告别SOAP安全认证的噩梦：php-soap/psr18-wsse-middleware助你轻松搞定WSSE/WSA

<code class="bash">composer require php-soap/psr18-wsse-middleware</code>

<pre class="brush:php;toolbar:false;">use Http\Client\Common\PluginClient;
use Soap\Psr18Transport\Psr18Transport;
use Soap\Psr18WsseMiddleware\WsaMiddleware;
use Soap\Psr18WsseMiddleware\WsaMiddleware2005;
use GuzzleHttp\Client as GuzzleClient; // 假设你使用Guzzle作为PSR-18客户端

$psr18Client = new GuzzleClient(); // 你的PSR-18兼容HTTP客户端

$transport = Psr18Transport::createForClient(
    new PluginClient($psr18Client, [
        new WsaMiddleware(), // 或 new WsaMiddleware2005()，取决于WSA版本
    ])
);

// 接下来，你可以使用这个 $transport 对象来发送SOAP请求
// ...

<pre class="brush:php;toolbar:false;">use Soap\Psr18WsseMiddleware\WsseMiddleware;
use Soap\Psr18WsseMiddleware\WSSecurity\Entry;
use Http\Client\Common\PluginClient;
use Soap\Psr18Transport\Psr18Transport;
use GuzzleHttp\Client as GuzzleClient;

$user = 'myUsername';
$password = 'myPassword';

$wsseMiddleware = new WsseMiddleware(
    outgoing: [
        (new Entry\Username($user))
            ->withPassword($password)
            ->withDigest(false), // 如果密码不需要摘要，设置为false
        new Entry\Timestamp(60), // 添加一个有效期60秒的时间戳
    ]
);

$transport = Psr18Transport::createForClient(
    new PluginClient(new GuzzleClient(), [
        $wsseMiddleware,
    ])
);

// 使用 $transport 发送SOAP请求，WSSE头会自动添加

<pre class="brush:php;toolbar:false;">use Soap\Psr18WsseMiddleware\WsseMiddleware;
use Soap\Psr18WsseMiddleware\WSSecurity\Entry;
use Soap\Psr18WsseMiddleware\WSSecurity\KeyStore\Certificate;
use Soap\Psr18WsseMiddleware\WSSecurity\KeyStore\Key;
use Soap\Psr18WsseMiddleware\WSSecurity\KeyIdentifier;
use Soap\Psr18WsseMiddleware\WSSecurity\SignatureMethod;
use Soap\Psr18WsseMiddleware\WSSecurity\DigestMethod;
use Http\Client\Common\PluginClient;
use Soap\Psr18Transport\Psr18Transport;
use GuzzleHttp\Client as GuzzleClient;

// 假设你的私钥和公钥证书文件
$privateKeyFile = 'path/to/security_token.priv'; // 从PKCS12转换出的私钥
$publicKeyFile = 'path/to/security_token.pub';   // 从PKCS12转换出的公钥证书
$passphrase = 'your_key_passphrase';

$privKey = Key::fromFile($privateKeyFile)->withPassphrase($passphrase);
$pubKey = Certificate::fromFile($publicKeyFile);

$wsseMiddleware = new WsseMiddleware(
    outgoing: [
        new Entry\Timestamp(60),
        new Entry\BinarySecurityToken($pubKey), // 将公钥证书作为二进制安全令牌
        (new Entry\Signature(
            $privKey,
            new KeyIdentifier\BinarySecurityTokenIdentifier() // 指定签名时使用二进制安全令牌作为标识
        ))
            ->withSignatureMethod(SignatureMethod::RSA_SHA256) // 签名算法
            ->withDigestMethod(DigestMethod::SHA256)       // 摘要算法
            ->withSignAllHeaders(true)                      // 签名所有SOAP头
            ->withSignBody(true)                            // 签名SOAP Body
    ]
);

$transport = Psr18Transport::createForClient(
    new PluginClient(new GuzzleClient(), [
        $wsseMiddleware,
    ])
);

// 现在，你的SOAP请求会自动包含签名和证书信息

<pre class="brush:php;toolbar:false;">// ... (密钥和证书加载与签名类似)

$wsseMiddleware = new WsseMiddleware(
    outgoing: [
        // ... 其他如Timestamp, BinarySecurityToken, Signature 条目
        (new Entry\Encryption(
            $signKey, // 用于加密的公钥证书
            new KeyIdentifier\X509SubjectKeyIdentifier($signKey)
        ))
            ->withKeyEncryptionMethod(KeyEncryptionMethod::RSA_OAEP_MGF1P)
            ->withDataEncryptionMethod(DataEncryptionMethod::AES256_CBC)
    ],
    incoming: [
        new Entry\Decryption($privKey) // 用于解密响应的私钥
    ]
);
// ...