Showing posts with label Web Services. Show all posts
Web Services Concepts
Web Services Concepts
Objectives
nAfter completing this lesson, you should be
able to do the following:
qUnderstand power of web services
qUnderstand WSDL
qUnderstand SOAP
Introducing Web Services
nWeb services are:
qSelf-describing business
functions
qAccessible from any Web-connected
device using:
nMessaging Protocols – The
messaging protocols are standards-based and are platform independent. These enable one service to call another
one - SOAP over HTTP, JMS
nProgramming standards – The
underlying programming standards help create services that conform to a
predefined structure. This means it is
possible to figure out what the service does in a platform and language independent
way. - WSDL
nNetwork registration – The
services can be searched in a common way - UDDI
Web Services
Communication Flow
Web Services
Communication Flow Example
nTo understand how web services work, lets
take an example.
n
nScenario – A Citibank customer wants to pay
his Vodafone phone bill through the bank’s website.
n
nSolution
1.First, the Vodafone IT team would create a
service that allows one to pay their bills through a web service. This service may be implemented in any way
they please, using ADF, POJO, PL/SQL etc.
However, the service needs to expose its interface according to WSDL
specification
2.In order to facilitate clients to be able to
find this service, the Vodafone team publishes this WSDL to a web services
directory. The directory is capable of
storing different kind of information like the request and response messages,
version, publisher details, type of service etc. All this information is structured in a
standard way so that interested parties can search or discover them. This common format is the UDDI
3.Citibank IT team, which is developing their
website, and want to provide this service to their customer, finds the service
developed by Vodafone team. This
completes the setup.
4.When a customer chooses to pay his bill, the
required information is sent to the Vodafone Bill Payment web service. This communication is done using a SOAP
message. As SOAP can work over HTTP,
which is the most used protocol on the Internet, this invocation can utilize
the power of Internet
5.The Vodafone Bill Payment service
acknowledges success or failure of the transaction
●
nThe above example brings out the interplay
of:
nMessaging protocols - SOAP
nProgramming standards – Interface
based on WSDL standard
nNetwork registration –
Information stored as per UDDI standard
n
nNote: A Public Registry, while a
really cool concept, didn’t really take off as expected. However, the concept itself found takers at
organization level and typically an organization that takes its SOA seriously
will have a registry setup.
Describing a web service
Lets understand what
it takes to describe a web service. If
we can appreciate these, then understanding why WSDL looks like it does would
be that much simpler.
•Requirement 1: We need to tell
what is the location of this web service
•Requirement 2: We
need to tell what is the language the web service speaks
•Requirement 3: We need to tell
what functions or operations this
web service is providing
•Requirement 4: We need to tell
what input and output parameters the service takes
•Requirement 5: We need to tell the
datatype of these parameters
WSDL Enters….
nA
WSDL document is just a simple XML document.
nIt
contains set of definitions to describe a web service.
nWSDL
document fulfills all the above requirements
qRequirement
1 – Where is the service
hosted
n<service>
qRequirement
2 – What protocol to use to
talk to the service
n<binding>
qRequirement
3 – What are the operations
n<portType>
qRequirement
4 – What are the parameters
n<message>
qRequirement
5 – What is the datatype of the messages
n<type>
Introducing WSDL
nWSDL stands for Web Services Description
Language
nWSDL is written in XML
nWSDL is used to describe Web services
nWSDL is also used to locate Web services
WSDL is a W3C recommendation
WSDL Document Structure
WSDL Ports
nThe <portType> element is the most important WSDL element.
nIt describes a web service, the operations that can be performed, and the messages that are involved.
nThe <portType> element can be compared to a function library (or a module, or a class) in a traditional programming language
Operation
Types
One-way operation type
The operation can receive a message but will not return
a response
Request-response
operation type
The operation can receive a request and will return a
response
nNow, a web service operation can take only one parameter. But I want to pass multiple parameters……what do I need to do
WSDL
Messages
nThe <message>
element defines the data elements of an operation.
nEach message can consist of one or more
parts. The parts can be compared to the parameters of a function call in a
traditional programming language.
nI want to pass a complex object to my web service……what do I need to do
WSDL
Types
nThe <types> element defines the data
type that are used by the web service.
nFor maximum platform neutrality, WSDL uses
XML Schema syntax to define data types.
nI want my web service to be accessible to a HTTP client, as
well as to a RMI client and a SOAP client……what
do I need to do
WSDL
Bindings
nThe <binding>
element defines the message format and protocol details for each port.
nbinding
qname – can be anything
qType – points to port
nsoap:binding
qStyle – rpc or document
qTransport – soap protocol to use
noperation
qDefines each operation the the service exposes
WSDL
Bindings
nThe <binding> element provides specific details on how a portType operation will actually be transmitted over
the wire.
nThe
bindings can be made available via multiple transports, including HTTP GET,
HTTP POST, or SOAP.
nThe
bindings provide concrete information on what protocol is being used to
transfer portType operations.
nFor
SOAP protocol, the binding is <soap:binding>, and the transport is SOAP messages on top
of HTTP protocol.
qWSDL 1.1 includes built-in extensions for SOAP 1.1. This
enables you to specify SOAPspecific details, including SOAP headers,
SOAP encoding styles, and the SOAPAction HTTP header. The SOAP extension
elements include:
nsoap:binding
nsoap:operation
nsoap:body
nYou
can specify multiple bindings for a single portType.
WSDL
Services
nThe <services>
element connects the binding to an actual URL where the service is available.
A service element
describes a Web service as a collection of port elements. A port element
defines a specific network address for a binding. The sample below shows the
basic outline of a service that supplies an address for a SOAP binding:
<service
name="ServiceName">
<port name="PortName" binding="BindingRef">
<soap:address location="URL"/>
</port>
</service>
The ServiceName sets the name of the
service. The PortName sets the name of the
specific address. The BindingRef
refers to the name of a binding element. The BindingRef must be namespace
qualified if the targetNamespace for the WSDL
definitions element is not the same as the default namespace.
Complete WSDL Example
SOAP
nSOAP
stands for Simple Object Access Protocol
nSOAP
is a communication protocol
nSOAP
is for communication between applications
nSOAP
is a format for sending messages
nSOAP
communicates via Internet
nSOAP
is platform independent
nSOAP
is language independent
nSOAP
is based on XML
nRelies
on other Application Layer protocols (most notably Remote Procedure Call (RPC)
and HTTP) for message negotiation and transmission.
nSOAP
is a W3C recommendation
SOAP Message Structure
SOAP Request
SOAP Response
UDDI
nUDDI stands for Universal Description,
Discovery and Integration.
nThe UDDI specification enables businesses to
quickly, easily, and dynamically find and transact with one another.
nUDDI enables a business to
1.Describe its business and its services,
2.Discover other businesses that offer desired services
3.Integrate with these other businesses.
UDDI Data Model
The information that makes up a UDDI registry consists
of instances of four core data structure types, the businessEntity,
the businessService, the bindingTemplate and the tModel, together with instances of additional data structure
types defined in the UDDI API Schema.
Each of the core data structure types is used to express
specific types of data, arranged in the relationship shown
Why do we need a
registry
nThe ability to register, discover, and govern
Web services is an essential requirement for any Service Oriented Architecture
(SOA) implementation.
nA highly available environment contains
multiple application server nodes, multiple instances, and multiple processes.
Regardless of where the services will be deployed they have to be flexible
enough to run anywhere without requiring changes to the actual process
implementation.
nThis need may not be fully appreciated in the
early stages of an SOA roll-out when dealing with a small number of services.
nHowever, large organizations will typically
need to support a large number of Web services, and as the number of services
deployed grows to dozens or hundreds, centralized facilities for access and
control of service metadata and artifacts becomes critical.
A service registry provides these
capabilities and is a key infrastructural component and cornerstone for SOA
deployments
Registry and UDDI
UDDI defines a framework
to enable the establishment of service registries to provide distributed
directory service to the producers and consumers of Web services. It includes a
common set of SOAP-based APIs to support registration and advertisement of Web
services by service producers, and to facilitate the searching and lookup of
Web services by service consumers.
Resources
nPeople
and companies develop web services. Some
of them are free too J
qLinks to lotsa web services on one page ! http://www.actionscript.org/forums/showthread.php3?t=70742
qSoftwares
http://www.oracle.com/technology/software/products/jdev/htdocs/soft10135.html
please download the one which has JDK tooWeb Services Interview Questions
What are the different application integration styles?
There are a number of different integration styles like
1. Shared database
2. batch file transfer
3. Invoking remote procedures (RPC)
4. Exchanging asynchronous messages over a message oriented middle-ware (MOM).
What are the different styles of Web Services used for application integration?
SOAP WS and RESTful Web Service
What are the differences between both SOAP WS and RESTful WS?
- The SOAP WS supports both remote procedure call (i.e. RPC) and message oriented middle-ware (MOM) integration styles. The Restful Web Service supports only RPC integration style.
- The SOAP WS is transport protocol neutral. Supports multiple protocols like HTTP(S), Messaging, TCP, UDP SMTP, etc. The REST is transport protocol specific. Supports only HTTP or HTTPS protocols.
- The SOAP WS permits only XML data format.You define operations, which tunnels through the POST. The focus is on accessing the named operations and exposing the application logic as a service. The REST permits multiple data formats like XML, JSON data, text, HTML, etc. Any browser can be used because the REST approach uses the standard GET, PUT, POST, and DELETE Web operations. The focus is on accessing the named resources and exposing the data as a service. REST has AJAX support. It can use the XMLHttpRequest object. Good for stateless CRUD (Create, Read, Update, and Delete) operations.
GET - read()
POST - create()
PUT - update()
DELETE - delete()
- SOAP based reads cannot be cached. REST based reads can be cached. Performs and scales better.
- SOAP WS supports both SSL security and WS-security, which adds some enterprise security features like maintaining security right up to the point where it is needed, maintaining identities through intermediaries and not just point to point SSL only, securing different parts of the message with different security algorithms, etc. The REST supports only point-to-point SSL security. The SSL encrypts the whole message, whether all of it is sensitive or not.
- The SOAP has comprehensive support for both ACID based transaction management for short-lived transactions and compensation based transaction management for long-running transactions. It also supports two-phase commit across distributed resources. The REST supports transactions, but it is neither ACID compliant nor can provide two phase commit across distributed transactional resources as it is limited by its HTTP protocol.
- The SOAP has success or retry logic built in and provides end-to-end reliability even through SOAP intermediaries. REST does not have a standard messaging system, and expects clients invoking the service to deal with communication failures by retrying.
How would you decide what style of Web Service to use? SOAP WS or REST?
In general, a REST based Web service is preferred due to its simplicity, performance, scalability, and support for multiple data formats. SOAP is favored where service requires comprehensive support for security andtransactional reliability.
The answer really depends on the functional and non-functional requirements. Asking the questions listed below will help you choose.
- Does the service expose data or business logic? (REST is a better choice for exposing data, SOAP WS might be a better choice for logic).Do the consumers and the service providers require a formal contract? (SOAP has a formal contract via WSDL)
- Do we need to support multiple data formats?
- Do we need to make AJAX calls? (REST can use the XMLHttpRequest)
- Is the call synchronous or asynchronous?
- Is the call stateful or stateless? (REST is suited for statless CRUD operations)
- What level of security is required? (SOAP WS has better support for security)
- What level of transaction support is required? (SOAP WS has better support for transaction management)
- Do we have limited band width? (SOAP is more verbose)
- What’s best for the developers who will build clients for the service? (REST is easier to implement, test, and maintain)
What tools do you use to test your Web Services?
SoapUI tool for SOAP WS and the Firefox "poster" plugin for RESTFul services.
What is the difference between SOA and a Web service?
SOA is a software design principle and an architectural pattern for implementing loosely coupled, reusable and coarse grained services. You can implement SOA using any protocols such as HTTP, HTTPS, JMS, SMTP, RMI, IIOP (i.e. EJB uses IIOP), RPC etc. Messages can be in XML or Data Transfer Objects (DTOs).
Web service is an implementation technology and one of the ways to implement SOA. You can build SOA based applications without using Web services – for example by using other traditional technologies like Java RMI, EJB, JMS based messaging, etc. But what Web services offer is the standards based and platform-independent service via HTTP, XML, SOAP, WSDL and UDDI, thus allowing interoperability between heterogeneous technologies such as J2EE and .NET.
Why not favor traditional style middle-ware such as RPC, CORBA, RMI and DCOM as opposed to Web services?
The traditional middle-wares tightly couple connections to the applications and it can break if you make any modification to your application. Tightly coupled applications are hard to maintain and less reusable. Generally do not support heterogeneity. Do not work across Internet. Can be more expensive and hard to use.
Web Services support loosely coupled connections. The interface of the Web service provides a layer of abstraction between the client and the server. The loosely coupled applications reduce the cost of maintenance and increases re-usability. Web Services present a new form of middle-ware based on XML and Web. Web services are language and platform independent. You can develop a Web service using any language and deploy it on to any platform, from small device to the largest supercomputer. Web service uses language neutral protocols such as HTTP and communicates between disparate applications by passing XML messages to each other via a Web API. Do work across internet, less expensive and easier to use.
What are the different approaches to developing a SOAP based Web service?
2 approaches.
- The contract-first approach, where you define the contract first with XSD and WSDL and the generate the Java classes from the contract.
- The contract-last approach where you define the Java classes first and then generate the contract, which is the WSDL file from the Java classes.
Note: The WSDL describes all operations that the service provides, locations of the endpoints (i.e.e where the services can be invoked), and simple and complex elements that can be passed in requests and responses.
What are the pros and cons of each approach, and which approach would you prefer?
Contract-first Web service
PROS:
- Clients are decoupled from the server, hence the implementation logic can be revised on the server without affecting the clients.
- Developers can work simultaneously on client and server side based on the contract both agreed on.
- You have full control over how the request and response messages are constructed -- for example, should "status" go as an element or as an attribute? The contract clearly defines it. You can change OXM (i.e. Object to XML Mapping) libraries without having to worry if the "status" would be generated as "attribute" instead of an element. Potentially, even Web service frameworks and tool kits can be changed as well from say Apache Axis to Apache CXF, etc
CONS:
- More upfront work is involved in setting up the XSDs and WSDLs. There are tools like XML Spy, Oxygen XML, etc to make things easier. The object models need to be written as well.
- Developers need to learn XSDs and WSDLs in addition to just knowing Java.
Contract-last Web service
PROS:
- Developers don't have to learn anything related to XSDs, WSDLs, and SOAP. The services are created quickly by exposing the existing service logic with frameworks/tool sets. For example, via IDE based wizards, etc.
- The learning curve and development time can be smaller compared to the Contract-first Web service.
CONS:
- The development time can be shorter to initially develop it, but what about the on going maintenance and extension time if the contract changes or new elements need to be added? In this approach, since the clients and servers are more tightly coupled, the future changes may break the client contract and affect all clients or require the services to be properly versioned and managed.
- In this approach, The XML payloads cannot be controlled. This means changing your OXM libraries could cause something that used to be an element to become an attribute with the change of the OXM.
So, which approach will you choose?
The best practice is to use "contract-first", and here is the link that explains this much better with examples --> contract-first versus contract-last web services In a nutshell, the contract-last is more fragile than the "contract-first". You will have to decide what is most appropriate based on your requirements, tool sets you use, etc.