如何使用 php 与 CXF 服务建立安全连接？

Question

我正在尝试让 SOAP 客户端运行，我从服务提供商获得的唯一示例是 Java 版本，但我需要使用 PHP 来完成此操作。我对 Zend 不太陌生，但对使用 SOAP 很陌生。

我认为主机服务正在使用 Apache CXF。

我像这样使用它（如下）并不断收到异常“未提供用户名”

$wsdlprice = '/home/rob/var/www/catalog-pim/public/wsdl-docs/PriceAvailabilityService_V02.wsdl';
$client = new Zend_Soap_Client($wsdlprice, array('encoding' => 'UTF-8', 'compression' => SOAP_COMPRESSION_ACCEPT));
$client->setOptions(array('login' => 'my-username', 'password' => 'my-password'));

    print_r($client);

try {
    $client->getPriceAvailability(array('hideZeroInv' => '0'));
} 
catch (SoapFault $exception) {
    echo '<br /><br /><br />EXCEPTION=' . $exception;
}

我收到的错误：

EXCEPTION=SoapFault exception: [soap:000101] Username is not provided in /home/rob/var/www/catalog-pim/library/Zend/Soap/Client.php:1121 Stack trace: #0 /home/rob/var/www/catalog-pim/library/Zend/Soap/Client.php(1121): SoapClient->__soapCall('getPriceAvailab...', Array, NULL, NULL, Array)

我查看了第 1121 行的 Zend 的“Client.php”，它是肥皂“__call”方法。所以，可能是 PHP 的肥皂科学家不喜欢的任何东西......比如没有“用户名”，

我一直尝试添加“用户名”，或“用户名”到 $client，我尝试将它添加到“getPriceAvailability” （）' 方法。我想我需要将它放在请求标头中，但我也无法弄清楚。我尝试搞乱 $client->addSoapInputHeader(new SoapHeader::$header); 但我不知道要在 $header 中放入什么，而且我似乎在网上找不到太多内容。

WSDL 文档：

<?xml version='1.0' encoding='UTF-8'?><wsdl:definitions name="PriceAvailabilityServiceV02" targetNamespace="http://pnaV02.model.ws.synnex.com/" xmlns:ns1="http://schemas.xmlsoap.org/soap/http" xmlns:soap="http://schemas.xmlsoap.org/wsdl/soap/" xmlns:tns="http://pnaV02.model.ws.synnex.com/" xmlns:wsdl="http://schemas.xmlsoap.org/wsdl/" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
<wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="UTOverTransport">
        <wsp:ExactlyOne>
            <wsp:All>
                <sp:TransportBinding xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
                    <wsp:Policy>
                        <sp:TransportToken>
                            <wsp:Policy>
                                  <sp:HttpsToken RequireClientCertificate="false"/> 
                            </wsp:Policy>
                        </sp:TransportToken>
                        <sp:AlgorithmSuite>
                            <wsp:Policy>
                                <sp:Basic256/>
                            </wsp:Policy>
                        </sp:AlgorithmSuite>
                        <sp:Layout>
                            <wsp:Policy>
                                <sp:Lax/>
                            </wsp:Policy>
                        </sp:Layout>
                        <sp:IncludeTimestamp/>
                    </wsp:Policy>
                </sp:TransportBinding>
                <sp:SignedSupportingTokens xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
                    <wsp:Policy>
                        <sp:UsernameToken sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/AlwaysToRecipient"/>
                    </wsp:Policy>
                </sp:SignedSupportingTokens>
            </wsp:All>
        </wsp:ExactlyOne>
    </wsp:Policy>    
  <wsdl:types>
<xs:schema attributeFormDefault="unqualified" elementFormDefault="unqualified" targetNamespace="http://pnaV02.model.ws.synnex.com/" xmlns:tns="http://pnaV02.model.ws.synnex.com/" xmlns:xs="http://www.w3.org/2001/XMLSchema">
    <xs:element name="getPriceAvailability" type="tns:getPriceAvailability" />
    <xs:element name="getPriceAvailabilityResponse" type="tns:getPriceAvailabilityResponse" />
    <xs:complexType name="getPriceAvailability">
        <xs:sequence>
            <xs:element maxOccurs="unbounded" minOccurs="0" name="skuList" type="tns:skuList" />
            <xs:element maxOccurs="unbounded" minOccurs="0" name="warehouse" type="tns:warehouse" />
            <xs:element name="hideZeroInv" type="xs:boolean" />
        </xs:sequence>
    </xs:complexType>
    <xs:complexType name="skuList">
        <xs:sequence>
            <xs:element minOccurs="0" name="synnexSku" type="xs:int" />
            <xs:element minOccurs="0" name="specialPriceType" type="tns:specialPriceType" />
            <xs:element minOccurs="0" name="mfgPartNumber" type="xs:string" />
        </xs:sequence>
    </xs:complexType>
    <xs:complexType name="getPriceAvailabilityResponse">
        <xs:sequence>
            <xs:element minOccurs="0" name="return" type="tns:pnaResponse" />
        </xs:sequence>
    </xs:complexType>
    <xs:complexType name="pnaResponse">
        <xs:sequence>
            <xs:element maxOccurs="unbounded" name="priceAvailabilityList" type="tns:pnaDetail" />
            <xs:element name="errorMessage" type="xs:string" />
            <xs:element name="errorDetail" type="xs:string" />
        </xs:sequence>
    </xs:complexType>
    <xs:complexType name="pnaDetail">
        <xs:sequence>
            <xs:element name="synnexSku" type="xs:int" />
            <xs:element name="mfgPartNumber" type="xs:string" />
            <xs:element name="mfgCode" type="xs:int" />
            <xs:element name="status" type="tns:pnaPartStatus" />
            <xs:element name="shortDescription" type="xs:string" />
            <xs:element name="globalProductStatusCode" type="tns:pnaPartStatus" />
            <xs:element name="resellerPrice" type="xs:double" />
            <xs:element name="totalQuantity" type="xs:int" />
            <xs:element name="totalOnOrder" type="xs:int" />
            <xs:element name="totalBO" type="xs:int" />
            <xs:element maxOccurs="unbounded" name="availabilityByWarehouseList" type="tns:availabilityByWarehouse" />
            <xs:element name="lineNumber" type="xs:int" />
            <xs:element minOccurs="0" name="specialPriceType" type="tns:specialPriceType" />
        </xs:sequence>
    </xs:complexType>
    <xs:complexType name="availabilityByWarehouse">
        <xs:sequence>
            <xs:element name="warehouseInfo" type="tns:warehouseInfo" />
            <xs:element name="quantity" type="xs:int" />
            <xs:element maxOccurs="unbounded" minOccurs="0" name="ETAList" type="tns:availETA" />
            <xs:element name="OnOrder" type="xs:int" />
            <xs:element name="BO" type="xs:int" />
        </xs:sequence>
    </xs:complexType>
    <xs:complexType name="warehouseInfo">
        <xs:sequence>
            <xs:element name="warehouse" type="tns:warehouse" />
            <xs:element name="zipCode" type="xs:string" />
            <xs:element name="city" type="xs:string" />
            <xs:element name="address" type="xs:string" />
        </xs:sequence>
    </xs:complexType>
    <xs:complexType name="availETA">
        <xs:sequence>
            <xs:element minOccurs="0" name="ETA" type="xs:string" />
            <xs:element name="QTY" type="xs:int" />
        </xs:sequence>
    </xs:complexType>
    <xs:simpleType name="specialPriceType">
        <xs:restriction base="xs:string">
            <xs:enumeration value="PROMOTION" />
            <xs:enumeration value="FEDERALGOVERNMENT" />
            <xs:enumeration value="STATEGOVERNMENT" />
            <xs:enumeration value="EDUCATION" />
        </xs:restriction>
    </xs:simpleType>
    <xs:simpleType name="warehouse">
        <xs:restriction base="xs:string">
            <xs:enumeration value="ANY" />
            <xs:enumeration value="CLOSEST" />
            <xs:enumeration value="MULTIPLE" />
            <xs:enumeration value="DNV" />
            <xs:enumeration value="DFR" />
            <xs:enumeration value="DAT" />
            <xs:enumeration value="DTX" />
            <xs:enumeration value="DCH" />
            <xs:enumeration value="DTN" />
            <xs:enumeration value="DNJ" />
            <xs:enumeration value="DDC" />
            <xs:enumeration value="DOR" />
            <xs:enumeration value="DLA" />
            <xs:enumeration value="DCC" />
            <xs:enumeration value="DOH" />
            <xs:enumeration value="DFL" />
            <xs:enumeration value="DDS" />
            <xs:enumeration value="UNKNOWN" />
            </xs:restriction>
    </xs:simpleType>
    <xs:simpleType name="pnaPartStatus">
        <xs:restriction base="xs:string">
            <xs:enumeration value="DISCONTINUED" />
            <xs:enumeration value="INACTIVE" />
            <xs:enumeration value="ACTIVE" />
            <xs:enumeration value="NOTAUTHORIZED" />
            <xs:enumeration value="NOTSETUP" />
            <xs:enumeration value="NOTFOUND" />
            <xs:enumeration value="UNKNOWN" />
        </xs:restriction>
    </xs:simpleType>
</xs:schema>
  </wsdl:types>
  <wsdl:message name="getPriceAvailability">
    <wsdl:part element="tns:getPriceAvailability" name="parameters">
    </wsdl:part>
  </wsdl:message>
  <wsdl:message name="getPriceAvailabilityResponse">
    <wsdl:part element="tns:getPriceAvailabilityResponse" name="parameters">
    </wsdl:part>
  </wsdl:message>
  <wsdl:portType name="PriceAvailabilityService" xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy" wsp:PolicyURIs="#UTOverTransport">
    <wsdl:operation name="getPriceAvailability">
      <wsdl:input message="tns:getPriceAvailability" name="getPriceAvailability">
    </wsdl:input>
      <wsdl:output message="tns:getPriceAvailabilityResponse" name="getPriceAvailabilityResponse">
    </wsdl:output>
    </wsdl:operation>
  </wsdl:portType>
  <wsdl:binding name="PriceAvailabilityServiceV02SoapBinding" type="tns:PriceAvailabilityService">
    <soap:binding style="document" transport="http://schemas.xmlsoap.org/soap/http" />
    <wsdl:operation name="getPriceAvailability">
      <soap:operation soapAction="" style="document" />
      <wsdl:input name="getPriceAvailability">
        <soap:body use="literal" />
      </wsdl:input>
      <wsdl:output name="getPriceAvailabilityResponse">
        <soap:body use="literal" />
      </wsdl:output>
    </wsdl:operation>
  </wsdl:binding>
  <wsdl:service name="PriceAvailabilityServiceV02">
    <wsdl:port binding="tns:PriceAvailabilityServiceV02SoapBinding" name="PriceAvailabilityServicePort">
      <soap:address location="http://ws.synnex.com/webservice/pnaserviceV02" />
    </wsdl:port>
     <wsdl:port binding="tns:PriceAvailabilityServiceV02SoapBinding" name="PriceAvailabilityServicePort_UAT">
      <soap:address location="http://testws.synnex.com/webservice/pnaserviceV02" />
    </wsdl:port>
  </wsdl:service>
</wsdl:definitions>

Answer 1

再次回答我自己的问题...（不过还不错）

我发现我实际上正在尝试连接到 CXF 服务 http://cxf.apache.org/

此特定服务使用此处概述的 WS Security：http://www.oasis-open.org/committees/tc_home.php?wg_abbrev=wss

我不是唯一一个在尝试连接到这样的网站时遇到此问题的人使用 PHP 的服务，幸运的是（对我来说）我找到了这篇文章 http://sastriawan.blogspot.com/2010/01/accessing-ws-security-protected.html

上面的链接清楚地显示了如何使用从大学获得的课程的示例Tornto 网站的一部分，以及我在 Google Code http://code.google.com/p/xmlseclibs/

我还没有广泛研究“新”代码，但它似乎处理将身份验证放入请求，并且对我来说工作得很好。

我创建了一个与博客上的类类似的新类，它扩展了 SoapClient 并添加了我自己的身份验证凭据，现在我能够连接到服务器...只收到有关方法变量丢失的投诉...我将很快修复它我可以建立联系。