如何从 xml 中获取具有根元素中所有 inscope 命名空间的节点

Question

这是我的 XML 文件内容

<Invoice xmlns="urn:oasis:names:specification:ubl:schema:xsd:Invoice-2" xmlns:cac="urn:oasis:names:specification:ubl:schema:xsd:CommonBasicComponents-2" 
xmlns:cbc="urn:oasis:names:specification:ubl:schema:xsd:CommonAggregateComponents-2" xmlns:ds=" http://www.w3.org/2000/09/xmldsig#" xmlns:ext="urn:oasis:names:specification:ubl:schema:xsd:CommonExtensionComponents-2" xmlns:sac="urn:oasis:names:specification:ubl:schema:xsd:SignatureAggregateComponents-2" 
xmlns:sbc="urn:oasis:names:specification:ubl:schema:xsd:SignatureBasicComponents-2" xmlns:sig="urn:oasis:names:specification:ubl:schema:xsd:CommonSignatureComponents-2">
    <ext:UBLExtensions>
        <ext:UBLExtension>
            <ext:ExtensionURI>urn:oasis:names:specification:ubl:dsig:enveloped:xades</ext:ExtensionURI>
            <ext:ExtensionContent>
              <sig:UBLDocumentSignatures>
               <sac:SignatureInformation>
                  <cbc:ID>urn:oasis:names:specification:ubl:signature:1</cbc:ID>
                  <sbc:ReferencedSignatureID>urn:oasis:names:specification:ubl:signature:Invoicesadas</sbc:ReferencedSignatureID>
                  <ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#" Id="signature">
                     <ds:SignedInfo>
                         <!-- SOME CONTENT HERE -->
                    </ds:SignedInfo>
                     <ds:SignatureValue></ds:SignatureValue>
                     <ds:KeyInfo>
                        <ds:X509Data>
                           <ds:X509Certificate></ds:X509Certificate>
                        </ds:X509Data>
                     </ds:KeyInfo>
                     <ds:Object>
                        <xades:QualifyingProperties xmlns:xades="http://uri.etsi.org/01903/v1.3.2#" Target="signature">
                           <xades:SignedProperties Id="xadesSignedProperties">
                              <xades:SignedSignatureProperties>
                                 <xades:SigningTime>2020-12-25T12:57:51Z</xades:SigningTime>
                                 <xades:SigningCertificate>
                                    <xades:Cert>
                                       <xades:CertDigest>
                                          <ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
                                          <ds:DigestValue> <!-- SOME VALUE HERE --></ds:DigestValue>
                                       </xades:CertDigest>
                                       <xades:IssuerSerial>
                                          <ds:X509IssuerName><!-- SOME VALUE HERE--></ds:X509IssuerName>
                                          <ds:X509SerialNumber><!-- SOME VALUE HERE--></ds:X509SerialNumber>
                                       </xades:IssuerSerial>
                                    </xades:Cert>
                                 </xades:SigningCertificate>
                              </xades:SignedSignatureProperties>
                           </xades:SignedProperties>
                        </xades:QualifyingProperties>
                     </ds:Object>
                  </ds:Signature>
               </sac:SignatureInformation>
            </sig:UBLDocumentSignatures>
         </ext:ExtensionContent>
      </ext:UBLExtension>
   </ext:UBLExtensions>
   <!-- SOME CONTENT HERE -->
</Invoice>

我想用文件中所有范围内的 xmlns 命名空间检索 SignedProperties 元素。 我需要的示例输出看起来像

<?xml version="1.0" encoding="UTF-8"?> <xades:SignedProperties **xmlns="urn:oasis:names:specification:ubl:schema:xsd:Invoice-2" xmlns:cac="urn:oasis:names:specification:ubl:schema:xsd:CommonBasicComponents-2"
 xmlns:cbc="urn:oasis:names:specification:ubl:schema:xsd:CommonAggregateComponents-2" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" 
xmlns:ext="urn:oasis:names:specification:ubl:schema:xsd:CommonExtensionComponents-2" xmlns:sac="urn:oasis:names:specification:ubl:schema:xsd:SignatureAggregateComponents-2" xmlns:sbc="urn:oasis:names:specification:ubl:schema:xsd:SignatureBasicComponents-2" 
xmlns:sig="urn:oasis:names:specification:ubl:schema:xsd:CommonSignatureComponents-2"** xmlns:xades="http://uri.etsi.org/01903/v1.3.2#" Id="xadesSignedProperties">
                                        <xades:SignedSignatureProperties>
                                            <xades:SigningTime>020-12-25T12:57:51Z</xades:SigningTime>
                                            <xades:SigningCertificate>
                                                <xades:Cert>
                                                    <xades:CertDigest>
                                                        <ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
                                                        <ds:DigestValue> <!-- SOME VALUE HERE --></ds:DigestValue>
                                                    </xades:CertDigest>
                                                    <xades:IssuerSerial>
                                                        <ds:X509IssuerName> <!-- SOME VALUE HERE --></ds:X509IssuerName>
                                                        <ds:X509SerialNumber> <!-- SOME VALUE HERE --></ds:X509SerialNumber>
                                                    </xades:IssuerSerial>
                                                </xades:Cert>
                                            </xades:SigningCertificate>
                                        </xades:SignedSignatureProperties>
                                    </xades:SignedProperties>

但是我得到的输出没有在文件的根元素中定义的命名空间。

我应该如何获取在 XML 文件中声明的所有命名空间的元素？

Answer 1

您似乎需要在提取的 xades:SignedProperties 节点上应用规范化。 您可以尝试使用 Apache Santuario 库中的 Canonicalizer 并规范化提取的节点：

public static byte[] canonicalizeSubtree(final String canonicalizationMethod, final Node node) {
    try (ByteArrayOutputStream baos = new ByteArrayOutputStream()) {
        final Canonicalizer c14n = Canonicalizer.getInstance(getCanonicalizationMethod(canonicalizationMethod));
        c14n.canonicalizeSubtree(node, baos);
        return baos.toByteArray();
    } catch (Exception e) {
        // some logic here
    }
}

对于规范化方法，它更像是一种“包容性”规范化，例如：“http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments”（参见ALGO_ID_C14N_WITH_COMMENTS )。