Spring Integration 如何校验输入的WSDL消息是否合法？

核心逻辑 #

你可以直接在Spring Integration的消息流中插入自定义校验节点，基于Java原生的XML校验能力从WSDL提取Schema规则，对已有的SOAP字符串做合法性校验，校验通过后再发送到外部端点。

实现步骤 #

1. 引入必要依赖 #

以Maven为例，添加Spring Integration WS和XML校验相关依赖：

<dependency>
    <groupId>org.springframework.integration</groupId>
    <artifactId>spring-integration-ws</artifactId>
    <version>对应你的Spring Boot/Integration版本</version>
</dependency>
<dependency>
    <groupId>org.apache.ws.xmlschema</groupId>
    <artifactId>xmlschema-core</artifactId>
    <version>2.3.1</version>
</dependency>

2. 初始化全局SOAP校验器 #

从WSDL中提取Schema规则，初始化线程安全的校验实例，全局只需要初始化一次即可：

import javax.xml.XMLConstants;
import javax.xml.transform.stream.StreamSource;
import javax.xml.validation.Schema;
import javax.xml.validation.SchemaFactory;
import javax.xml.validation.Validator;
import java.io.StringReader;
import java.net.URL;

public class CustomSoapValidator {
    private final Schema validationSchema;

    // 构造方法传入WSDL的本地路径或者远程地址
    public CustomSoapValidator(String wsdlLocation) throws Exception {
        SchemaFactory schemaFactory = SchemaFactory.newInstance(XMLConstants.W3C_XML_SCHEMA_NS_URI);
        // 直接从WSDL加载Schema规则，也可以提前把WSDL内嵌的Schema导出为单独xsd文件加载
        this.validationSchema = schemaFactory.newSchema(new URL(wsdlLocation));
    }

    // 校验SOAP字符串方法，校验失败直接抛出异常
    public void validateSoapMessage(String soapContent) throws Exception {
        Validator validator = validationSchema.newValidator();
        validator.validate(new StreamSource(new StringReader(soapContent)));
    }
}

3. 集成到Spring Integration消息流 #

把校验节点插入到SOAP出站调用的前面即可：

import org.springframework.context.annotation.Bean;
import org.springframework.integration.dsl.IntegrationFlow;
import org.springframework.integration.dsl.IntegrationFlows;
import org.springframework.integration.ws.dsl.Ws;

@Configuration
public class SoapCallConfig {
    // 注册全局校验器
    @Bean
    public CustomSoapValidator soapValidator() throws Exception {
        // 替换为你实际的WSDL地址，可以是本地classpath路径或者远程http地址
        return new CustomSoapValidator("classpath:wsdl/your-service.wsdl");
    }

    @Bean
    public IntegrationFlow soapRequestFlow(CustomSoapValidator soapValidator) {
        return IntegrationFlows.from("soap-request-input-channel")
                // 第一步执行SOAP校验
                .handle(message -> {
                    String soapPayload = (String) message.getPayload();
                    try {
                        soapValidator.validateSoapMessage(soapPayload);
                    } catch (Exception e) {
                        // 校验失败可以自定义处理逻辑，比如抛异常、转入错误通道、记录日志
                        throw new IllegalArgumentException("SOAP消息校验不通过：" + e.getMessage(), e);
                    }
                })
                // 校验通过后调用外部SOAP端点
                .handle(Ws.simpleOutboundGateway()
                        .uri("https://your-external-soap-endpoint.com/service")
                        .extractPayload(true)
                )
                // 后续处理响应逻辑
                .channel("soap-response-output-channel")
                .get();
    }
}

注意事项 #

• 如果你的WSDL包含多个内嵌Schema或者导入了外部XSD文件，需要把所有依赖的Schema文件都添加到Schema加载列表中，避免出现类型找不到的校验错误
• XML校验属于CPU密集型操作，对性能要求极高的场景可以考虑仅在测试、预发环境开启校验，生产环境关闭
• 可以在校验失败时把原始SOAP报文落盘，方便后续排查格式问题

内容的提问来源于stack exchange，提问作者user1552545