ActiveMQ(3) ActiveMQ创建(simpleAuthenticationPlugin)安全认证

控制端安全认证:

ActiveMQ目录conf下jetty.xml:

 <bean id="securityLoginService" class="org.eclipse.jetty.security.HashLoginService">
     <property name="name" value="ActiveMQRealm" />
     <property name="config" value="${activemq.conf}/jetty-realm.properties" />
 </bean>

 <bean id="securityConstraint" class="org.eclipse.jetty.util.security.Constraint">
     <property name="name" value="BASIC" />
     <property name="roles" value="user,admin" />
     <!-- set authenticate=false to disable login -->
     <property name="authenticate" value="true" />
 </bean>

jetty.xml

<property name="authenticate" value="true" />  true: 需要认证   false: 不需要认证

ActiveMQ目录conf下jetty-realm.properties:

 # Defines users that can access the web (console, demo, etc.)
 # username: password [,rolename ...]
 admin: admin, admin
 user: user, user

jetty-realm.properties

认证用户名: 认证密码 [,角色名称 ...]

注意: 配置需重启ActiveMQ才会生效。

客户端安全认证:

simpleAuthenticationPlugin 认证: 直接把相关的认证插件配置到xml文件中

ActiveMQ目录conf下activemq.xml的broker元素中添加插件：

 <plugins>
     <simpleAuthenticationPlugin>
         <users>
             <authenticationUser username="admin" password="admin" groups="admins,publishers,consumers"/>
             <authenticationUser username="publisher" password="publisher"  groups="publishers,consumers"/>
             <authenticationUser username="consumer" password="consumer" groups="consumers"/>
             <authenticationUser username="guest" password="guest"  groups="guests"/>
         </users>
     </simpleAuthenticationPlugin>
 </plugins>

activemq.xml

在代码中认证:

 ConnectionFactory connectionFactory = new ActiveMQConnectionFactory(Constants.AUTHENTICATION_USERNAME_ADMIN,
                 Constants.AUTHENTICATION_PASSWORD_ADMIN, "tcp://localhost:61616");

重启ActiveMQ, 使配置生效。

用户名和密码认证失败会抛出异常：

 Exception in thread "main" javax.jms.JMSSecurityException: User name [ddd] or password is invalid.
     at org.apache.activemq.util.JMSExceptionSupport.create(JMSExceptionSupport.java:52)
     at org.apache.activemq.ActiveMQConnection.syncSendPacket(ActiveMQConnection.java:1399)
     at org.apache.activemq.ActiveMQConnection.ensureConnectionInfoSent(ActiveMQConnection.java:1478)
     at org.apache.activemq.ActiveMQConnection.start(ActiveMQConnection.java:527)
     at com.itdoc.learn.activemq.helloworld.Sender.main(Sender.java:35)
 Caused by: java.lang.SecurityException: User name [ddd] or password is invalid.
     at org.apache.activemq.security.SimpleAuthenticationBroker.authenticate(SimpleAuthenticationBroker.java:103)
     at org.apache.activemq.security.SimpleAuthenticationBroker.addConnection(SimpleAuthenticationBroker.java:71)
     at org.apache.activemq.broker.BrokerFilter.addConnection(BrokerFilter.java:99)
     at org.apache.activemq.broker.TransportConnection.processAddConnection(TransportConnection.java:843)
     at org.apache.activemq.broker.jmx.ManagedTransportConnection.processAddConnection(ManagedTransportConnection.java:77)
     at org.apache.activemq.command.ConnectionInfo.visit(ConnectionInfo.java:139)
     at org.apache.activemq.broker.TransportConnection.service(TransportConnection.java:330)
     at org.apache.activemq.broker.TransportConnection$1.onCommand(TransportConnection.java:194)
     at org.apache.activemq.transport.MutexTransport.onCommand(MutexTransport.java:50)
     at org.apache.activemq.transport.WireFormatNegotiator.onCommand(WireFormatNegotiator.java:125)
     at org.apache.activemq.transport.AbstractInactivityMonitor.onCommand(AbstractInactivityMonitor.java:301)
     at org.apache.activemq.transport.TransportSupport.doConsume(TransportSupport.java:83)
     at org.apache.activemq.transport.tcp.TcpTransport.doRun(TcpTransport.java:233)
     at org.apache.activemq.transport.tcp.TcpTransport.run(TcpTransport.java:215)
     at java.lang.Thread.run(Unknown Source)

Exception

认证成功代码:

消息生产者:

 /**
  * @filename Sender.Java
  * @desc 消息生产者
  * @blog http://www.cnblogs.com/goodcheap
  * @author Chinda Wang
  * @create 2017-12-02 16:06
  * @version v1.0
  * @copyright Copyright © 2017 达华信息科技有限公司 版权所有
  * @modifyhistory 2017-12-02 16:06
  * @modifyauthor Chinda Wang
  * @modifydesc
  */
 package com.itdoc.learn.activemq.helloworld;

 import com.itdoc.learn.activemq.common.Constants;
 import org.apache.activemq.ActiveMQConnectionFactory;

 import javax.jms.*;

 /**
  * @author Chinda Wang
  * @desc 消息生产者
  * @create 2017-12-02 16:06
  */
 public class Sender {

     public static void main(String[] args) throws Exception {

         // 第一步: 建立 ConnectionFactory 工厂对象, 需要填入用户名、密码、以及要连接的地址, 均使用默认即可, 默认端口为"tcp//loclhost:61616"
         ConnectionFactory connectionFactory = new ActiveMQConnectionFactory(Constants.AUTHENTICATION_USERNAME_ADMIN,
                 Constants.AUTHENTICATION_PASSWORD_ADMIN, "tcp://localhost:61616");
         // 第二步: 通过ConnectionFactory工厂对象创建一个Connection连接, 并且调用Connection的start方法开启连接, Connection默认是关闭的。
         Connection connection = connectionFactory.createConnection();
         connection.start();
         /*
          * 第三步: 通过Connection对象创建Session会话(上下文环境对象), 用于接收消息, 参数位置1为是否启用事务, 参数位置2为签收模式,
          * 一般设置为自动签收。
          */
         Session session = connection.createSession(Boolean.FALSE, Session.AUTO_ACKNOWLEDGE);
         /*
          * 第四步: 通过Session创建Destination对象, 指的是一个客户端用来指定生产消息目标和消费消息来源的对象, 在PTP模式中, Destination
          * 被称作为Queue, 即队列; 在Pub/Sub模式, Destination被称作Topic, 即主题。在程序中可以使用多个Queue和Topic。
          */
         Destination destination = session.createQueue("queue1");
         // 第五步: 需要通过Session对象创建消息的发送和接收对象(生产者和消费者)MessageProducer/MessageConsumer
         MessageProducer producer = session.createProducer(destination);
         // 第六步: 可以使用MessageProducer的setDeliveryMode()方法为其设置持久化特性和非持久化特性(DeliveryMode)。
         producer.setDeliveryMode(DeliveryMode.NON_PERSISTENT);
         /*
          * 第七步: 使用JMS规范的TextMessage形式创建数据(通过Session对象), 并用MessageProducer的send()方法发送数据。同理, 客户端使用
          * receive()方法进行接收数据。
          */
         TextMessage textMessage = session.createTextMessage();
         for (int i = 1; i <= 10; i++) {
             textMessage.setText("I am Message! id: " + i);
             producer.send(textMessage);
             System.out.println("生产者: " + textMessage.getText());
         }
         // 第八步: 关闭Connection连接
         if (connection != null) {
             connection.close();
         }
     }
 }

Sender.Java

消息消费者:

 /**
  * @filename Receiver.Java
  * @desc 消息消费者
  * @blog http://www.cnblogs.com/goodcheap
  * @author Chinda Wang
  * @create 2017-12-02 16:07
  * @version v1.0
  * @copyright Copyright © 2017 达华信息科技有限公司 版权所有
  * @modifyhistory 2017-12-02 16:07
  * @modifyauthor Chinda Wang
  * @modifydesc
  */
 package com.itdoc.learn.activemq.helloworld;

 import com.itdoc.learn.activemq.common.Constants;
 import org.apache.activemq.ActiveMQConnectionFactory;

 import javax.jms.*;

 /**
  * @desc 消息消费者
  * @author Chinda Wang
  * @create 2017-12-02 16:07
  */
 public class Receiver {

     public static void main(String[] args) throws Exception {
         // 第一步: 建立 ConnectionFactory 工厂对象, 需要填入用户名、密码、以及要连接的地址, 均使用默认即可, 默认端口为"tcp//loclhost:61616"
         ConnectionFactory connectionFactory = new ActiveMQConnectionFactory(
                 Constants.AUTHENTICATION_USERNAME_GUEST,
                 Constants.AUTHENTICATION_PASSWORD_GUEST,
                 "tcp://localhost:61616");
         // 第二步: 通过ConnectionFactory工厂对象创建一个Connection连接, 并且调用Connection的start方法开启连接, Connection默认是关闭的。
         Connection connection = connectionFactory.createConnection();
         connection.start();
         /*
          * 第三步: 通过Connection对象创建Session会话(上下文环境对象), 用于接收消息, 参数位置1为是否启用事务, 参数位置2为签收模式,
          * 一般设置为自动签收。
          */
         Session session = connection.createSession(Boolean.FALSE, Session.AUTO_ACKNOWLEDGE);
         /*
          * 第四步: 通过Session创建Destination对象, 指的是一个客户端用来指定生产消息目标和消费消息来源的对象, 在PTP模式中, Destination
          * 被称作为Queue, 即队列; 在Pub/Sub模式, Destination被称作Topic, 即主题。在程序中可以使用多个Queue和Topic。
          */
         Destination destination = session.createQueue("queue1");
         // 第五步: 需要通过Session对象创建消息的发送和接收对象(生产者和消费者)MessageProducer/MessageConsumer
         MessageConsumer consumer = session.createConsumer(destination);
         /*
          * 第六步: 使用JMS规范的TextMessage形式创建数据(通过Session对象), 并用MessageProducer的send()方法发送数据。同理, 客户端使用
          * receive()方法进行接收数据。
          */
         while (true) {
             TextMessage msg = (TextMessage) consumer.receive();
             if (msg == null) {
                 break;
             }
             System.out.println("收到内容: " + msg.getText());
         }
         // 第七步: 关闭Connection连接
         if (connection != null) {
             connection.close();
         }
     }
 }

Receiver.Java

认证常量类:

 /**
  * @filename Constants.Java
  * @desc 常量类
  * @blog http://www.cnblogs.com/goodcheap
  * @author Chinda Wang
  * @create 2017-12-09 10:14
  * @version v1.0
  * @copyright Copyright © 2017 达华信息科技有限公司 版权所有
  * @modifyhistory 2017-12-09 10:14
  * @modifyauthor Chinda Wang
  * @modifydesc
  */
 package com.itdoc.learn.activemq.common;

 /**
  * @desc 常量类
  * @author Chinda Wang
  * @create 2017-12-09 10:14
  */
 public class Constants {

     /** 认证用户名密码 */
     public static final String AUTHENTICATION_USERNAME_ADMIN = "admin";
     public static final String AUTHENTICATION_PASSWORD_ADMIN = "admin";

     public static final String AUTHENTICATION_USERNAME_PUBLISHER = "publisher";
     public static final String AUTHENTICATION_PASSWORD_PUBLISHER = "publisher";

     public static final String AUTHENTICATION_USERNAME_CONSUMER = "consumer";
     public static final String AUTHENTICATION_PASSWORD_CONSUMER = "consumer";

     public static final String AUTHENTICATION_USERNAME_GUEST = "guest";
     public static final String AUTHENTICATION_PASSWORD_GUEST = "guest";

 }

Constants.Java