如何将带认证POST请求的可用Curl命令转为Java代码并修复响应读取问题

首先，你的Java代码里构建curl命令的参数存在多处错误，这直接导致curl命令执行异常，进而无法读取到响应。咱们先拆解原curl命令的正确结构，再一步步修正代码：

原curl命令的正确参数结构 #

先把原curl命令的核心参数拆解清楚（去掉shell引号，因为ProcessBuilder不需要额外引号包裹参数）：

curl https://integration.sirionlabs.office:9443/nifi-api/access/token \
-H "Content-Type: application/x-www-form-urlencoded; charset=UTF-8" \
-X POST \
--data "username=your_username&password=your_password" \
--compressed \
--insecure

Java代码的核心错误点 #

1. 请求方法参数误用：你把表单数据拼在了-X后面，但-X是用来指定请求方法的（这里应该是POST），根本不是传递表单数据的地方
2. 表单数据参数缺失：没有用--data参数来传递用户名密码的表单数据，这是POST请求提交表单的关键参数
3. --insecure格式错误：你写的insecure缺少了前缀--，正确写法是--insecure（或者缩写-k）
4. 未处理错误流：如果curl执行出错，错误信息会输出到错误流，若不读取错误流，进程会阻塞，导致无法进入输入流的读取循环

修正后的curl调用Java代码 #

import java.io.BufferedReader;
import java.io.InputStreamReader;

public class CurlTokenFetcher {
    public static void main(String[] args) {
        String url = "https://integration.sirionlabs.office:9443/nifi-api/access/token";
        String username = "your_username";
        String password = "your_password";
        
        // 按照正确的curl参数结构构建数组
        String[] command = {
            "curl", url,
            "-H", "Content-Type: application/x-www-form-urlencoded; charset=UTF-8",
            "-X", "POST",
            "--data", "username=" + username + "&password=" + password,
            "--compressed",
            "--insecure"
        };

        ProcessBuilder processBuilder = new ProcessBuilder(command);
        // 把错误流合并到输入流，统一读取避免阻塞
        processBuilder.redirectErrorStream(true);

        try {
            Process process = processBuilder.start();
            BufferedReader reader = new BufferedReader(new InputStreamReader(process.getInputStream()));
            StringBuilder resultBuilder = new StringBuilder();
            String line;

            while ((line = reader.readLine()) != null) {
                resultBuilder.append(line);
                resultBuilder.append(System.getProperty("line.separator"));
                System.out.println(line);
            }

            // 等待进程执行完成，获取退出码排查问题
            int exitCode = process.waitFor();
            System.out.println("\nCurl命令退出码: " + exitCode);
            System.out.println("最终响应结果:\n" + resultBuilder.toString());

        } catch (Exception e) {
            e.printStackTrace();
        }
    }
}

更优方案：用Java原生HttpURLConnection替代curl #

直接调用外部curl命令依赖系统环境，容易出现兼容性问题，推荐使用Java原生的HttpURLConnection实现，更稳定可靠：

import java.io.BufferedReader;
import java.io.DataOutputStream;
import java.io.InputStreamReader;
import java.net.HttpURLConnection;
import java.net.URL;
import javax.net.ssl.HttpsURLConnection;
import javax.net.ssl.SSLContext;
import javax.net.ssl.TrustManager;
import javax.net.ssl.X509TrustManager;
import java.security.cert.X509Certificate;

public class TokenFetcher {
    public static void main(String[] args) {
        try {
            // 忽略SSL证书验证（仅测试环境使用，生产环境务必配置可信证书）
            TrustManager[] trustAllCerts = new TrustManager[]{
                new X509TrustManager() {
                    public X509Certificate[] getAcceptedIssuers() { return null; }
                    public void checkClientTrusted(X509Certificate[] certs, String authType) {}
                    public void checkServerTrusted(X509Certificate[] certs, String authType) {}
                }
            };
            SSLContext sslContext = SSLContext.getInstance("SSL");
            sslContext.init(null, trustAllCerts, new java.security.SecureRandom());
            HttpsURLConnection.setDefaultSSLSocketFactory(sslContext.getSocketFactory());

            String url = "https://integration.sirionlabs.office:9443/nifi-api/access/token";
            String username = "your_username";
            String password = "your_password";
            String formData = "username=" + username + "&password=" + password;

            URL obj = new URL(url);
            HttpURLConnection con = (HttpURLConnection) obj.openConnection();

            // 设置请求方法和头信息
            con.setRequestMethod("POST");
            con.setRequestProperty("Content-Type", "application/x-www-form-urlencoded; charset=UTF-8");
            con.setRequestProperty("Accept-Encoding", "gzip"); // 对应原curl的--compressed参数

            // 启用输出流发送表单数据
            con.setDoOutput(true);
            DataOutputStream wr = new DataOutputStream(con.getOutputStream());
            wr.writeBytes(formData);
            wr.flush();
            wr.close();

            // 读取响应内容
            BufferedReader in = new BufferedReader(new InputStreamReader(con.getInputStream()));
            String inputLine;
            StringBuilder response = new StringBuilder();

            while ((inputLine = in.readLine()) != null) {
                response.append(inputLine);
            }
            in.close();

            // 打印最终的Bearer Token响应
            System.out.println("Bearer Token响应结果:\n" + response.toString());

        } catch (Exception e) {
            e.printStackTrace();
        }
    }
}

注意：生产环境绝对不能忽略SSL证书验证，应该配置正确的可信证书库，避免安全风险。

内容的提问来源于stack exchange，提问作者MOHD MUGHEES