Building Web Services with Java Making Sense of XML, SOAP, WSDL, and UDDI

by Graham, Steve; Davis, Doug; Simeonov, Simeon; Daniels, Glen; Brittenham, Peter; Nakamura, Yuichi; Fremantle, Paul; Koenig, Dieter; Zentner, Claudia

• ISBN13: 9780672326417
• ISBN10: 0672326418
• Edition: 2nd
• Format: Paperback
• Copyright: 2004-06-28
• Publisher: Sams Publishing

Summary

Sams has assembled a team of experts in web services to provide you with a detailed reference guide on XML, SOAP, USDL and UDDI.Building Web Services with Javais in its second edition and it includes the newest standards for managing security, transactions, reliability and interoperability in web service applications. Go beyond the explanations of standards and find out how and why these tools were designed as they are and focus on practical examples of each concept. Download your source code from the publisher's website and work with a running example of a full enterprise solution. Learn from the best inBuilding Web Services with Java.

Author Biography

Steve Graham is a senior technical staff member in IBM's Systems Group, a member of the IBM Academy of Technology, and an architect in the On Demand Architecture group Doug Davis is an architect in the IBM Emerging Technology Organization Simeon Simeonov is a principal at Polaris Venture Partners in Boston Glen Daniels is the standards strategist for Sonic Software Peter Brittenham is a senior technical staff member in the IBM Emerging Technology group and is an architect in IBM's Autonomic Computing initiative Yuichi Nakamura leads the XML & Security group at the IBM Tokyo Research Laboratory Paul Fremantle is a senior technical staff member in IBM's Software division Dieter Konig is a software architect for workflow systems at the IBM Germany Development Laboratory Claudia Zentner is a software architect for the WebSphere Business Integration at the IBM Development Laboratory in Germany

Table of Contents

Introduction	1	(8)
I Web Services Basics
1 Web Services Overview and Service-Oriented Architectures	9	(22)
What Is a Web Service?	10	(3)
Business Perspective	11	(1)
Technical Perspective	12	(1)
Service-Oriented Architectures	13	(4)
Why Is SOA So Important?	15	(2)
SOA and Web Services: Related but Distinct	17	(1)
Trends in E-Business	17	(1)
Why Do We Need Web Services?	18	(4)
Scoping the Problem	18	(1)
Core Technologies	19	(1)
Industry Dynamics	20	(1)
What Makes a Good Web Service?	21	(1)
The Web Service Opportunity	22	(3)
Application Integration	22	(2)
B2B	24	(1)
Integration of Human Interaction with Systems: B2C	24	(1)
Justifying Web Services	25	(1)
Web Services Interoperability Stack	26	(4)
Transport Layer	27	(1)
Messaging Layer	28	(1)
Description Layer	28	(1)
Quality of Experience Layer	29	(1)
Compositional Layer	29	(1)
Understanding the Web Services Interoperability Stack	29	(1)
Summary	30	(1)
2 XML Primer	31	(80)
Document- Versus Data-Centric XML	32	(3)
Document-Centric XML	32	(1)
Data-Centric XML	33	(1)
Document Lifetime	34	(1)
XML Instances	35	(9)
Document Prolog	35	(1)
Elements	36	(2)
Attributes	38	(4)
Character Data	42	(2)
A Simpler Purchase Order	44	(1)
XML Namespaces	44	(7)
Namespace Mechanism	46	(1)
Namespace Syntax	47	(2)
Namespace-Prefixed Attributes	49	(2)
XML Schemas	51	(27)
Well-Formedness and Validity	51	(1)
XML Schema Basics	52	(2)
Associating Schemas with Documents	54	(1)
Simple Types	55	(4)
Complex types	59	(3)
The Purchase Order Schema	62	(1)
Global Versus Local Elements and Attributes	63	(1)
Basic Schema Reusability	64	(6)
Advanced Schema Reusability	70	(8)
There's More	78	(1)
Processing XML	78	(29)
Basic Operations	78	(3)
Data-Oriented XML Processing	81	(4)
SAX-Based checkInvoice ( )	85	(6)
DOM-Based checklnvoice ( )	91	(5)
JAXB-Based checkInvoice ( )	96	(9)
Testing the Code	105	(2)
Summary	107	(2)
Resources	109	(2)
3 The SOAP Protocol	111	(56)
Simple Object Access Protocol (SOAP)	112	(2)
What Is SOAP, Really?	113	(1)
Doing Business with SkatesTown	114	(3)
Inventory Check Web Service	117	(3)
Choosing a Web Service Engine	117	(1)
Service Provider View	117	(1)
Deploying the Service	118	(1)
The Client View	118	(2)
A Closer Look at SOAP	120	(1)
The Structure of the Spec	120	(1)
The SOAP Messaging Framework	121	(5)
Vertical Extensibility	123	(2)
The mustUnderstand Flag	125	(1)
SOAP Modules	126	(1)
SOAP Intermediaries	126	(6)
The Need for Intermediaries	127	(1)
Transparent and Explicit Intermediaries	128	(1)
Intermediaries in SOAP	129	(1)
Forwarding and Active Intermediaries	130	(1)
Rules for Intermediaries and Headers	130	(2)
The SOAP Body	132	(1)
The SOAP Processing Model	132	(1)
Versioning in SOAP	133	(1)
Processing Headers and Bodies	134	(1)
Faults: Error Handling in SOAP	134	(7)
Structure of a Fault	135	(3)
Using Headers in Faults	138	(3)
Objects in XML: The SOAP Data Model	141	(7)
Object Graphs	141	(2)
The SOAP Encoding	143	(5)
The SOAP RPC Conventions	148	(3)
out and inout Parameters	149	(2)
XML, Straight Up: Document-Style SOAP	151	(1)
When to Use Which Style	151	(1)
The Transport Binding Framework	152	(8)
Features and Properties	153	(4)
The HTTP Binding	157	(1)
The SOAPAction Feature	158	(1)
The Web Method Feature	159	(1)
Using SOAP to Send Binary Data	160	(3)
SOAP with Attachments and DIME	160	(2)
PASWA, MTOM, and XOP	162	(1)
Small-Scale SOAP, Big-Time SOAP	163	(2)
Summary	165	(1)
Resources	165	(2)
4 Describing Web Services	167	(66)
Why Service Descriptions?	167	(1)
Role of Service Description in a Service-Oriented Architecture	168	(1)
Well-Defined Service	169	(2)
Functional Description	169	(1)
Nonfunctional Description	170	(1)
Description Summary	170	(1)
History of Interface Definition Languages (IDLs)	171	(2)
Web Services Description Language (WSDL)	173	(40)
WSDL Information Model	174	(2)
Parts of the WSDL Language	176	(3)
Structure of a WSDL Document: Definitions 178
PortType	179	(1)
Operation	180	(1)
Message	180	(1)
Part	181	(3)
Types	184	(2)
Binding	186	(4)
Port	190	(1)
Service	191	(1)
Documentation	192	(1)
Import	192	(3)
Exploring More WSDL Features	195	(6)
Transmission Primitives	201	(4)
Rounding Out WSDL Bindings	205	(5)
WSDL Extension Mechanism	210	(3)
A Sketch of How WSDL Maps to Java	213	(1)
Nonfunctional Descriptions in WSDL	214	(9)
Policies	214	(2)
WS-Policy	216	(4)
Policy Assertions	220	(1)
Policy Attachments	220	(3)
Standardizing WSDL: W3C and WSDL 2.0	223	(7)
What's New in WSDL 2.0	223	(1)
Overview of WSDL 2.0	224	(5)
A Complete WSDL 2.0 Description	229	(1)
Summary	230	(1)
Resources	231	(2)
5 Implementing Web Services with Apache Axis	233	(74)
A Brief History of Axis	234	(2)
JAX-RPC, JAXM/SAAJ, and JAXB	234	(1)
Current State of the Project	235	(1)
Axis Architecture	236	(7)
Handlers and Chains: Concepts	236	(2)
Server-Side Message Processing	238	(2)
Client-Side Message Processing	240	(2)
The MessageContext and Its Many Uses	242	(1)
The Message APIs and SAAJ	243	(3)
A Message by Any Other Name	244	(1)
Accessing the SOAP Envelope, Bodies, and Headers	244	(2)
The Axis Client APIs	246	(12)
The Service Object	246	(1)
Using the Call Object for Dynamic Invocation	247	(6)
Using Stubs and WSDL2Java	253	(3)
Holders: Mapping inout/out Parameters to Java	256	(2)
Web Service Deployment Descriptor (WSDD)	258	(5)
Handler Declarations	259	(1)
Chain Definitions	260	(1)
Transports	261	(1)
Type Mappings	262	(1)
Building Services	263	(12)
Instant Deployment: JWS	263	(1)
WSDD for Services	264	(3)
Deploying Services and the AdminClient	267	(1)
Getting at the MessageContext	268	(2)
Service Lifecycle and Scopes	270	(2)
Sessions on the Server Side	272	(1)
Using WSDL2Java to Generate Services	272	(1)
Generating WSDL for Your Services	273	(2)
A Guide to Web Service Styles	275	(4)
RPC Style	275	(1)
Wrapped Style	276	(1)
Document Style	277	(1)
Message Style	278	(1)
From XML to Java and Back Again: The Axis Type-Mapping System	279	(9)
Registering Mappings	279	(2)
Default Type Mappings	281	(2)
Default Type Mapping and XML/Java Naming	283	(1)
Custom Serializers and Deserializers	284	(2)
Using the MessageElement XML/Object APIs	286	(2)
When Things Go Wrong: Faults and Exceptions	288	(3)
The AxisFault Class	288	(1)
Using Typed Exceptions	289	(2)
Axis as an Intermediary	291	(1)
Reasons for Roles	291	(1)
How to Write a Handler	292	(5)
The SkatesTown EmailHandler	292	(3)
The SkatesTown GlobalHandler	295	(2)
Built-in Security	297	(1)
Using the Authentication/Authorization Handlers	297	(1)
Understanding Axis Transports	298	(2)
Client Transports	298	(1)
Server Transports	299	(1)
Transports Included with Axis	299	(1)
Custom Transports	300	(1)
No API Is an Island: Axis and Its Environment	300	(1)
Commons-Discovery and Obtaining Resources	300	(1)
Logging Infrastructure	300	(1)
Security Providers	301	(1)
Compilers	301	(1)
Development/Debugging Tools	301	(3)
The happyAxis Page	301	(1)
Configuring Logging	301	(2)
Using tcpmon and SOAPMonitor	303	(1)
Axis Futures: A Quick Tour	304	(1)
Participating in the Axis Community	305	(1)
Summary	305	(1)
Resources	306	(1)
6 Discovering Web Services	307	(40)
What Is Service Discovery?	307	(3)
Role of Service Discovery in a Service-Oriented Architecture	307	(1)
Service Discovery Mechanisms	308	(1)
Service Discovery at Design Time and Runtime	309	(1)
Scenario Updates	310	(1)
UDDI (Universal Description, Discovery, and Integration)	310	(33)
UDDI Datatypes	311	(14)
Using a UDDI Registry	325	(10)
What's New in UDDI Version 3.0	335	(2)
Using WSDL with UDDI	337	(6)
Other Service Discovery Methods	343	(1)
WS-Inspection	343	(1)
WS-ServiceGroup	343	(1)
Summary	344	(1)
Resources	344	(3)
II Enterprise Web Services
7 Web Services and J2EE	347	(36)
J2EE Overview	347	(7)
Containers	348	(1)
Enterprise JavaBeans	348	(2)
Roles: Development, Assembly, and Deployment	350	(1)
Benefits of Using Web Services with J2EE	351	(2)
J2EE Versions	353	(1)
Using EJBs from Axis	354	(21)
The Entity Bean	355	(3)
The Session Bean	358	(2)
The Deployment Unit	360	(1)
Exposing the EJBs via Axis	361	(2)
WebSphere Deployment Process	363	(1)
EJB Deployment	363	(4)
Configuring Axis to Invoke the SkatesService Session Bean	367	(8)
EJB Wrap-Up	375	(1)
Using JSR 109: Implementing Enterprise Web Services	375	(6)
Step 1: Creating the WSDL File	376	(1)
Step 2: Creating the Deployment Descriptors	376	(2)
Step 3: Assembling the Application Files	378	(1)
Step 4: Enabling the EAR File for Web Services	379	(1)
Step 5: Deploying the Application	379	(1)
JSR109 Client Code	380	(1)
JSR109 Wrap-Up	381	(1)
Summary	381	(1)
Resources	381	(2)
8 Web Services and Stateful Resources	383	(62)
Web Services and State	384	(1)
Aspects of State	384	(1)
SkatesTown Scenario	385	(1)
WS-Resources	385	(2)
Stateful Resources	387	(8)
Cardinality ofWeb Services and WS-Resources	387	(1)
Role ofWS-Addressing	388	(3)
Implied Resource Pattern	391	(4)
Modeling Resource Properties	395	(17)
What Is a Resource Property?	395	(4)
WS-Resource Factory	399	(1)
Resource Property Operations	399	(13)
Rounding Out the POPortType	412	(1)
Using Notifications	412	(22)
Base Notification Concepts and Roles	413	(2)
Subscribing for Notification	415	(4)
The Subscription WS-Resource	419	(1)
Topics and Topic Spaces	420	(8)
Resource Properties of a Notification Producer	428	(1)
The Other Notification Producer Operation: GetCurrentMessage	429	(1)
Notification of Value Changes on Resource Properties	430	(2)
Notification Consumers	432	(1)
Notification Brokers	433	(1)
Resource Lifetime	434	(7)
Immediate Termination	435	(1)
Scheduled Termination	436	(3)
Initializing Termination Time	439	(1)
Notification ofWS-Resource Termination	440	(1)
Other WS-Resource Framework Specifications	441	(2)
WS-RenewableReferences	442	(1)
WS-ServiceGroup	442	(1)
WS-BaseFaults	442	(1)
Summary	443	(2)
9 Securing Web Services	445	(62)
Example Scenario	445	(1)
Security Basics	446	(10)
Security Requirements	446	(1)
Cryptography	447	(3)
Authentication	450	(1)
Security Protocols	451	(1)
Security Infrastructures	452	(3)
Security Domains	455	(1)
Web Services Security	456	(5)
Security Model for Web Services	456	(2)
Web Services Security Specifications	458	(1)
Extended SkatesTown Security Scenario	459	(2)
WS-Security	461	(13)
Digital Signatures	462	(4)
Encryption	466	(5)
Security Tokens	471	(3)
WS-Trust	474	(7)
Public Key Infrastructure	474	(2)
Kerberos	476	(3)
XML Key Management Specification	479	(2)
WS-SecurityPolicy	481	(1)
WS-SecureConversation	482	(10)
WS-SecureConversation Overview	483	(3)
The SSL Protocol	486	(1)
Negotiation Protocol Example	487	(5)
WS-Federation	492	(3)
Enterprise Security	495	(5)
J2EE Security	495	(1)
Authorization in J2EE	496	(2)
J2EE and Web Services Security	498	(2)
Security Services	500	(2)
Summary	502	(1)
Resources	502	(5)
10 Web Services Reliable Messaging	507	(1)
Background of the Web Services Reliable Messaging Protocol (WS-RM)	507	(3)
The WS-RM Specification	509	(1)
WS-RM Processing Model	510	(7)
Client-Side Processing	511	(2)
Server-Side Processing	513	(4)
Sequence Faults	517	(1)
Policy Assertions	518	(3)
Specversion Assertion	519	(1)
DeliveryAssurance Policy	519	(1)
SequenceExpiration Policy	519	(1)
InactivityTimeout Assertion	520	(1)
BaseRetransmissionlnterval Assertion	520	(1)
Acknowledgement Interval Assertion	520	(1)
SequenceRef Element	520	(1)
Flaws and Other Thoughts on the WS-RM Spec	521	(1)
Putting WS-RM into Use	521	(2)
Summary	523	(1)
Resources	523	(2)
11 Web Services Transactions	525	(1)
Web Services Coordination and Transaction (WS-C/Tx)	525	(2)
Transactions: A Brief Introduction	527	(2)
WS-Coordination	529	(7)
The CoordinationContext	530	(1)
The CreateCoordinationContext Operation	530	(2)
The Register Operation	532	(4)
WS-Coordination Fault Codes	536	(1)
WS-Transaction: Atomic Transactions	536	(8)
WS-AT Operations	537	(1)
Commit and Rollback	537	(1)
AT Protocols	538	(1)
Two-Phase Commit Protocols	538	(1)
Committing the Transaction	539	(4)
Transaction Flow Overview	543	(1)
Business Activity Protocol	544	(1)
Reliable Delivery and Security	545	(1)
Summary	546	(1)
Resources	547	(2)
12 Orchestrating Web Services	549	(1)
Why Are We Composing Web Services?	549	(3)
Two-Level Programming Model	550	(1)
Stateless and Stateful Web Services	550	(1)
Evolution of Business Process Languages	550	(1)
SkatesTown Requirements	551	(1)
Business Process Execution Language for Web Services	552	(36)
Design Goals	553	(1)
External Interface of a Process	554	(4)
Overall Structure of a Process	558	(3)
Basic and Structured Activities	561	(1)
Process Lifecycle and Related Activities	562	(1)
Partner Links	563	(2)
Properties and Correlation Sets	565	(3)
Invoking Web Services and Providing Web Services	568	(4)
Data Handling and Related Activities	572	(3)
More Basic Activities: wait, empty	575	(1)
Flows	576	(4)
More Structured Activities: sequence, while, switch, scope	580	(2)
Fault Handling	582	(3)
Compensation Handling	585	(2)
Event Handling	587	(1)
SkatesTown: Putting It All Together	588	(13)
Advanced Considerations	601	(3)
Abstract Processes	601	(3)
Language Extensibility	604	(1)
Summary	604	(1)
Resources	605	(4)
III Web Services in the Real World
13 Web Services Interoperability	609	(122)
Web Services Interoperability Organization	610	(1)
WS-I Basic Profile 1.0	611	(37)
Common Requirements for SOAP Envelope, WSDL Document, and XML Schema Document	619	(1)
Understanding the WSDL Document Structure	620	(2)
Importing XML Schema and WSDL Documents	622	(1)
Defining the Service Interface	623	(3)
Defining a SOAP Binding	626	(11)
Publishing a Service Description	637	(1)
HTTP and SOAP Message Content	638	(3)
Web Service Security	641	(1)
WS-I Conformance Claims	641	(2)
Service Provider, Requestor, and Registry Requirements	643	(2)
Summary of Basic Profile 1.0 Requirements	645	(3)
Future WS-I Profiles	648	(13)
Basic Profile 1.1	648	(1)
Simple SOAP Binding Profile 1.0	649	(1)
Attachments Profile 1.0	650	(10)
Basic Security Profile 1.0	660	(1)
WS-I Sample Applications	661	(2)
WS-I Test Tools	663	(8)
Monitor Overview	663	(2)
Monitor Configuration File	665	(1)
Message Log File	665	(2)
Analyzer Overview	667	(1)
Analyzer Configuration File	667	(1)
Test Assertion Document	668	(1)
Profile Configuration Report	668	(3)
Summary	671	(1)
Resources	672	(1)
14 Web Services Pragmatics	673	(1)
Enterprise Adoption of Web Services	674	(9)
Time-Based Adoption Challenges	676	(1)
Inherent Limitations of SOA	677	(2)
Top-Down Versus Bottom-Up	679	(3)
Policies and Processes	682	(1)
Putting Web Services in Production	683	(13)
Web Services Technology Map	685	(6)
System Architectures for Web Services	691	(5)
Features, Capabilities, and Approaches	696	(19)
Tools and Platforms	696	(1)
SOA Testing	697	(2)
Deployment and Provisioning	699	(1)
Business Process Automation Using Web Services	700	(8)
Operations	708	(7)
Summary	715	(1)
Resources	715	(2)
15 Epilogue: Web Services Futures	717	(1)
A Roadmap for Web Services	717	(3)
Age of Invention (Base SOAP, WSDL, UDDI)	717	(1)
Age of Development (from Hype to Delivery)	718	(1)
Age of Mainstream Acceptance (Web Services Become Boring)	719	(1)
Future Trends in Web Services	720	(9)
Short-Term Trends and Issues	720	(3)
Medium-Term Trends	723	(4)
Longer-Term Trends	727	(2)
Summary	729	(2)
A Glossary	731	(24)
Index	755