import java.util.List;import javax.xml.namespace.QName;import org.apache.cxf.binding.soap.SoapMessage;
import org.apache.cxf.headers.Header;
import org.apache.cxf.interceptor.Fault;
import org.apache.cxf.phase.AbstractPhaseInterceptor;
import org.apache.cxf.phase.Phase;
import org.apache.log4j.Logger;
import org.w3c.dom.Element;
import org.w3c.dom.NodeList;/*** 系统全局拦截器（排除登录服务调用） 用于校验登录的账号是否已登录* */
public class AuthValidateInterceptor extends AbstractPhaseInterceptor<SoapMessage> {private Logger logger = Logger.getLogger(this.getClass());public AuthValidateInterceptor() {// 定义拦截器阶段super(Phase.PRE_INVOKE);}/*** @Description: 拦截器操作* @param message*            被拦截到的消息* @throws Fault*/@Overridepublic void handleMessage(SoapMessage message) {List<Header> headers = message.getHeaders();if (headers == null || headers.isEmpty()) {throw new Fault(new Exception("无授权信息！"));}Element auth = null;// 获取授权信息元素for (Header header : headers) {QName qname = header.getName();String tagName = qname.getLocalPart();if (tagName != null && tagName.equals("auth")) {auth = (Element) header.getObject();break;}}// 如果授权信息元素不存在，提示错误if (auth == null) {throw new Fault(new Exception("无授权信息！"));}NodeList nameList = auth.getElementsByTagName("username");NodeList pwdList = auth.getElementsByTagName("password");if (nameList.getLength() != 1 || pwdList.getLength() != 1) {throw new Fault(new Exception("授权信息错误！"));}String name = nameList.item(0).getTextContent();String password = pwdList.item(0).getTextContent();if (!"admin".equals(name) || !"admin".equals(password)) {throw new Fault(new Exception("授权信息错误！"));}}}

import java.util.List;import javax.xml.namespace.QName;import org.apache.cxf.binding.soap.SoapHeader;
import org.apache.cxf.binding.soap.SoapMessage;
import org.apache.cxf.binding.soap.interceptor.AbstractSoapInterceptor;
import org.apache.cxf.headers.Header;
import org.apache.cxf.helpers.DOMUtils;
import org.apache.cxf.interceptor.Fault;
import org.apache.cxf.phase.Phase;
import org.apache.log4j.Logger;
import org.w3c.dom.Document;
import org.w3c.dom.Element;/*** 系统全局拦截器（排除登录服务调用） 用于校验登录的账号是否已登录* */
public class ClientAuthValidateInterceptor extends AbstractSoapInterceptor {private Logger logger = Logger.getLogger(this.getClass());public static final String xml_namespaceUR = "";public static final String xml_header = "soap:Header";public static final String xml_authentication = "auth:authentication";public static final String xml_systemID = "auth:systemID";public static final String xml_username = "auth:username";public static final String xml_password = "auth:password";public ClientAuthValidateInterceptor() {// 定义拦截器阶段super(Phase.WRITE);}/*** @Description: 拦截器操作* @param message*            被拦截到的消息* @throws Fault*/@Overridepublic void handleMessage(SoapMessage message) {String userId = "test";String sysId = "1";String password = "test";Document doc = DOMUtils.createDocument();Element root = doc.createElement(xml_header);Element eSysId = doc.createElement(xml_systemID);eSysId.setTextContent(sysId);Element eUserId = doc.createElement(xml_username);eUserId.setTextContent(userId);Element ePwd = doc.createElement(xml_password);ePwd.setTextContent(password);Element child = doc.createElementNS(xml_namespaceUR, xml_authentication);child.appendChild(eSysId);child.appendChild(eUserId);child.appendChild(ePwd);root.appendChild(child);QName qname = new QName("RequestSOAPHeader");SoapHeader head = new SoapHeader(qname, root);List<Header> headers = message.getHeaders();headers.add(head);}}

        HelloWorldServiceImplService hello = new HelloWorldServiceImplService();  HelloWorldService service = hello.getHelloWorldServiceImplPort();// 插入身份验证Client clientProxy = ClientProxy.getClient(port);// 通过目标ws获取代理// 注入拦截器，getOutInterceptors代表调用服务端时触发,getInInterceptors就是被调用才触发clientProxy.getOutInterceptors().add(new ClientAuthValidateInterceptor());// 超时时间设置HTTPConduit http = (HTTPConduit) clientProxy.getConduit();HTTPClientPolicy httpClientPolicy = new HTTPClientPolicy();httpClientPolicy.setConnectionTimeout(Integer.valueOf("6000"));httpClientPolicy.setReceiveTimeout(Integer.valueOf("6000"));httpClientPolicy.setAllowChunking(false);http.setClient(httpClientPolicy);//下面这行代码是具体调用服务段的deleteTeskTask（）CallResult cResult = service.deleteTeskTask("1223");

        JaxWsProxyFactoryBean factory = new JaxWsProxyFactoryBean();List<Interceptor<? extends Message>> clientAuthValidateInterceptors = new ArrayList<>();// 添加soap header 信息clientAuthValidateInterceptors.add(new ClientAuthValidateInterceptor());// 注入拦截器，getOutInterceptors代表调用服务端时触发,getInInterceptors就是被调用才触发
        factory.setOutInterceptors(clientAuthValidateInterceptors);factory.setServiceClass(HelloWorldService.class);// 实例化wsfactory.setAddress("http://localhost:8090/iwm/sapDeliveryOrderToIwm");Object obj = factory.create();HelloWorldService service = (HelloWorldService) obj;//下面这行代码是具体调用服务段的deleteTeskTask（）CallResult cResult = service.deleteTeskTask("1223");