php - 如何使用 wse-php 库通过 SOAP 连接到受保护的 Web 服务

Question

我有一个脚本应该使用 WS-Security 连接到 web 服务。目前 - 在我的脚本中，我构建了一个肥皂 XML 并将其发送到 web 服务端点，但我收到一个 xml 响应，上面写着“客户端内部错误”。

这是我正在使用的代码：

<?php
function sendXMLRequest($url, $params)
{
    $ch = curl_init();
    curl_setopt($ch, CURLOPT_HTTPHEADER, Array("Content-Type: application/soap+xml"));
    curl_setopt($ch, CURLOPT_URL, $url);
    curl_setopt($ch, CURLOPT_POST, 1);
    curl_setopt($ch, CURLOPT_POSTFIELDS, $params);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt ($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
    ob_start();
    $response = curl_exec($ch);
    $info = curl_getinfo($ch);
    if ($response === false || $info['http_code'] != 200) {
      $output = "No cURL data returned for $url [". $info['http_code']. "]";
      if (curl_error($ch))
        $output .= "\n". curl_error($ch);
      $response .= $output;
     }
    ob_end_clean();
    curl_close($ch);    
    return $response;
}
/* $currentTime = time();
$timestamp = gmdate('Y-m-d\TH:i:s', $currentTime).'Z';
$nonce = mt_rand();
$non = base64_encode(pack('H*',$nonce)); */
$username = 'derek';
$password = 'Momentum1';
$wsdl = "http://localhost/test/wsdl-src/CRMLeadService.wsdl";
$momurl = "https://integrationdev.momentum.co.za/sales/CRMService/CRMLeadService_v1_0/";

echo("Post to URL: {$momurl}\n");

$xml = '<?xml version="1.0" encoding="utf-8"?>';
$xml .= '<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:v1="http://www.momentum.co.za/crm/service/application/CRMLeadService/v1.0" xmlns:v11="http://www.momentum.co.za/crm/service/type/application/Lead/v1.0" xmlns:v12="http://www.momentum.co.za/crm/service/type/TitleType/v1.0" xmlns:v13="http://www.momentum.co.za/crm/service/type/LanguageType/v1.0" xmlns:v14="http://www.momentum.co.za/crm/service/type/PreferredContactMethodType/v1.0" xmlns:v15="http://www.momentum.co.za/crm/service/type/CampaignType/v1.0" xmlns:v16="http://www.momentum.co.za/crm/service/type/ProductCategoryType/v1.0">';
$xml .= '<soapenv:Header>';
$xml .= '<wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">';
$xml .= '<wsse:UsernameToken wsu:Id="UsernameToken-45">';
$xml .= '<wsse:Username>'.$username.'</wsse:Username>';
$xml .= '<wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">'.$password.'</wsse:Password>';
$xml .= '</wsse:UsernameToken>';
$xml .= '</wsse:Security>';
$xml .= '</soapenv:Header>';
$xml .= '<soapenv:Body>';
$xml .= '<v1:CreateLeadRequest>';
$xml .= '<createLead>';
$xml .= '<v11:LeadSourceId>23627e70-a29e-e211-b8a8-005056b81ebe</v11:LeadSourceId>';
$xml .= '<v11:AffiliateLeadReference>852800020</v11:AffiliateLeadReference>';
$xml .= '<v11:Title>';
$xml .= '<v12:Code>852800018</v12:Code>';
$xml .= '</v11:Title>';
$xml .= '<v11:Initials>MD</v11:Initials>';
$xml .= '<v11:PreferredName>Marius</v11:PreferredName>';
$xml .= '<v11:FirstName>Marius</v11:FirstName>';
$xml .= '<v11:LastName>Drew</v11:LastName>';
$xml .= '<v11:PreferredCorrespondenceLanguage>';
$xml .= '<v13:Code>852800001</v13:Code>';
$xml .= '</v11:PreferredCorrespondenceLanguage>';
$xml .= '<v11:PreferredCommunicationMethod>';
$xml .= '<v14:Code>852800000</v14:Code>';
$xml .= '</v11:PreferredCommunicationMethod>';
$xml .= '<v11:Campaign>';
$xml .= '<v15:Code>95D9042A-440E-E311-A5EB-005056B81EA5</v15:Code>';
$xml .= '</v11:Campaign>';
$xml .= '<v11:HomePhoneNumber>0723621762</v11:HomePhoneNumber>';
$xml .= '<v11:BusinessPhoneNumber>0723621762</v11:BusinessPhoneNumber>';
$xml .= '<v11:MobilePhoneNumber>0723621762</v11:MobilePhoneNumber>';
$xml .= '<v11:EmailAddress>mdrew@gmail.com</v11:EmailAddress>';
$xml .= '<v11:Notes>IMU</v11:Notes><v11:ProductCategories>';
$xml .= '<v16:Code>d000083d-229c-e211-b8a8-005056b81ebe</v16:Code>';
$xml .= '</v11:ProductCategories>';
$xml .= '</createLead>';
$xml .= '</v1:CreateLeadRequest>';
$xml .= '</soapenv:Body>';
$xml .= '</soapenv:Envelope>';

echo $resp = sendXMLRequest($momurl, $xml);
?>

当我在互联网上搜索时，我发现了这个名为wse-php 的库，我想我绝对可以使用它。问题是，我不知道如何使用它。没有太多关于如何使用它的信息。也许这里有人已经使用过这个......请帮忙。谢谢。

PS：如果需要，这里是 WSDL 和 XSD 文件的链接：

http://sdrv.ms/16KC8o4

score 1 · Accepted Answer

你需要这个：

https://gist.github.com/Turin86/5569152

它修改了内置于 PHP 中的 SoapHeader 类以支持 WS-Security，包括 PasswordType（如果不是摘要）。这是我用来使它工作的代码：

//include the soap class before this call

$wsdl = "wsdl";
$momurl = "location";

//Perform Request
$username = '***';
$password = '***';
$client = new WSSoapClient($wsdl, array('location' => $momurl));
$client->__setUsernameToken($username,$password,'PasswordText');
$client->__setSoapHeaders($header);

try { 
    $result = $client-> //make soap call
} catch (Exception $e) { 
    $msgs = $e->getMessage();
    echo "Error: $msgs"; 
}

如果您需要任何进一步的信息，请告诉我。

score 0 · Accepted Answer

以下是您可以尝试的 PHP 文档，如果有效，请感谢作者（bhargav dot khatana at gmail dot com）...我把它放在这里是因为我不确定它是否会起作用，我不想将此粘贴到评论中，并且没有直接指向代码的链接......而且它已经 3 岁了。

Step1: Create two classes to create a structure for WSSE headers

<?php 
class clsWSSEAuth { 
          private $Username; 
          private $Password;  
        function __construct($username, $password) { 
                 $this->Username=$username; 
                 $this->Password=$password; 
              } 
} 

class clsWSSEToken { 
        private $UsernameToken; 
        function __construct ($innerVal){ 
            $this->UsernameToken = $innerVal; 
        } 
} 
?> 

Step2: Create Soap Variables for UserName and Password 

<?php 
$username = 1111; 
$password = 1111; 

//Check with your provider which security name-space they are using. 
$strWSSENS = "http://schemas.xmlsoap.org/ws/2002/07/secext"; 

$objSoapVarUser = new SoapVar($username, XSD_STRING, NULL, $strWSSENS, NULL, $strWSSENS); 
$objSoapVarPass = new SoapVar($password, XSD_STRING, NULL, $strWSSENS, NULL, $strWSSENS); 
?> 

Step3: Create Object for Auth Class and pass in soap var 

<?php 
$objWSSEAuth = new clsWSSEAuth($objSoapVarUser, $objSoapVarPass); 
?> 

Step4: Create SoapVar out of object of Auth class 

<?php 
$objSoapVarWSSEAuth = new SoapVar($objWSSEAuth, SOAP_ENC_OBJECT, NULL, $strWSSENS, 'UsernameToken', $strWSSENS); 
?> 

Step5: Create object for Token Class 

<?php 
$objWSSEToken = new clsWSSEToken($objSoapVarWSSEAuth); 
?> 

Step6: Create SoapVar out of object of Token class 

<?php 
$objSoapVarWSSEToken = new SoapVar($objWSSEToken, SOAP_ENC_OBJECT, NULL, $strWSSENS, 'UsernameToken', $strWSSENS); 
?> 

Step7: Create SoapVar for 'Security' node 

<?php 
$objSoapVarHeaderVal=new SoapVar($objSoapVarWSSEToken, SOAP_ENC_OBJECT, NULL, $strWSSENS, 'Security', $strWSSENS); 
?> 

Step8: Create header object out of security soapvar 

<?php 
$objSoapVarWSSEHeader = new SoapHeader($strWSSENS, 'Security', $objSoapVarHeaderVal,true, 'http://abce.com'); 

//Third parameter here makes 'mustUnderstand=1 
//Forth parameter generates 'actor="http://abce.com"' 
?> 

Step9: Create object of Soap Client 

<?php 
$objClient = new SoapClient($WSDL, $arrOptions); 
?> 

Step10: Set headers for soapclient object 

<?php 
$objClient->__setSoapHeaders(array($objSoapVarWSSEHeader)); 
?> 

Step 11: Final call to method 

<?php 
$objResponse = $objClient->__soapCall($strMethod, $requestPayloadString); 
?>

php - 如何使用 wse-php 库通过 SOAP 连接到受保护的 Web 服务

2 回答 2

Related

Reference