Javax-Jws SOAP 客户端同时使用基本授权 Header 和 wsse:Security SOAPHeader

Question

我想使用 wsdl 从 Java(11) 代码中使用 SOAP 服务。 The web service requires primary pre-authentication of basic authorization header and then wsse:Security soap header. 如何使用这两种类型的标题？

当我只使用基本身份验证时，我不再得到 401 Unauthorized。 但是当我使用 SOAPHandler 使用 wsse:Security header 时，我得到了这个异常：

com.sun.xml.messaging.saaj.soap.impl: SAAJ0120: Can't add a header when one is already present Exception in handler: com.sun.xml.messaging.saaj.SOAPExceptionImpl: Can't add a header when一个已经存在。

我正在为 wsse:Security Header 使用 handlerresolver，如下所示：

ws.setHandlerResolver(port -> {
    List<Handler> list = new ArrayList<>();
    list.add(new MySOAPHandler());
    return list;
});

然后在使用 SOAP 服务之前添加基本授权 header 如下：

Map<String, Object> reqContext = ((BindingProvider)
        iws).getRequestContext();
reqContext.put(BindingProvider.USERNAME_PROPERTY, "myuser");
reqContext.put(BindingProvider.PASSWORD_PROPERTY, "mypassword");

我在SOAP Handler class里面的handleMessage方法如下：

@Override
public boolean handleMessage(SOAPMessageContext context) {
    String prefixUri = "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-";
    String uri = prefixUri + "wssecurity-secext-1.0.xsd";
    String uta = prefixUri + "wssecurity-utility-1.0.xsd";
    String ta = prefixUri + "username-token-profile-1.0#PasswordText";
    Boolean outboundProperty =
            (Boolean) context.get(MessageContext.MESSAGE_OUTBOUND_PROPERTY);
    if (outboundProperty.booleanValue()) {
        try {
            SOAPEnvelope envelope = context.getMessage()
                    .getSOAPPart().getEnvelope();
            SOAPFactory factory = SOAPFactory.newInstance();
            String prefix = "wsse";
            SOAPElement securityElem =
                    factory.createElement("Security",prefix,uri);
            SOAPElement tokenElem =
                    factory.createElement("UsernameToken",prefix,uri);
            SOAPElement userElem =
                    factory.createElement("Username",prefix,uri);
            userElem.addTextNode("myuser");
            SOAPElement pwdElem =
                    factory.createElement("Password",prefix,uri);
            pwdElem.addTextNode("mypassword");
            pwdElem.addAttribute(QName.valueOf("Type"), ta);
            tokenElem.addChildElement(userElem);
            tokenElem.addChildElement(pwdElem);
            securityElem.addChildElement(tokenElem);
            SOAPHeader header = envelope.addHeader();
            header.addChildElement(securityElem);

        } catch (Exception e) {
            System.out.println("Exception in handler: " + e);
        }
    }

    return true;
}

任何人都可以帮助我在使用 SOAP 服务的同时使用这两种类型的标头吗？