使用特定xpointer引用Java对XML进行签名
我需要用Java中的以下引用URI对XML文档进行签名: xpointer(//*[@authenticate='true'])) 所以我试着用这个参考来签署它:使用特定xpointer引用Java对XML进行签名,java,xml,signature,xpointer,Java,Xml,Signature,Xpointer,我需要用Java中的以下引用URI对XML文档进行签名: xpointer(//*[@authenticate='true'])) 所以我试着用这个参考来签署它: Reference ref = fac.newReference ("#xpointer(//*[@authenticate='true'])", fac.newDigestMethod(DigestMethod.SHA256, null), Collections.singletonList
Reference ref = fac.newReference
("#xpointer(//*[@authenticate='true'])", fac.newDigestMethod(DigestMethod.SHA256, null),
Collections.singletonList
(fac.newTransform
("http://www.w3.org/2001/10/xml-exc-c14n#", (TransformParameterSpec) null)),
null, null);
我得到了这个错误:
找不到URI#xpointer(/*[@authenticate='true'])和Base null的解析程序
我在网上搜索如何修复它,我发现了这个类:
public class XPointerResourceResolver extends ResourceResolverSpi
{
private static Log log = LogFactory.getLog(XPointerResourceResolver.class);
private static final String XP_OPEN = "xpointer(";
private static final String XNS_OPEN = "xmlns(";
private XPathFactory xPathFactory;
private Node baseNode;
public XPointerResourceResolver(Node baseNode)
{
this.xPathFactory = XPathFactory.newInstance();
this.baseNode = baseNode;
}
/* (non-Javadoc)
* @see org.apache.xml.security.utils.resolver.ResourceResolverSpi#engineCanResolve(org.w3c.dom.Attr, java.lang.String)
*/
@Override
public boolean engineCanResolve(Attr uri, String BaseURI)
{
String v = uri.getNodeValue();
if (v.charAt(0) != '#')
return false;
String xpURI;
try
{
xpURI = URLDecoder.decode(v, "utf-8");
} catch (UnsupportedEncodingException e)
{
log.warn("utf-8 not a valid encoding",e);
return false;
}
String parts[] = xpURI.substring(1).split("\\s");
// plain ID reference.
if (parts.length == 1 && !parts[0].startsWith(XNS_OPEN))
return true;
int i=0;
for (;i<parts.length-1;++i)
if (!parts[i].endsWith(")") || !parts[i].startsWith(XNS_OPEN))
return false;
if (!parts[i].endsWith(")") || !parts[i].startsWith(XP_OPEN))
return false;
log.debug("xpURI="+xpURI);
log.debug("BaseURI="+BaseURI);
return true;
}
/* (non-Javadoc)
* @see org.apache.xml.security.utils.resolver.ResourceResolverSpi#engineResolve(org.w3c.dom.Attr, java.lang.String)
*/
@Override
public XMLSignatureInput engineResolve(Attr uri, String BaseURI) throws ResourceResolverException
{
String v = uri.getNodeValue();
if (v.charAt(0) != '#')
return null;
String xpURI;
try
{
xpURI = URLDecoder.decode(v, "utf-8");
} catch (UnsupportedEncodingException e)
{
log.warn("utf-8 not a valid encoding",e);
return null;
}
String parts[] = xpURI.substring(1).split("\\s");
int i=0;
DSigNamespaceContext nsContext=null;
if (parts.length > 1)
{
nsContext= new DSigNamespaceContext();
for (;i<parts.length-1;++i)
{
if (!parts[i].endsWith(")") || !parts[i].startsWith(XNS_OPEN))
return null;
String mapping = parts[i].substring(XNS_OPEN.length(),parts[i].length()-1);
int pos = mapping.indexOf('=');
if (pos <= 0 || pos >= mapping.length()-1)
throw new ResourceResolverException("malformed namespace part of XPointer expression",uri,BaseURI);
nsContext.addNamespace(mapping.substring(0,pos),
mapping.substring(pos+1));
}
}
try
{
Node node = null;
NodeList nodes=null;
// plain ID reference.
if (i==0 && !parts[i].startsWith(XP_OPEN))
{
node = this.baseNode.getOwnerDocument().getElementById(parts[i]);
}
else
{
if (!parts[i].endsWith(")") || !parts[i].startsWith(XP_OPEN))
return null;
XPath xp = this.xPathFactory.newXPath();
if (nsContext != null)
xp.setNamespaceContext(nsContext);
nodes =
(NodeList)xp.evaluate(parts[i].substring(XP_OPEN.length(),parts[i].length()-1),
this.baseNode,
XPathConstants.NODESET);
if (nodes.getLength() == 0) return null;
if (nodes.getLength() == 1)
node = nodes.item(0);
}
XMLSignatureInput result = null;
if (node != null)
{
result = new XMLSignatureInput(node);
}
else if (nodes !=null)
{
Set<Node> nodeSet = new HashSet<Node>(nodes.getLength());
for (int j=0 ; j<nodes.getLength(); ++j)
{
nodeSet.add(nodes.item(j));
}
result = new XMLSignatureInput(nodeSet);
}
else
return null;
result.setMIMEType("text/xml");
result.setExcludeComments(true);
result.setSourceURI((BaseURI != null) ? BaseURI.concat(v):v);
return result;
} catch (XPathExpressionException e)
{
throw new ResourceResolverException("malformed XPath inside XPointer expression",e,uri,BaseURI);
}
}
}
公共类XPointerResourceResolver扩展了resourcesolverspi
{
私有静态日志Log=LogFactory.getLog(XPointerResourceResolver.class);
私有静态最终字符串XP_OPEN=“xpointer(”;
私有静态最终字符串XNS_OPEN=“xmlns(”;
私人XPathFactory XPathFactory;
专用节点baseNode;
公共XPointerResourceSolver(节点baseNode)
{
this.xPathFactory=xPathFactory.newInstance();
this.baseNode=baseNode;
}
/*(非Javadoc)
*@see org.apache.xml.security.utils.resolver.resourcesolverspi#engineCanResolve(org.w3c.dom.Attr,java.lang.String)
*/
@凌驾
公共布尔engineCanResolve(属性uri、字符串BaseURI)
{
字符串v=uri.getNodeValue();
如果(v.charAt(0)!='#')
返回false;
字符串xpURI;
尝试
{
xpURI=urldecker.decode(v,“utf-8”);
}捕获(不支持的编码异常e)
{
log.warn(“utf-8不是有效编码”,e);
返回false;
}
字符串部分[]=xpURI.substring(1.split)(\\s”);
//普通ID引用。
如果(parts.length==1&&!parts[0].startsWith(XNS_OPEN))
返回true;
int i=0;
对于(;i 1)
{
nsContext=新的dsignamespacecoxt();
为了