下面來看一個JAVA的範例程式碼:
import java.io.IOException; import java.io.PrintWriter; import javax.servlet.http.HttpServlet; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; import sun.misc.BASE64Decoder; public class HTTPAuthServlet extends HttpServlet { public void doGet(HttpServletRequest request, HttpServletResponse response) throws IOException { String sessionAuth = (String) request.getSession().getAttribute("auth"); if (sessionAuth != null) { System.out.println("this is next step"); nextStep(request, response); } else { if(!checkHeaderAuth(request, response)){ response.setStatus(401); response.setHeader("Cache-Control", "no-store"); response.setDateHeader("Expires", 0); response.setHeader("WWW-authenticate", "Basic Realm=\"test\""); } } } private boolean checkHeaderAuth(HttpServletRequest request, HttpServletResponse response) throws IOException { String auth = request.getHeader("Authorization"); System.out.println("auth encoded in base64 is " + getFromBASE64(auth)); if ((auth != null) && (auth.length() > 6)) { auth = auth.substring(6, auth.length()); String decodedAuth = getFromBASE64(auth); System.out.println("auth decoded from base64 is " + decodedAuth); String user=""; String password=""; if(decodedAuth!=null){ user=decodedAuth.substring(0,decodedAuth.indexOf(":")); password=decodedAuth.substring(decodedAuth.indexOf(":")+1); } if(user.equals("unixboy")&&password.equals("123456")){ //認證成功 request.getSession().setAttribute("auth", decodedAuth); return true; }else{ //認證失敗 return false; } }else{ return false; } } private String getFromBASE64(String s) { if (s == null) return null; BASE64Decoder decoder = new BASE64Decoder(); try { byte[] b = decoder.decodeBuffer(s); return new String(b); } catch (Exception e) { return null; } } public void nextStep(HttpServletRequest request, HttpServletResponse response) throws IOException { PrintWriter pw = response.getWriter(); pw.println("<html> next step, authentication is : " + request.getSession().getAttribute("auth") + "<br>"); pw.println("<br></html>"); } public void doPost(HttpServletRequest request, HttpServletResponse response) throws IOException { doGet(request, response); } } 當request第一次到達伺服器時，伺服器沒有認證的資訊，伺服器會返回一個401 Unauthozied給用戶端。
認證之後將認證資訊放在session，以後在session有效期間內就不用再認證了。
Start building with 50+ products and up to 12 months usage for Elastic Compute Service
1 on 1 presale consultation
24/7 Technical Support 6 Free Tickets per Quarter Faster Response
Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.
A comprehensive suite of global cloud computing services to power your business
Payment Methods We Support
