Spring Boot中使用RestTemplate调用带Basic Auth的POST接口

嘿，我来帮你搞定这个Spring Boot里用RestTemplate调用带Basic Auth的POST接口的问题！咱们一步步来：

1. 先配置支持Basic Auth的RestTemplate #

最好把RestTemplate配置成Spring Bean，这样整个项目里都能复用，不用每次调用都重复写认证逻辑。你可以在配置类里这么写：

import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.http.client.ClientHttpRequestInterceptor;
import org.springframework.web.client.RestTemplate;
import java.util.Collections;
import org.springframework.http.HttpHeaders;
import org.springframework.util.Base64Utils;

@Configuration
public class RestTemplateConfig {

    @Bean
    public RestTemplate basicAuthRestTemplate() {
        RestTemplate restTemplate = new RestTemplate();
        
        // 创建Basic Auth拦截器
        ClientHttpRequestInterceptor interceptor = (request, body, execution) -> {
            // 替换成你的实际用户名和密码
            String username = "your-username";
            String password = "your-password";
            
            String auth = username + ":" + password;
            byte[] encodedAuth = Base64Utils.encode(auth.getBytes());
            String authHeader = "Basic " + new String(encodedAuth);
            
            request.getHeaders().set(HttpHeaders.AUTHORIZATION, authHeader);
            return execution.execute(request, body);
        };
        
        restTemplate.setInterceptors(Collections.singletonList(interceptor));
        return restTemplate;
    }
}

如果你的用户名和密码是从配置文件（比如application.properties）读取，用@Value注入会更灵活：

@Value("${external.api.username}")
private String apiUsername;

@Value("${external.api.password}")
private String apiPassword;

2. 修正你的Controller方法 #

注意哦，原代码里的URI有问题："foo:8080//validateAnswers"要改成带协议（http/https）的正确格式，比如"http://foo:8080/validateAnswers"，双斜杠要改成单斜杠。

然后在Controller里注入刚才配置好的RestTemplate，处理请求：

import org.springframework.http.HttpEntity;
import org.springframework.http.HttpHeaders;
import org.springframework.http.HttpMethod;
import org.springframework.http.ResponseEntity;
import org.springframework.web.bind.annotation.CrossOrigin;
import org.springframework.web.bind.annotation.PostMapping;
import org.springframework.web.bind.annotation.RequestBody;
import org.springframework.web.bind.annotation.RestController;
import org.springframework.web.client.RestTemplate;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

@RestController
@CrossOrigin(origins = "*", maxAge = 3600)
public class AnswerValidationController {

    // 注入配置好的RestTemplate（构造函数注入是Spring推荐的方式）
    private final RestTemplate basicAuthRestTemplate;

    public AnswerValidationController(RestTemplate basicAuthRestTemplate) {
        this.basicAuthRestTemplate = basicAuthRestTemplate;
    }

    @PostMapping("/ValidateAnswers")
    public ResponseEntity<String> ValidateAnswers(@RequestBody Object requestObject,
                                                  HttpServletRequest request,
                                                  HttpServletResponse response) {
        // 修正后的目标接口URI
        final String uri = "http://foo:8080/validateAnswers";
        
        // 按需设置请求头，比如指定Content-Type
        HttpHeaders headers = new HttpHeaders();
        headers.set(HttpHeaders.CONTENT_TYPE, "application/json");
        
        // 封装请求体和请求头
        HttpEntity<Object> requestEntity = new HttpEntity<>(requestObject, headers);
        
        // 调用带Basic Auth的POST接口
        ResponseEntity<String> apiResponse = basicAuthRestTemplate.exchange(
                uri,
                HttpMethod.POST,
                requestEntity,
                String.class
        );
        
        // 把第三方接口的响应原封不动返回给前端
        return ResponseEntity.status(apiResponse.getStatusCode()).body(apiResponse.getBody());
    }
}

3. 临时方案：手动设置Auth头（不用全局拦截器） #

如果只是单个接口需要Basic Auth，不想全局配置，也可以直接在调用时手动拼接Authorization头：

// 在Controller方法内部
HttpHeaders headers = new HttpHeaders();
headers.set(HttpHeaders.CONTENT_TYPE, "application/json");

// 手动添加Basic Auth认证信息
String username = "your-username";
String password = "your-password";
String auth = username + ":" + password;
byte[] encodedAuth = Base64Utils.encode(auth.getBytes());
String authHeader = "Basic " + new String(encodedAuth);
headers.set(HttpHeaders.AUTHORIZATION, authHeader);

HttpEntity<Object> requestEntity = new HttpEntity<>(requestObject, headers);
ResponseEntity<String> apiResponse = new RestTemplate().exchange(uri, HttpMethod.POST, requestEntity, String.class);

不过这种方式每次调用都要重复写认证逻辑，不如全局配置RestTemplate来得优雅。

几个关键注意点 #

• 确保目标接口的URI格式正确，协议、域名、端口、路径一个都不能错
• 如果目标接口返回的是结构化JSON，你可以把String.class换成对应的DTO类，RestTemplate会自动帮你解析成Java对象
• 生产环境绝对不能硬编码用户名和密码，一定要用配置文件、环境变量或者配置中心管理，避免安全风险

内容的提问来源于stack exchange，提问作者juniorDeveloper