我正在尝试使用HTTPClient发出简单的身份验证请求，但收到错误

Question

http://developer.dnb.com/docs/2.0/common/authentication-process

The authentication process of the service I am trying to access is explained in the url above. It is a simple REST authentication process wherein the user-id and password are passed in as follows:

POST https://maxcvservices.dnb.com/rest/Authentication
x-dnb-user: MyUsername
x-dnb-pwd: MyPassword

I have tried the following code but am receiving HTTP/1.1 400 ERROR . I am unable to figure out what I am doing wrong as I am very new to Java and HttpClient in particular. Any help would be much appreciated.

I have thus far tried the following code:

public static void main(String[] args) throws Exception {
        CloseableHttpClient httpclient = HttpClients.createDefault();
        try {
            HttpPost httpPost = new HttpPost("https://maxcvservices.dnb.com/rest/Authentication");
            List <NameValuePair> nvps = new ArrayList <NameValuePair>();
            nvps.add(new BasicNameValuePair("x-dnb-user", "myusername"));
            nvps.add(new BasicNameValuePair("x-dnb-pwd", "mypassword"));
            httpPost.setEntity(new UrlEncodedFormEntity(nvps));
            CloseableHttpResponse response2 = httpclient.execute(httpPost);

            try {
                System.out.println(response2.getStatusLine());
                HttpEntity entity2 = response2.getEntity();
                // do something useful with the response body
                // and ensure it is fully consumed
                EntityUtils.consume(entity2);
            } finally {
                response2.close();
            }
        } finally {
            httpclient.close();
        }
    }

Answer 1

you need to set the username and password to http header

            httPost.addHeader("x-dnb-user", "myusername");
            httPost.addHeader("x-dnb-pwd", "mypassword");

as it expects those in the http header

Answer 2

You can use Jersey - RESTful Web Services in Java.

Download Jersey .

Client client = Client.create();
    String auth = new String(Base64.encode("UserName:Password"));
   String url = "https://maxcvservices.dnb.com/rest/Authentication";
    WebResource webResource = client
           .resource(url);
    ClientResponse response = webResource.header("Authorization", "Basic " + auth).type(MediaType.APPLICATION_JSON_TYPE).accept("application/json").get(ClientResponse.class);

   if (response.getStatus() != 200) {
        throw new RuntimeException("Failed : HTTP error code : "
                + response.getStatus());
    }

    String output = response.getEntity(String.class);
    System.out.println(output);

Change Username and Password.

Answer 3

 public static void main(String[] args) throws Exception {
        CloseableHttpClient httpclient = HttpClients.createDefault();
        try {
//          
            HttpPost httpPost = new HttpPost("https://maxcvservices.dnb.com/rest/Authentication");
            httpPost.setHeader("x-dnb-user","myusername");
            httpPost.setHeader("x-dnb-pwd","mypassword");
            //List <NameValuePair> nvps = new ArrayList <NameValuePair>();
            //nvps.add(new BasicNameValuePair("x-dnb-user", "myusername"));
            //nvps.add(new BasicNameValuePair("x-dnb-pwd", "mypassword"));
            //httpPost.setEntity(new UrlEncodedFormEntity(nvps));
            CloseableHttpResponse response2 = httpclient.execute(httpPost);

            try {
                System.out.println(response2.getStatusLine());
                HttpEntity entity2 = response2.getEntity();
                // do something useful with the response body
                // and ensure it is fully consumed
                EntityUtils.consume(entity2);
            } finally {
                response2.close();
            }
        } finally {
            httpclient.close();
        }
    }

Apparently the username and password was supposed to be passed in using a Header (although I don't know what the advantage or security implications of this design choice are) in the HttpPost request which is what the following two lines in the above code achieve:

 httpPost.setHeader("x-dnb-user","myusername");
 httpPost.setHeader("x-dnb-pwd","mypassword");

Answer 4

The d&b documentation says that the username and password should be sent in request header s, but your code is sending them in the body.

Instead of adding them as name/ value pairs in an entity, set them as request headers, eg

httpPost.setHeader("x-dnb-user", "my username");