OracleAS 10g R3: Build J2EE Applications II

Transcription

1 OracleAS 10g R3: Build J2EE Applications II Volume I Student Guide D18380GC10 Edition 1.0 April 2006 D45763

2 Authors David Loo Glenn Stokol Technical Contributors and Reviewers Michael Burke Dr. Ken Cooper Gary Crutchfield Craig Hollister Taj-ul Islam Peter Laseau Mike Lehmann Debu Panda Nagavalli Pataballa Gayathri Rajagopal Guus Ramackers Holger Dindler Rasmussen Venkat Tallapragada Jon Wetherbee Ted Witiuk Dr. Volker Zell Frances Zhao Copyright 2006, Oracle. All rights reserved. Disclaimer This document contains proprietary information and is protected by copyright and other intellectual property laws. You may copy and print this document solely for your own use in an Oracle training course. The document may not be modified or altered in any way. Except where your use constitutes "fair use" under copyright law, you may not use, share, download, upload, copy, print, display, perform, reproduce, publish, license, post, transmit, or distribute this document in whole or in part without the express authorization of Oracle. The information contained in this document is subject to change without notice. If you find any problems in the document, please report them in writing to: Oracle University, 500 Oracle Parkway, Redwood Shores, California USA. This document is not warranted to be error-free. Restricted Rights Notice If this documentation is delivered to the United States Government or anyone using the documentation on behalf of the United States Government, the following notice is applicable: U.S. GOVERNMENT RIGHTS The U.S. Government s rights to use, modify, reproduce, release, perform, display, or disclose these training materials are restricted by the terms of the applicable Oracle license agreement and/or the applicable U.S. Government contract. Trademark Notice Oracle, JD Edwards, PeopleSoft, and Siebel are registered trademarks of Oracle Corporation and/or its affiliates. Other names may be trademarks of their respective owners. Editors Arijit Ghosh Richard Wallis Graphic Designer Steve Elwood Publisher Joseph Fernandez

3 Contents Preface 1 OracleAS 10g Release 3: Build J2EE Applications II Objectives 1-2 Agenda 1-3 Course Objectives 1-4 Course Agenda 1-6 Review of J2EE Architecture 1-9 J2EE Platform and APIs 1-10 Overview of J2EE Web Application Architecture 1-15 Overview of J2EE Enterprise JavaBeans Application Architecture 1-16 Overview of Web Services for J2EE and APIs 1-18 Course Environment 1-19 Course Application Scenario: Connections and Database Schema 1-20 Creating a Database Connection in JDeveloper 1-21 Creating an Application Server Connection in JDeveloper 1-22 Summary 1-23 Practice 1 Overview: Exploring the Course Application Environment Designing J2EE Applications Objectives 2-2 Course Application Scenario: Deploy and Explore the Application 2-3 Building J2EE User Interfaces 2-4 Designing a J2EE Application 2-5 Defining the MVC Architecture 2-6 Implementing Model 1 or Model 2 Designs 2-7 Implementing the User Interface with JSF and Core J2EE Patterns 2-8 Implementing a Session Facade Pattern 2-9 Working with Enterprise JavaBean Types 2-10 Developing EJB 3.0 Components 2-11 Introduction to EJB Metadata Annotations 2-12 Selecting a Persistence Strategy 2-13 Messaging with JMS and Message-Driven Beans 2-14 Managing Applications with Java Management Extensions (JMX) 2-15 Integrating Applications with Java Connector Architecture (JCA) 2-16 Securing Applications with Java Authentication and Authorization Service 2-17 Course Application Components 2-18 SRDemo User Interface 2-19 Summary 2-20 Practice 2 Overview: Exploring the Course Application Design 2-21 iii

4 3 Configuring Data Sources Objectives 3-2 Course Application Scenario: Create and Test a Data Source 3-3 What Is a Data Source? 3-4 Choosing a JDBC Driver 3-6 Selecting the Type of Data Source 3-8 Support for Oracle JDBC in Data Sources 3-9 Creating a Data Source in Application Server Control 3-10 Creating a Managed Data Source in Application Server Control 3-11 Configuring a Connection Pool 3-12 Creating a Connection Pool with Application Server Control 3-13 Setting the Connection Pool Properties 3-14 Setting Connection Pool Attributes 3-15 Configuring a Managed Data Source 3-16 Configuring a Native Data Source 3-17 Testing the Data Source Configuration in Oracle Application Server 10g 3-18 Packaging Application-Specific Data Sources 3-20 Using Data Sources in Java 3-21 Working with Data Sources Prior to Oracle Application Server 10g R Automigration of Data Sources 3-23 Configuring Data Sources for Non-Oracle Databases 3-24 Summary 3-25 Practice 3 Overview: Configuring Data Sources Creating EJB Entities Objectives 4-2 Course Application Scenario: Create Business-Tier Persistence Components 4-3 What Are EJB Entities? 4-4 Managing Persistence of EJB Entities 4-5 Declaring an EJB 3.0 Entity 4-6 Specifying Object Relational (O-R) Mapping with Annotations 4-7 Generating Primary Key Values 4-8 Mapping Relationships Between Entities 4-9 Implementing One-to-One Relationships 4-11 Implementing Many-to-One Relationships 4-12 Implementing One-to-Many Relationships 4-13 Implementing Many-to-Many Relationships 4-14 Summary 4-15 Practice 4 Overview: Creating EJB 3.0 Entities and Relationships 4-16 iv

5 5 Creating Session Beans Objectives 5-2 Course Application Scenario: Create a Session Facade and a Test Client 5-3 What Is a Session Bean? 5-4 Stateless Versus Stateful Session Beans 5-5 Life Cycle of a Stateless Session Bean 5-6 Creating a Stateless Session Bean 5-7 Define the Stateless Session Bean 5-8 Create the Remote and Local Interfaces 5-9 Create a Test Client for the SLSB 5-10 Life Cycle of a Stateful Session Bean 5-11 Passivation and Activation Concepts 5-13 Creating a Stateful Session Bean 5-14 Define the Stateful Session Bean 5-15 Create the Remote and Local Interfaces 5-16 Create a Test Client for the SFSB 5-17 Interceptor Methods and Classes 5-18 Interceptor Method 5-19 Interceptor Classes 5-20 Summary 5-21 Practice 5 Overview: Creating Session Beans Accessing Resources with JNDI and Dependency Injection Objectives 6-2 Course Application Scenario: Create a Service Locator for JNDI operations 6-3 Java Naming and Directory Interface 6-4 Referencing J2EE Resources with JNDI 6-5 Providing JNDI Properties 6-6 Referencing a Local Session EJB with JNDI 6-8 Referencing a Remote Session EJB with JNDI 6-9 Dependency Injection 6-10 Types of Dependency Injection 6-11 Defining Annotation 6-12 Using J2EE Resources with Dependency Injection 6-13 Working with Dependency Injection 6-14 Referencing EJBs with Dependency Injection 6-15 Working with JNDI Enhancements in OC4J 6-16 Enabling Global JNDI Lookup 6-18 v

6 Relaxing JNDI Lookup Constraints 6-19 Summary 6-20 Practice 6 Overview: Locating EJBs and Resources Manipulating and Querying with the EntityManager API Objectives 7-2 Course Application Scenario: Query Service Requests for JSF Pages 7-3 What Is EntityManager? 7-4 Managing an Entity Life Cycle with EntityManager 7-5 Creating an EntityManager Instance 7-7 Specifying Database Operations with the EntityManager API 7-8 Inserting Data 7-9 Updating Data 7-10 Deleting Data 7-11 Finding an Entity by Primary Key 7-12 Retrieving Entities by Using the Query API 7-13 Writing a Basic EJB QL Statement 7-14 Creating Named Queries 7-15 Writing Dynamic Queries 7-16 Summary 7-17 Practice 7 Overview: Using the EntityManager and Query APIs Writing EJB Query Language Statements Objectives 8-2 Course Application Scenario: Manage Notifications and Triage Service Requests 8-3 Enterprise JavaBeans Query Language 8-4 Writing Basic EJB QL Statements 8-5 Writing the EJB QL SELECT Clause 8-6 Writing the FROM Clause 8-7 Adding Conditions to an EJB QL Query 8-8 Using Multivalued Expressions and Operators 8-9 Using EJB QL Functions 8-10 Executing Dynamic EJB QL with the Query API 8-11 Writing EJB QL in NamedQuery Annotations 8-12 Batching UPDATE and DELETE in EJB QL 8-14 Summary 8-15 Practice 8 Overview: Create NamedQuery and Dynamic Queries Communicating with Message-Driven Beans Objectives 9-2 Course Application Scenario: Enable Notifications with an MDB 9-3 Messaging Systems 9-4 vi

7 Two Domains for JMS 9-5 Java Message Service 9-6 JMS Application Architecture 9-7 JMS Connector Architecture in OC4J 10g 9-8 Using Java Message Service Interfaces 9-9 Configuring Java Message Service 9-10 JMS Configuration File (jms.xml) 9-11 Message-Driven Beans 9-12 Life Cycle of a Message-Driven Bean 9-13 Creating a Message-Driven Bean 9-14 Creating a JMS/MDB Client 9-15 Summary 9-17 Practice 9 Overview: Creating a Message-Driven Bean Managing Transactions with Session and Message-Driven Beans Objectives 10-2 Course Application Scenario: Manage Products with CMP or BMP Transactions 10-3 What Is a Transaction? 10-4 EJB Transaction Model 10-5 Managing Transactions with EJBs 10-6 Enterprise JavaBeans Support for Transactions 10-7 Types of Transaction Management 10-8 Container-Managed Transactions 10-9 Transaction Attribute: REQUIRED Transaction Attribute: SUPPORTS Transaction Attribute: MANDATORY Transaction Attribute: NEVER Transaction Attribute: REQUIRES_NEW Transaction Attribute: NOT_SUPPORTED CMT: setrollbackonly() Container-Managed Transaction: Example Java Transaction API (JTA) JTA: UserTransaction Interface Bean-Managed Transactions Bean-Managed Transaction: Example BMT Demarcation: Restrictions Local and Global Transactions Single-Phase Commit Enlisting Database Resources vii

8 Configuring the Transaction Manager in OC4J Summary Practice 10 Overview: Managing Transactions Scheduling Tasks and Jobs for J2EE Applications Objectives 11-2 Course Application Scenario: Escalate Messages for Unassigned Service Requests 11-3 Why Use EJB Timers? 11-4 EJB Timers 11-5 Limitations of EJB Timers 11-6 EJB TimerService Interface 11-7 EJB Timer and TimerHandle Interfaces 11-8 Timer Example: Stateless Session Bean 11-9 Working with the OC4J EJBTimerService Interface OC4J EJBTimerService Interface Oracle Application Server Job Scheduler Summary Practice 11 Overview: Creating EJB Timers Securing J2EE Applications with JAAS Objectives 12-2 Course Application Scenario: Add Web and EJB Security 12-3 Goals of J2EE Security Architecture 12-4 Overview of J2EE Security Architecture 12-5 Java Authentication and Authorization Service (JAAS) 12-6 Authorization of a Client 12-9 JAAS Provider Types in OC4J XML-Based Provider Type Configuring Security Defining Users and Roles Defining the Logical Roles Defining and Using Logical Roles in Web Applications (web.xml) Defining and Using Logical Roles in EJBs (ejb-jar.xml) Mapping Logical Roles to Users and Groups Programmatic Access to a Caller s Security Context Client Authentication EJB Client Authentication with the jndi.properties file EJB Client Authentication with a Hashtable Setting Access Control with JDeveloper Creating Web Application Security Roles Web Application Login Authentication viii

9 Web Application Authorization EJB Security Roles Security Annotation: Example Summary Practice 12 Overview: Implementing Security Deploying J2EE Applications Objectives 13-2 Course Application Scenario: Deploy to Oracle Application Server 10g 13-3 Deploying J2EE Applications 13-4 Planning Deployment 13-6 Packaging Business-Tier Components 13-8 Creating Web Application Archives 13-9 Creating EJB Archives Creating Application Archives Working with Deployment Descriptors JSR-88 Deployment Plans Creating a JSR-88 Deployment Plan Working with JSR-88 Deployment Plans Deploying with the Oracle Application Server 10g Control Console Deploying with JSR-88 Ant Tasks Deploying with admin_client.jar Deploying with Oracle JDeveloper Managing Shared Application Libraries Summary Practice 13 Overview: Deploying the SRDemo Course Application Appendix A: Practices Appendix B: Practice Solutions Index ix

10