springweb-servicescxfntlmv2

Apache CXF Async Conduit and NTLM using Spring?


I am trying to figure out the best way to move the following bit of code into a spring .xml configuration file: (force async and disable chunkng so NTLM works)

final WSSoap port = new WS().getWSSoap();

final Client client = ClientProxy.getClient(port);
final HTTPConduit httpConduit = (HTTPConduit) client.getConduit();

final HTTPClientPolicy httpClientPolicy = httpConduit.getClient();
httpClientPolicy.setAllowChunking(false);
httpClientPolicy.setAutoRedirect(true);

final BindingProvider bindingProvider = (BindingProvider) port;
final Map<String, Object> requestContext = bindingProvider.getRequestContext();

final Credentials credentials = new NTCredentials("username", "password", "workstation", "domain");
requestContext.put(Credentials.class.getName(), credentials);

requestContext.put(BindingProvider.ENDPOINT_ADDRESS_PROPERTY, "http://www.example.com/");
requestContext.put(AsyncHTTPConduit.USE_ASYNC, Boolean.TRUE);

I've looked over the CXF configuration page (here: http://cxf.apache.org/docs/configuration.html), but I don't see any way to do what I need.

Is there a clean way to handle NTLM authentication for CXF using spring?

Update: I've figured out how to force an async conduit, using the following:

<cxf:bus name="asyncBus">
    <cxf:properties>
        <entry key="use.async.http.conduit" value="true"/>
    </cxf:properties>
</cxf:bus>

<http-conf:conduit name="{http://www.webserviceX.NET}GlobalWeatherSoapPort.http-conduit">
    <http-conf:client AllowChunking="false" Connection="Keep-Alive"/>
</http-conf:conduit>

<jaxws:client id="weatherClient" bus="asyncBus"
        address="http://www.webservicex.com/globalweather.asmx"
        serviceClass="net.webservicex.GlobalWeatherSoap"/>

However I am still having trouble accessing the request context so I can add my NTLM credentials.


Solution

  • I wanted to answer my own question. After many, many hours debugging and stepping through Apache CXF code, I have found a solution. The following spring configuration will enable NTLM authentication over an async conduit:

    <?xml version="1.0" encoding="UTF-8"?>
    <beans
            xmlns="http://www.springframework.org/schema/beans"
            xmlns:cxf="http://cxf.apache.org/core"
            xmlns:http-conf="http://cxf.apache.org/transports/http/configuration"
            xmlns:jaxws="http://cxf.apache.org/jaxws"
            xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
            xsi:schemaLocation="
                    http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd
                    http://cxf.apache.org/core http://cxf.apache.org/schemas/core.xsd
                    http://cxf.apache.org/jaxws http://cxf.apache.org/schemas/jaxws.xsd
                    http://cxf.apache.org/transports/http/configuration http://cxf.apache.org/schemas/configuration/http-conf.xsd">
    
        <!-- 
            ~
            ~ create an asynchronous-only bus for NTLM requests
            ~
        -->
    
        <cxf:bus name="asyncBus">
            <cxf:properties>
                <entry key="use.async.http.conduit" value="true"/>
            </cxf:properties>
        </cxf:bus>
    
        <!-- 
            ~
            ~ configure conduit for NTLM request
            ~
        -->
    
        <http-conf:conduit name="{http://www.webserviceX.NET}GlobalWeatherSoapPort.http-conduit">
            <http-conf:client AllowChunking="false" AutoRedirect="true" Connection="Keep-Alive"/>
        </http-conf:conduit>
    
        <!-- 
            ~
            ~ create service stub
            ~
        -->
    
        <jaxws:client id="weatherClient" bus="asyncBus"
                address="http://www.webservicex.com/globalweather.asmx"
                serviceClass="net.webservicex.GlobalWeatherSoap">
    
            <jaxws:properties>
                <entry key="org.apache.http.auth.Credentials">
                    <bean class="org.apache.http.auth.NTCredentials">
                        <constructor-arg value="DOMAIN/USER:PASSWORD"/>
                    </bean>
                </entry>
            </jaxws:properties>
    
        </jaxws:client>
    
    </beans>
    

    It is also possible to specify the username, password, domain, and workstation in the NTCredentials constructor, if necessary.