Apache HttpClient：SSL环境下BasicCredentialProvider失效的JUnit测试问题

阿华AIGC实验室

2026-5-26

解决Apache HttpClient BasicCredentialProvider在HTTPS环境下失效的问题

我之前测试带Basic认证的HTTPS REST服务时，也踩过一模一样的坑！问题基本出在没把凭证提供者和SSL上下文正确整合到HttpClient实例里，或者初始化HttpClient的方式不对。

常见问题原因

单独配置了BasicCredentialProvider，但创建支持HTTPS的HttpClient时，没把这个凭证提供者关联进去
自定义SSL上下文（比如测试环境忽略自签名证书）时，只处理了SSL部分，漏掉了凭证配置
直接用HttpClient的默认实例，没通过HttpClientBuilder来整合多部分配置

完整修复后的JUnit测试代码

下面是包含HTTPS SSL配置（测试环境常用的信任所有证书）和Basic凭证正确绑定的完整测试用例：

import org.apache.http.HttpResponse;
import org.apache.http.auth.AuthScope;
import org.apache.http.auth.UsernamePasswordCredentials;
import org.apache.http.client.HttpClient;
import org.apache.http.client.methods.HttpGet;
import org.apache.http.conn.ssl.NoopHostnameVerifier;
import org.apache.http.conn.ssl.SSLContextBuilder;
import org.apache.http.impl.client.BasicCredentialProvider;
import org.apache.http.impl.client.HttpClientBuilder;
import org.junit.Test;

import javax.net.ssl.SSLContext;
import java.security.KeyManagementException;
import java.security.KeyStoreException;
import java.security.NoSuchAlgorithmException;

public class RestServiceHttpsAuthTest {

    @Test
    public void testConnectionWithBasicAuthentication() throws KeyManagementException, NoSuchAlgorithmException, KeyStoreException {
        // 1. 配置Basic认证凭证
        BasicCredentialProvider credentialProvider = new BasicCredentialProvider();
        UsernamePasswordCredentials credentials = new UsernamePasswordCredentials("user", "password");
        credentialProvider.setCredentials(AuthScope.ANY, credentials);

        // 2. 创建支持HTTPS的SSL上下文（仅测试环境使用：信任所有证书、忽略主机名校验）
        SSLContext sslContext = SSLContextBuilder
                .create()
                .loadTrustMaterial((chain, authType) -> true) // 信任所有证书
                .build();

        // 3. 通过Builder整合凭证提供者和SSL上下文，创建HttpClient
        HttpClient client = HttpClientBuilder.create()
                .setDefaultCredentialsProvider(credentialProvider)
                .setSSLContext(sslContext)
                .setSSLHostnameVerifier(NoopHostnameVerifier.INSTANCE) // 忽略主机名校验
                .build();

        // 4. 执行请求并验证
        try {
            HttpGet request = new HttpGet("https://your-rest-service-url/api/endpoint");
            HttpResponse response = client.execute(request);
            
            // 这里可以添加断言逻辑，比如验证状态码
            System.out.println("响应状态码：" + response.getStatusLine().getStatusCode());
        } catch (Exception e) {
            e.printStackTrace();
            // 异常处理逻辑
        }
    }
}