class UcenterNewWsImplTest extends CommSpringJunitTest {

	@Autowired
	private SxnicWebService service;

	@Autowired
	private BaseCodeManager bcManager;

	@Autowired
	private PropertyManager ptManager;
	
	@Autowired
	private WebsiteManager siteManager;

	String token = "";
	String func = "";
	String params = "";

	@Test
	public void testGetWebSite() {
		bcManager.initNoYear();
		CommConstant.PROPERTY_MAP = ptManager.init();
		
		//清空数据
		siteManager.clear();
		
		//准备数据
		Website w = new Website();
		w.setCode("ucenter");
		w.setName("用户中心");
		w.setWsurl("wsurl");
		w.setUrl("url");
		w.setTokenCode("tokenCode-ucenter");
		
		siteManager.save(w);
		
		w = new Website();
		w.setCode("shenbao");
		w.setName("申报系统");
		w.setWsurl("wsurl");
		w.setUrl("url");
		w.setTokenCode("tokenCode-shenbao");
		
		siteManager.save(w);
		
		token = Base64Utils.encode("dcenter");
		func = Base64Utils.encode("getWebSite");
		params = "";

		//方法调用
		String result = service.execute(token, func, params);

		//结果解析
		Gson gson = new Gson();
		Map<String, Object> map = gson.fromJson(result, Map.class);

		//结果验证
		Assert.assertEquals("200", map.get("status"));

		String data = Base64Utils.dccode(String.valueOf(map.get("data")));

		List<WrapperBean> list = gson.fromJson(data, new TypeToken<List<WrapperBean>>() {
		}.getType());
		
		Assert.assertEquals(2, list.size());
		Assert.assertEquals("ucenter", list.get(0).getCode());
		
		Map<String, WrapperBean> map1 = UcenterWsUtils.JsonDatatoWebsiteMap(data);
		
		Assert.assertEquals(2, map1.size());
		Assert.assertTrue(map1.containsKey("shenbao"));
		Assert.assertEquals("用户中心", map1.get("ucenter").getName());
	}

}