Oracle Developer Day

Size: px

Start display at page:

Download "Oracle Developer Day"

Christopher Strickland
5 years ago
Views:

1 Oracle Developer Day Sponsored by: Track # 1: Session #2 Web Services Speaker 1

Agenda Developing Web services Architecture, development and interoperability Quality of service Security, reliability, management QoS deployment options Best Practices Web Services and Management

2 Agenda Developing Web services Architecture, development and interoperability Quality of service Security, reliability, management QoS deployment options Best Practices Web Services and Management Basic Web Services UDDI Registry Points to description WSDL Finds Service Points to service Describes Service Web Web Service Client (J2EE, (J2EE,.NET, PL/SQL PL/SQL ) ) SOAP Invokes with XML Messages Web Web Service (J2EE, (J2EE, PL/SQL, PL/SQL,.NET,C/C++,.NET,C/C++, Legacy Legacy ) ) 2

Enterprise Web Services Standards + QoS + Processes Web Service

Transactions Web Service Policy Web Service Security Web Service

4 Standards Java APIs for XML JAXP JAXB JAX-RPC SAAJ JAXR EJB 2.

Data Binding Java API for XML Remote Procedure Call SOAP API for

3 Enterprise Web Services Standards + QoS + Processes Web Service Distributed Management Web Service Orchestration Web Service Transactions Web Service Policy Web Service Security Web Service Reliable Messaging TPM, Mainframe, Legacy Sys Applications SOA Tools JAX-*: JAX-B, JAX-P, JAX-RPC, WS-I I Basic Profile SOAP, WSDL, UDDI Databases B2B Partners J2EE 1.4 Standards Java APIs for XML JAXP JAXB JAX-RPC SAAJ JAXR EJB 2.1 JSR 109 Description Java API for XML Parsing Java API for XML Data Binding Java API for XML Remote Procedure Call SOAP API for Attachments in Java Java API for XML Registries Stateless Session EJB Endpoint Model Web Services Deployment Model 3

4 JAX-RPC Core WS standard for Java Enables portability across containers (different vendors implemented differently before JAX-RPC for J2EE 1.4) Standard class and interface structure for client and server Various hook-points for custom serializers, custom handlers, attachments Tools must provide abstractions to handle service as set of classes Navigator structure for quick location Wizard support for declarative definition Web Services Interoperability Web Services Interoperability Develops profiles Suggests best practices Provides testing tools Runtime and tools uptake Oracle JDeveloper analysis OracleAS compliance 4

5 Beyond J2EE 1.4 Description JSR- 181 EJB 3.0 WSIF Web Services Metadata for the Java TM Platform Simplifying EJB development Web Services Invocation Framework JSR-181 Annotations Support a code-driven version of the bottom up use case : create web services implicitly by annotating the source code @SOAPBinding 5

6 EJB 3.0 as Web Service Annotate business interface Deploys to Java EE container(s) as a Web Service package buslogic; import java.rmi.remoteexception; import java.rmi.remote; import javax.jws.webmethod; import public interface CustomerFacade public Integer getcreditrating(string ssn); } Web Services Invocation Framework (WSIF) Describe any artifact with WSDL, invoke with native protocols No overhead from SOAP processing Focus on performance and transactionality Used extensively by BPEL 6

7 Two Development Use Cases Top Down Contract Driven And Bottom Up Bottom Up Top Down Service Implementation WSDL WSDL e.g. EJB/Java Class to WSDL Service Implementation e.g. WSDL contract as the interface & message description D E M O N S T R A T I O N Publishing with Annotations Bottom-Up Web Service 7

8 Agenda Developing Web services Architecture, development and interoperability Quality of service Security, reliability, management QoS deployment options Best Practices Web Services and Management Quality of Service Requirements Reliability Are my messages actually being delivered? Guaranteed delivery, ordered delivery WS-ReliableExchange standard in OASIS Security Are my messages secure? Authentication, encryption and signing WS-Security standard in OASIS Management How is my system handling messages? Configuration, logging, monitoring WS for Distributed Management (WSDM) standard in OASIS 8

9 Web Services Reliability Sender Receiver Application Layer Application Layer SOAP Node With Reliable Messaging Msg Ack SOAP Node With Reliable Messaging At least once semantics At most once semantics Guaranteed message ordering Exactly once semantics Web Services Security SOAP Message Client Security Server Security SOAP Message JAX-RPC Client Sign Check Signature Encrypt Decrypt Add Auth Token Chck Auth Token* Chck Auth Token Add Auth Token* Decrypt Encrypt Check Signature Sign JAX-RPC Service Endpoint SOAP Message Keystore Transport HTTP, JMS Keystore SOAP Message Authentication XML Digital Signatures - User name/password token XML Encryption - X.509 token - SAML token for SSO Applications 9

10 Administration of Web Services Auditing, Logging, Reliability and WS-Security Monitoring and Performance Analysis D E M O N S T R A T I O N Administration of Web Services 10

11 Web Services Management Managing and deploying operational policies across applications and Web services Layer best-practice security and management across all services No modifications to applications or services Support WS-* standards Can secure/manage Web services implemented in heterogeneous languages and environments Oracle Web Services Manager: Components BUILD Policies ENFORCE Policies MONITOR Policies Policy Gateway Policy Manager Policy Agents Web Service Monitor Web Services 11

Policy Enforcement and Visibility: Monitoring Provide real-time visibility into Web Service interactions Automatic issue resolution by dynamically updating policies Alerts about

for Oracle Application Server services only Designed to be seamless with Oracle Application Server Integration in JDeveloper and Application Server Control Independent Web Service

12 Policy Enforcement and Visibility: Monitoring Provide real-time visibility into Web Service interactions Automatic issue resolution by dynamically updating policies Alerts about anomalies Enforce policies Validate compliance with IT best practices Deployment Options QoS Oracle Application Server Administrator manages policies service by service Configuration for Oracle Application Server services only Designed to be seamless with Oracle Application Server Integration in JDeveloper and Application Server Control Independent Web Service Manager Framework manage groups of policies for groups of services Configuration for any service J2EE (Oracle, IBM, BEA ),.NET, C, Perl, PHP Designed to scale to large scale heterogeneous deployments 12

13 D E M O N S T R A T I O N Web Services Management Agenda Developing Web services Architecture, development and interoperability Quality of service Security, reliability, management QoS deployment options Best Practices Web Services and Management 13

14 Best Practices Web Services Build coarse grained Web services not fine grained Design to an interface, not an implementation Interoperability Target conformity to WS-I Avoid language dependent types to maximize interoperability (e.g. Java collections) Provide sample clients to jumpstart clients Know when to use Web services Often native protocols are all that is available or may be faster Use WSIF bindings for native protocols and BPEL Best Practices Web Services Management Development Use native container for development and testing Security, Reliability, Management Deployment If working homogeneously use Oracle Application Server If working in a heterogeneous environment strongly consider a Web Services Management framework 14

Join Over 3,000,000 Developers! Free Technical Advice Free Software Downloads www.oracle.com/technology/products/jdev otn.oracle.com/tech/.oracle.com/tech/webservices otn.oracle.com/tech/java otn.

15 Join Over 3,000,000 Developers! Free Technical Advice Free Software Downloads otn.oracle.com/tech/.oracle.com/tech/webservices otn.oracle.com/tech/java otn.oracle.com/.oracle.com/bpel Learn Oracle From Oracle Instructor led training Self-Study Online learning Oracle Certification Oracle ilearning Oracle Tutor oracle.com/education 15

16 Q & A Q U E S T I O N S A N S W E R S Oracle Developer Day Sponsored by: 16

J2EE APIs and Emerging Web Services Standards

J2EE APIs and Emerging Web Services Standards Session #4 Speaker Title Corporation 1 Agenda J2EE APIs for Web Services J2EE JAX-RPC APIs for Web Services JAX-RPC Emerging Web Services Standards Introduction