WS-*/REST Web Services with WSO2 WSF/PHP. Samisa Abeysinghe Nandika Jayawardana

Size: px

Start display at page:

Download "WS-*/REST Web Services with WSO2 WSF/PHP. Samisa Abeysinghe Nandika Jayawardana"

Gary Harvey
5 years ago
Views:

1 WS-*/REST Web Services with WSO2 WSF/PHP Samisa Abeysinghe Nandika Jayawardana Zend PHP Conference & Expo, San Jose, 30 Oct 2006

2 About Us Samisa Member ASF Lead contributor Apache Axis2/C Was an active contributor Apache Axis C++ Software architect at WSO2 Developer WSO2 WSF/PHP Visiting lecturer University of Moratuwa Nandika Committer Apache Axis2/C Software engineer at WSO2 Developer WSO2 WSF/PHP

3 From PHP Axis2 to WSO2 WSF/PHP PHP Axis2 effort initially started in PECL Latest code at wso2.net

4 WSO2 WSF/PHP WSO2 Web Services Framework/PHP Open source with Apache license Is available as a PHP extension Based on WSO2 WSF/C Uses Apache Axis2/C Supports consuming and providing Web services Mainly using WS-* stack REST is also possible WSO2 WSF/PHP is a PHP extension for providing and consuming Web Services"

5 Why Yet Another SOAP Extension? WSO2 WSF/PHP supports more SOAP 1.1 SOAP 1.2 MTOM WS-Addressing WS-Security UsernameToken And more to come WS-Reliable Messaging WS-Security full support (encryption/signature) WS-Eventing WSDL generation/proxy generation/data binding

6 WSO2 WSF/PHP Agenda

7 Agenda (1 of 3) Installation Quick Start Consuming Google Spell Check Service Hello Service/Client Math Service/Client API Object Oriented Functional Providing Services In-out Operations

8 Agenda (2 of 3) Providing Services In-only operations Consuming Service Out-in Operations Out-Only Operations Using SOAP SOAP 1.1 vs. SOAP 1.2 Using REST Payload Formats String, SimpleXMLElemnt, domdocument

9 Agenda (3 of 3) Attachments with XOP/MTOM Optimized vs Non-Optimized Uploading Downloading WS-Addressing WS-Security UsernameToken Sending UsernameToken (client) Verifying UsernameToken (service) Notes Next Steps

10 WSO2 WSF/PHP Installation

11 Installation Requirements PHP or above libxml2 For Linux we have the source distribution For windows, we have both binary and source distributions Please have a look at the install guide

12 WSO2 WSF/PHP Quick Start

13 Quick Start Spell checking with Google spell check Endpoint: Google spell uses SOAP 1.1 Request payload Google key (you need to get one) Word to spell check (e.g. tamperature) Response payload Correct word (e.g. Temperature)

14 Hello Sample Hello service with greet operation Client would consume this service Request and response payloads: Request: <greet> Hello Service! <greet> Response: <greetresponse> Hello Client! <greetresponse>

15 Hello Service - Steps Write the function corresponding to the greet operation of the service Create a WSService giving the operation map along with options Call the reply() method of the WSService class That would invoke the operation and prepare the response

16 Hello Client - Steps Create a WSMessage instance with desired request payload and options Create a WSClient instance Send the request and receive the response Consume the response

17 Math Sample Handling string payloads is easy Can I do math? Convert the payload into an easy to process format Then process the payload

18 WSO2 WSF/PHP The API

19 WSO2 WSF/PHP The Big Picture PHP Userland SAPI Layer Zend Engine WSO2 WSF/PHP Extension WSO2 WSF/C (SOAP Engine)

20 WSO2 WSF/PHP API Object oriented WSClient WSService WSMessage WSFault Functions ws_request ws_send ws_reply

21 Providing Services A service can have multiple operations Each operation should have a corresponding function that implements the operation Syntax: WSMessage user_defined_operation(wsmessage payload) Example: function echofunction($inmessage){ $returnmessage = new WSMessage($inMessage->str); return $returnmessage; }

22 Providing Services : In-Out MEP In-Out message exchange pattern Operation takes in a request payload and returns a response payload e.g. echofunction shown earlier It returns a message

23 Providing Services : In-Only MEP In-Only message exchange pattern Operation takes in a request payload but does not return anything e.g. notifyfunction function notifyfunction($inmessage) { return; } It does not return anything

24 Providing Services Operation Map (1 of 2) Need to specify What operations are supported by the service What functions implement those operations Examples: from hello service: $service = new WSService(array("operations" => array("greet"))) from echo service: $service = new WSService(array("operations" => array("echostring" => "echofunction")))

25 Providing Services Operation Map (2 of 2) Difference? $service = new WSService(array("operations" => array("greet"))) Operation name and the function name are the same, that is greet $service = new WSService(array("operations" => array("echostring" => "echofunction"))) Operation name and function name are different Operation is echostring Function name is echofunction Significance of operation name?

26 Providing Services Operation Name Web services engine would resolve the operation to be invoked by looking at the local name of the first child element of the request payload When WS-Addressing is not in use

27 Providing Services WSService->reply() reply() method Triggers processing of the request Calls required functions as necessary Prepares response payload to be returned to client

28 Providing Services Function API ws_reply() Need to include wsf.php include_once('./wsf.php') Simple API to provide services ws_reply(array("operations" => array("echostring" => "echofunction"))); OO equivalent $service = new WSService(array("operations" => array("echostring" => "echofunction"))); $service->reply();

29 Consuming Services Minimum requirements Request payload Service endpoint address

30 Consuming Services : Out-In MEP Out-In message exchange pattern Sends s request payload expecting a response payload e.g. echo client $client = new WSClient(array("to" => " $resmessage = $client->request($reqpayloadstring)

31 Consuming Services : Out-Only MEP Out-Only message exchange pattern Sends a request payload and does not expect a response e.g. notify client $client = new WSClient(array("to" => " $client->send($reqpayloadstring)

32 Consuming Services Function API (1 of 2) Need to include wsf.php include_once('./wsf.php') ws_request() $resmessage = ws_request($reqpayloadstring, array("to"=>" rvice.php")); OO equivalent $client = new WSClient(array("to" => " $resmessage = $client->request($reqpayloadstring);

33 Consuming Services Function API (2 of 2) ws_send() ws_send($reqpayloadstring, array("to"=>" e.php")); OO equivalent $client = new WSClient(array("to" => " $client->send($reqpayloadstring);

34 WSO2 WSF/PHP SOAP and REST

35 Using SOAP Can select version using usesoap option Default is SOAP 1.2 SOAP 1.2 usesoap => TRUE SOAP 1.1 usesoap => REST usesoap => FALSE

36 Identifying SOAP Version from SOAP Message Namespace: SOAP 1.1: SOAP 1.2: Content-Type: SOAP 1.1: text/xml SOAP 1.2: application/soap+xml

37 Using REST Disable SOAP usesoap => FALSE Sends message payload as it is Can select HTTP method to be used "HTTPMethod" => POST GET Default is POST

38 Payload Formats Function API takes any of String SimpleXMLElement DomDocument Payload is based on XML-in / XML-out processing model

39 WSO2 WSF/PHP XOP/MTOM (Attachments)

40 Binary Attachments Binary Data Images, sounds files, video files Not worth transforming to XML Using the QoS capabilities of WS-* with binary data e.g. Secure reliable connection

41 Opaque Non-XML Data - Problem Users want to leverage the structured, extensible markup conventions of XML Don t want to abandon existing data formats Needs existing formats to coexist with XML & to be treated as opaque sequences of octets by XML tools and infrastructure

42 Opaque Non-XML Data - Solution Two approaches By value By Reference

43 By Value (1 of 2) Embedding encoded texts of opaque data in the XML payload Base64 encoding HexBinary encoding

44 By Value (2 of 2) Advantages Ability to process and describe data based on XML component of the data Disadvantages Bloating of the size 1.33x with Base64, 2x with HexBinary Processing overhead

45 Example of By Value <soap:body> <m:data xmlns:m=' <m:photo xmlmime:contenttype='image/png > /awkkapggyq= </m:photo> <m:sig xmlmime:contenttype='application/pkcs7- signature> Faa7vROi2VQ= </m:sig> </m:data> </soap:body> </soap:envelope>

46 By Reference (1 of 2) Attaching pure binary data as external unparsed entities outside of the XML document Use of packaging mechanisms MIME Embedding reference URI's to those entities, inside XML payload

47 By Reference (2 of 2) Advantages No encodings used Efficient Disadvantages Two data models One for XML One for attachments

48 XOP XML Optimized Packaging XOP package A serialization of the XML Infoset inside an extensible packaging format Attached binary content appears as if it is in-line (by value) Actual attachment goes outside message (by reference)

49 MTOM SOAP Message Transmission Optimization Mechanism Describes how XOP is layered in to SOAP/HTTP Presents an XML Infoset to the SOAP application MIME multipart/related

50 MTOM Optimized SOAP Message Content-Type: multipart/related; boundary=mime_boundary; type="application/xop+xml"; start-info="text/xml; charset=utf-8" --MIME_Boundary content-type: application/xop+xml;charset=utf-8; type="application/soap+xml;" content-transfer-encoding: binary content-id: <?xml version='1.0?><soapenv:envelope...>... <xop:include xmlns:xop= </soapenv:envelope> --MIME_Boundary content-type: application/octet-stream content-transfer-encoding: binary content-id: Binary Data... --MIME_Boundary--

51 Sending an Attachment Include a reference in request payload to indicate where the attachment should go Create outgoing message with an attachment array containing content ID to binary content map Enable MTOM "usemtom" => TRUE

52 Receiving an Attachment On client, set responsexop => TRUE On service, set requestxop => TRUE When respective XOP property is TRUE, received message would have two properties set attachments (cid key to binary string value map) cid2contenttype (cid key to attachment content type map)

53 Sending Optimized vs Non-Optimized Optimized "usemtom" => TRUE Non-Optimized "usemtom" => FALSE

54 WSO2 WSF/PHP WS-Addressing

55 WS-Addressing WS-Addressing provides mechanisms to address Web services and messages Two versions; both supported version 1.0 submission

56 Enabling WS-Addressing on Service Set WS-Addressing action mapping for operations Example: $operations = array("echostring" => "echofunction"); $actions = array(" => "echostring"); $service = new WSService(array("operations" => $operations, "actions" => $actions))

57 Using WS-Addressing on Client Two basic requirements Set WSA action Set usewsa option Example: $reqmessage = new WSMessage($reqPayloadString, array("to" => " "action" => " $client = new WSClient(array("useWSA" => TRUE))

58 Addressing Version Can select version using usewsa option Default is FALSE, that means WSA is not used If client uses WSA, then service too will use WSA No need to explicitly enable on service Version 1.0 usewsa => TRUE Submission usewsa => "submission"

59 Identifying WSA Version from SOAP Message Namespace: Version 1.0: Submission:

60 WSO2 WSF/PHP WS-Security UsernameToken

61 WS-Security UsernameToken Two forms Plain text password Digest of password Request message Security header contains UsernameToken element with the Username Password child elements Service can verify them and authenticate

62 WS-Security in Service Have to enable security "secure"=>true Also need to set up password file Default location: /usr/local/apache2/passwd/passwords Can set wsf.passwd_location in php.ini File format user:password

63 WS-Security in Client Security will be enabled if both user and password options are set "user"=> username "password"=> password

64 WS-Security UsernameToken More Options Digest Password "digest" => TRUE Time-stamp "timestamp" => TRUE Time to Live "timetolive" => 5m

65 WSO2 WSF/PHP Notes

66 Options Precedence Options on client side WSMessage level WSClient level Message level options take precedence over client level Options on services Can be only set on WSService

67 Log File Log is written to /tmp/wsf.log by default Can set the location of the log in php.ini wsf.log_path=path_to_log Name of the log file is wsf.log always Useful when debugging SOAP engine

68 Future Plans WS Reliable Messaging Work in progress WS Security Encryption work in progress Signing will take some time (C14N) WSDL Generating for given service Proxy for given WSDL and data binding

69 Project Information Project home: Mailing list: To subscribe: This project is open source with Apache license You are welcome to send feedback and contribute

References WSO2 WSF/PHP SOAP REST MTOM API document: http://www.wso2.net/project/wsf/php/1.0alpha1/docs/api.html Manual: http://www.wso2.net/project/wsf/php/1.0alpha1/docs/manual.html SOAP 1.

70 References WSO2 WSF/PHP SOAP REST MTOM API document: Manual: SOAP 1.1: SOAP 1.2: WS-Addressing Version 1.0: Submission: WS-Security

SOAP 1.2, MTOM and their applications

SOAP 1.2, MTOM and their applications Hervé Ruellan Canon Research Centre France 1 Agenda SOAP 1.2 XOP, MTOM and Resource Header Canon 2 SOAP 1.2 3 SOAP Background Web success Easy information sharing