使用 RestTemplate (3.1) 进行基本身份验证

Question

我正在尝试使用 Java 重现以下 curl 命令：

curl -v -u user:pass http://myapp.com/api

此命令返回一些 JSON 数据。

我的错误Java实现如下：

@Test
public void callTest() {
    RestTemplate restTemplate = createRestTemplate("user", "pass");
    URI uri = new URI("http://myapp.com/api");
    String res = restTemplate.getForObject(uri, String.class);
}

private static RestTemplate createRestTemplate(String username, String password) {

    UsernamePasswordCredentials cred = new UsernamePasswordCredentials(username, password);
    BasicCredentialsProvider cp = new BasicCredentialsProvider();
    cp.setCredentials(AuthScope.ANY, cred);
    DefaultHttpClient client = new DefaultHttpClient();
    client.setCredentialsProvider(cp);
    ClientHttpRequestFactory factory = new HttpComponentsClientHttpRequestFactory(client);

    RestTemplate restTemplate = new RestTemplate(factory);
    // set the media types properly
    return restTemplate;
}

然而，当我执行测试时，它返回一个org.springframework.web.client.HttpClientErrorException: 401 Unauthorized 异常。

登录DEBUG时，我看不到任何有关身份验证的信息...

我在设置身份验证凭据时做错了什么？

Answer 1

httpclient v4.0 不支持抢占式认证

看这个： http://forum.springsource.org/showthread.php?123385-Preemptive-Basic-Authentication-with-RestTemplate

在 spring Source 中找到了这个解决方案。

它对我有用。

看这个：RestTemplate with Basic Auth in Spring 3.1

Answer 2

使用实例化

HttpClient client = new HttpClient();

不再存在，并且类 DefaultHttpClient 已从 4.3 版 的 HttpComponents HttpClient 中弃用。因此，其他答案无效或已弃用。这是我的版本，我为需要基本身份验证的休息请求编写了这个类：

import org.apache.http.auth.AuthScope;
import org.apache.http.auth.UsernamePasswordCredentials;
import org.apache.http.client.CredentialsProvider;
import org.apache.http.client.HttpClient;
import org.apache.http.impl.client.BasicCredentialsProvider;
import org.apache.http.impl.client.HttpClients;
import org.springframework.http.client.HttpComponentsClientHttpRequestFactory;
import org.springframework.web.client.RestTemplate;

public class RestClient extends RestTemplate {
    public RestClient(String username, String password) {
        CredentialsProvider credsProvider = new BasicCredentialsProvider();
        credsProvider.setCredentials(
                new AuthScope(null, -1),
                new UsernamePasswordCredentials(username, password));
        HttpClient httpClient = HttpClients.custom().setDefaultCredentialsProvider(credsProvider).build();
        setRequestFactory(new HttpComponentsClientHttpRequestFactory(httpClient));
    }
}

然后像这样使用它，例如：

RestClient restClient = new RestClient("username", "password");

String result = restClient.postForObject(...

Answer 3

此答案基于 @kevinpeterson 的答案，但经过重写以使用更新的 Apache HTTP 客户端。

RestTemplate createRestTemplate(String username, String password, String host, int port ) {
    return new RestTemplate(this.createSecureTransport( username, password, host, port ));
}

ClientHttpRequestFactory createSecureTransport( String username, String password, String host, int port ){
    DefaultHttpClient client = new DefaultHttpClient();
    UsernamePasswordCredentials credentials = new UsernamePasswordCredentials( username, password );
    client.getCredentialsProvider().setCredentials( new AuthScope( host, port ), credentials );
    return new HttpComponentsClientHttpRequestFactory(client);

Answer 4

我做了这样的事情 - 它对我有用：

private RestTemplate createRestTemplate(String username, String password) {
    return new RestTemplate(this.createSecureTransport(username, password));
}

protected ClientHttpRequestFactory createSecureTransport(String username, String password){
    HttpClient client = new HttpClient();
    UsernamePasswordCredentials credentials = new UsernamePasswordCredentials(username,password);
    client.getState().setCredentials(AuthScope.ANY, credentials);
    CommonsClientHttpRequestFactory commons = new CommonsClientHttpRequestFactory(client);

    return commons;
}

这里使用：Reference Code