j2ee apis and emerging web services standardsj2ee apis and emerging web services standards session...

OracleWeb Services WednesdayWorkshop

1

J2EE APIs and Emerging Web Services Standards

Session #4

Speaker Title

Oracle Corporation


2

Agenda

J2EE APIs for Web ServicesJAX-RPC

– Introduction– Architecture– Server Programming Model – Client Programming Model

J2EE Web Services deployment model

J2EE APIs for Web ServicesJAX-RPCEmerging Web Services Standards


3

Why J2EE APIs for Web Services

Standard APIs for creating and invoking Web services in Java/J2EEPortability across J2EE platform vendors Interoperability with standards compliant Web services, and WS-I BP compliancesSimplicity for developing and deploying Web servicesExtensibility of basic Web services runtime Reusability of Existing J2EE artifacts as Web Services runtime


4

J2EE APIs for Web Services

DescriptionJava APIsfor XML

Java API for XML Registries

Java API for XML Remote Procedure CallJAX-RPC

SAAJ

Java API for XML Data Binding

Java API for XML Data Binding

JAXP

JAXB

JAXR

Java API for XML Parsing

Stateless Session EJB Endpoint ModelEJB 2.1

Web Services Deployment ModelJSR 109


5

JAX-RPC Design Goals

J2EE App Server

Non-J2EEClient

J2EE App Server

Non-J2EEService

J2EEclient

J2EEservice

J2EEclient

J2EEservice


6

JAX-RPC Architecture

TransportProtocol (SOAP)

Server Side JAX-RPCRuntime System

JAX-RPC API JAX-RPC APIClient Side JAX-RPC

Runtime System

Stub

Service Endpoint

WSDL description

WSDL<->Java Mapping

Service Client

Dispatch

Container Tie


7

WSDL/XML Java Mapping

exceptionfault

value typecomplex type

Java types or std. classesschema built-in types

methodoperation

remote interfaceport/portType

javax.xml.rpc.Serviceservice

JavaWSDL


8

JAX-RPC Message Handlers

SOAP Request

SOAP Request

Han

dler

A

Han

dler

B

Han

dler

1

Han

dler

2

JAX-RPC Service

Endpoint

Handler chain


9

JAX-RPC Programming Model

Service definition interfaces must follow RMI conventionsNo remote references are allowed.All objects are passed by copy.


10

Developing JAX-RPC Web Services

javax.rmi.Remote

Service endpointInterface

ServiceLifeCycleInterface

Service Implementation

Class

WSDL to Java

Standard Standard

Generated

Your Code

D E M O N S T R A T I O N

JAX-RPC in Action


12

JAX-RPC Client Invocation Models

Generated StubsGenerated Stubs

Dynamic ProxyDynamic Proxy

Dynamic InvocationInterface

Dynamic InvocationInterfaceJA

X-R

PC A

PIs

JAX-

RPC

API

s

ClientJAX-RPCRuntime

SOAP/HTTP

HandlerChain

Webservicesclient.xml


13

Business Use Case

Let’s assume you want to build a new PO processing system

– You already have a Web service exposing relevant Inventory functionality of your ERP system

– You also want to leverage a Credit Web serviceYou want to expose a new PO processing Web service

– Internally uses the Inventory Web service and the Credit Web service to verify eligibility


14

Business Example

ClientClientPO ServicePO Service

Credit Credit ServiceService

Inventory Inventory ServiceService

Make Order

Check Credit

Check Inventory

Inventory Inventory ServiceService

Inventory Status

Credit Credit ServiceService

Credit Status

Confirm Order ConsolidateResults


15

Web Services Standards Stack

QualityQualityof Serviceof Service

Orches-tration

Complex WSComplex WS

HTTPHTTP, BEEP, IIOP, JMS, SMTP, BEEP, IIOP, JMS, SMTPXMLXML

SOAPSOAPWSDLWSDLUDDIUDDI

TransportTransport

MessagingMessaging

DescriptionDescriptionDiscoveryDiscovery


16

Web Services Standards/Tech Stack

HTTP, BEEP, IIOP, JMS, SMTPHTTP, BEEP, IIOP, JMS, SMTPXMLXML


TransportTransport

MessagingMessaging


Reliable Reliable MessagingMessaging SecuritySecurity QualityQuality

of Serviceof Service


17

Web Services Reliability Requirements

Motivation: transport independence, intermediariesAt-Least-Once semanticsAt-Most-Once semantics (no duplicates)Exactly-Once semanticsGuaranteed Message Ordering, within a context delimited using a group id.


18

WS-Reliability

ApplicationLayer

ApplicationLayer

SOAP NodeWith

ReliableMessaging

SOAP NodeWith

ReliableMessaging

Msg

SOAP Reliable Message

Ack

Acknowledgement Message

Sender Receiver


19

Security Requirements

Identification - Who are you?Authentication - How do I know it is you?Authorization - Are you allowed?Integrity - Is the data untampered?Confidentiality - Did anyone read it?Auditing - Can you show what happened?Non-Repudiation - Can you prove it happened


20

How to Achieve Security

Transport-level security– HTTP authentication– Digest authentication– Secure Socket Layer

End-to-End, or Message-Level, or Application-Level security

– WS-Security with XML DSig/Encryption


21

WS-Security

SOAP extensions to implement integrity and confidentiality.Describes how to exchange signed and encrypted messages Addresses same-domain and cross-domain secure messagingBuild on SOAP, WSDL, XML DSig, XML Enc and SSL/TLSDesigned to support PKI, Kerberos, SAML, XrML, Basic/Digest, SSL


22

Oracle Roadmap

TransportLayer

Security(SSL)

SAMLXKMS

WS-SECXML-DSIGXML-ENC

SessionPolicy

AuthorizationProvisioning

Today


23

Web Services Standards/Tech Stack[New Layer]

HTTP, BEEP, IIOP, JMS, SMTPHTTP, BEEP, IIOP, JMS, SMTPXMLXML


TransportTransport

MessagingMessaging


Reliable Reliable MessagingMessaging SecuritySecurity

Transactions Transactions &Coordination&Coordination


Choreography:Choreography:BPEL4WS,WSCI,BPSS..BPEL4WS,WSCI,BPSS..

Orches-tration


24

Orchestration Example

WS

Clie

nt

Cre

dit

WS

Serv

ice

Partn

er L

inks

& R

efer

ence

s

Service Partners

Customer

checkCredit()

createPO()1

XPATH(PO)

Inv

WS

PO

2

Item

checkInv()

XPATH(PO)

3

InvConfirm CreditConfirm

replyToPO()4


25

Orchestration Challenges

Coordinate asynchronous communication with services and the customerCorrelate message exchanges between participating partiesImplement parallel processing of activities and their synchronization


26

Different Terminology

Other terms often used in the same context– Web Service Composition– Web Service Choreography– Web Service Coordination– Web Service Conversations– Web Service Collaborations

Different people prefer different terminologies, but basically they’re all talking about…


27

Specifications OverviewBusiness Process Execution Language for Web Services (BPEL4WS)

– Combination of IBM’s WSFL and MSFT’s XLANGWS-Coordination/Transaction

– Used by BPEL4WS to provide support for long running business transactions (activities)

Web Service Choreography Interface (WSCI)Business protocols, such as ebXML, RosettaNet, etc.


28

Overview of Business Protocols

SOAP w/ MIME

ebMS (based on SOAP w/

attachments)

XMLDigSig

Reg/Rep

Core Library / Core Components

CPP/CPA

BPSS

ebXML

RNBD, RNTDBusiness Document Definitions

S/MIMEWS-Security, XMLDigSig,

SAML, …

Payload Security

BPEL4WS, BPML, XPDL, …

Internal Business Process Definitions

<= (see ebXML)Collaboration Profile & Agreement

SOAP w/ MIME, DIME

SOAP, WS-Coordination/

Transaction, …

UDDI

Web Services (Orchestration)

Registry and Repository

RNO / MIMETransport, Packaging

RNIFProtocol, Messaging

PIPBusiness Collaboration Definitions

RosettaNet


29

Web Services Standards Stack

HTTPHTTP, BEEP, IIOP, JMS, SMTP, BEEP, IIOP, JMS, SMTPXMLXML


TransportTransport

MessagingMessaging


Reliable Reliable MessagingMessaging SecuritySecurity

Grid Grid ServicesServices

Transactions Transactions &Coordination&Coordination


Choreography:Choreography:BPEL4WSBPEL4WS,WSCI,BPSS..,WSCI,BPSS..

Orches-tration

Integration Integration A2AA2Ai, i, B2BB2Bi :i :ebXMLebXML,, RosettaNetRosettaNet

Complex WSComplex WS

j2ee apis and emerging web services standardsj2ee apis and emerging web services standards session...

Documents