1. INFOSYS 290, Section 3, Fall 2005, Web Services: Concepts, Design and Implementation Adam Blum ablum@good.com Lecture 2: Describe and Invoke - SOAP and WSDL

2. Today’s Content SOAP Comparison with other distributed technologies –Corba –DCOM –Java RMI WSDL Web services survey –SalesForce sforce –Siebel –Xmethods examples

3. Service Broker Basic SOAP Message Exchange Service Consumer Service Provider http transport SOAP message WSDL describing service SOAP message http transport client service registry find publish DESCRIBE INVOKE SOAP SenderSOAP Receiver SOAP Sender SOAP Receiver

4. SOAP Body SOAP Message SOAP header SOAP envelope Header block Header data Header data Header data Body child element

5. Sample SOAP Message 1 2001-06-22T14:00:00-05:00 Pick up Mary at school at 2pm

6. Conversational Message Exchange buyer seller message broker RFQ QuoteResponse Award

7. Conversational SOAP Message Exchange: A Request – 101 http://bigco.example.org/RFQ 17 – http://bigco.example.org/RFQ – SanDisk – SecureDigital memory – 1GB – – 100 –

8. Conversational Exchange: A Response – http://bigco.example.org/RFQ env:mustUnderstand=“true”>101 2470 1 17 – http://bigco.example.org/RFQ – KingMax – SecureDigital memory – 1GB – 9000KB/s – Memories Unlimited – KM-SD1000 – 100 –

9. Conversational Exchange: Completion – 2470 1 17 – http://bigco.example.org/RFQ – KM-SD1000 – 50 –

10. Remote Procedure Calls To invoke RPC –Address of target SOAP node –Method name –Identities and values of arguments –Separation of arguments identifying target of RPC versus data Plus values of properties for binding (e.g. GET, POST) –Optional header data

11. RPC Invocation 5 http://shippingservice.org/transactionhttp://shippingservice.org/encoding http://shippingservice.org http://bigco.example.org/RFQ 2470 17 500g

12. RPC Result 5 http://shippingservice.org/transactionhttp://paymentservice.org/encoding <s:shipOrderResponse env:encodingStyle=“http://www.w3.org/2003/05/soap- encoding”http://www.w3.org/2003/05/soap- encoding xmlns:rpc=“http://www.w3.org/2003/05/soap-rpc” xmlns:s=“http://shippingservice.org”>http://shippingservice.org s:status confirmed $20.00

13. SOAP Faults Place faults inside env:Body elements In single env:Fault env:Node identifies node which generated fault –Absence indicates “ultimate recipient” env:Code –env:Value –env:Subcode env:Reason –env:Text env:Detail –Application specific

14. SOAP Fault Example – – env:Sender – » rpc:BadArguments – – Processing error – Chyba zpracování – Unknown destination 999 – –

15. SOAP Faults on MustUnderstand env:MustUnderstand Header not understood En-tête non compris

16. SOAP Processing Model SOAP messages are sent from one sender node passing through zero or more intermediaries Three roles –next: each SOAP intermediary or end destination must act in this role –none: SOAP nodes must not act in this role –ultimateReceiver: destination acts in this role Header blocks targeted to specific roles using Role attribute If mustUnderstand=“true” SOAP receiver must understand or generate SOAP fault Header blocks processed by intermediaries are generally removed before forwarding –Override with relay attribute –Allows targeting of headers to specific intermediaries (but mustUnderstand would then generally be turned off)

17. SOAP Extensibility in Practice http://bigco.example.org/buyer – dhw6weiurU982ndya73jdVBGt2567...d79HID7ghd652ad2 – http://f123.com/sq14 10 –...

18. SOAP Processing: Header Blocks, MustUnderstand and Relay –......... – –......

19. SOAP Bindings specify how SOAP messages may be passed from one SOAP node to another using an underlying protocol provides a serialized representation of the message provides a mechanism to support features needed by SOAP applications (security, reliability, etc...) describes the features it provides

20. SOAP HTTP Binding Example POST /Reservations HTTP/1.1 Host: marketplace.example.org Content-Type: application/soap+xml; charset="utf-8" Content-Length: nnnn –

21. SOAP SMTP Binding Example From: buyer@bigco.example.orgbuyer@bigco.example.org To: rfqs@marketplace.example.org Subject: RFQ: Memory purchase Date: Thursday, September 9 2004 Message-Id: Content-Type: application/soap+xml

22. SOAP Remoting Architecture Server object implementation application level Client application code Server skeleton XML unmarshaller Client stub XML marshaller TCP/IP socket remoting architecture level wire protocol level http protocol http server http server body envelope header

23. So What’s Different? Open format usable from any platform Easy to understand and debug Stable supported interfaces Standards enable “expose service once” and have multiple consumers –versus typical point to point integration efforts Easy for intermediaries to process messages and add value –Routing and delivery –security –management and monitoring –schema and service design – acceleration Easy to extend with additional semantics

24. CORBA Server object implementation application level Client application code Server skeleton Corba runtime Implementation repository Client stub Corba runtime Implementation repository ORB TCP/IP socket

25. CORBA Dynamic Invocation Server object implementation application level Client application code Server skeleton Corba runtime Implementation repository Client stub Corba runtime Implementation repository ORB TCP/IP socket binding method Remoting architecture level Wire protocol level

26. CORBA Scalability –Stateful programming model - –Shared activation + Performance –CORBA is only intermediary until object obtained (allowing direct client-server interaction) + –Binary transport + Activation –Sophisticated four policy activation methods + State Management –Provides state management with a connection-oriented protocol + Garbage Collection –Implemented on per ORB vendor basis –No concept of distributed memory management Security –Just uses SSL -

27. DCOM and DCE RPC Server object implementation application level Client application- code Server stub COM runtime Client proxy COM runtime SCM RPC channel binding method Remoting architecture level Wire protocol level registry OXID Resolver Ping client/server

28. DCOM Object Creation Server object implementation application level Client application- code Server stub COM runtime Client proxy COM runtime SCM RPC channel binding method Remoting architecture level Wire protocol level registry OXID Resolver Ping client/server

29. DCOM Object Invocation Server object implementation application level Client application- code Server stub COM runtime Client proxy COM runtime SCM RPC channel binding method Remoting architecture level Wire protocol level registry OXID Resolver Ping client/server

30. DCOM Comparison Scalability –Not scalable due to garbage collection and connection overhead –All clients involved in call required to send pings to servers at two minute intervals Performance –Many roundtrips to activate and use remote object Activation –Client obtains reference to remote object’s class object through local SCM from remote SCM –Client creates instances of remote objects through its proxy State Management –DCOM goal: location transparency –Makes it very difficult to have a stateless model User interface IFaces Iteration IFaces Garbage Collection –After three ping fails, server cleans up resources for objects owned by remote client Security –Provides authentication, authorization and identity –Many authentication methods

31. Java RMI Server object implementation application level Client application- code Server skeleton Remote Reference Layer Client stub Remote Reference Layer Transport Layer binding method remoting architecture level wire protocol level Transport Layer TCP/IP Socket RMI Registry

32. JRMP signature (JRMI) version protocol SingleOpProtocol StreamProtocol MultiplexProtocol Message (serialized arguments based On Java’s Object Serialization Protocol)

33. RMI Comparison Scalabilitiy –Good overall –Registry could be bottleneck Performance –Fairly high –Use from Java applets in browser cause conversion to http –expensive Activation –Stub can be download over the network –Lazy activation and selection of specific server instances –Allows automatic instantiation of objects based on methods faulting and the fault resolution process instantiating the remote object State Management –Provides both connection-oriented and connectionless protocols (good!) Garbage Collection –Distributed reference counting (like CORBA, DCOM) –Reference to remote objects is considered lease on object, which must be periodically renewed Security –Strong security –Must have security credentials to perform dynamic class loading

34. SOAP Comparison Scalability –Very scaleable especially over http if request/response model is maintained Performance –Degraded by XML overhead –But if you’re interoping between architectures anyway that overhead isn’t unreasonable Activation –Beyond SOAP’s scope State Management –Stateless if over http Garbage Collection –Beyond scope Security –https/SSL - not ideal for routability of course –WS-Security Other Disadvantages –No true standard serialization method –Multiple copies of objects transported Other Advantages –Encouragement of loose coupling (both physical and interface) –Protection of apps from changes in standards –Truly vendor-agnostic

35. Web Services Description Language Provides a model and an XML format for the “contract” of a web service Separates abstract service description from both concrete network protocol and message format Describes data types used in messages Messages are defined as aggregation of typed parts Operations are message exchange patterns supported by the web service PortTypes are named collections of operations

36. WSDL Components Types– a container for data type definitions using some type system (such as XSD). Message– an abstract, typed definition of the data being communicated. Operation– an abstract description of an action supported by the service. Port Type–an abstract set of operations supported by one or more endpoints. Binding– a concrete protocol and data format specification for a particular port type Port– a single endpoint defined as a combination of a binding and a network address. Service– a collection of related endpoints.

37. WSDL Specification types message operation porttype operation binding service port

38. An Example - WSDL Types

39. WSDL Operations

40. WSDL Bindings, Services, Ports My first service

41. Import for Types

42. WSDL Binding maps the abstract service functionality to a specific network protocol and message format defines: –the communication protocol to use –how service interactions are accomplished using this protocol –the address to communicate with Three bindings are defined in the WSDL spec: –SOAP binding – HTTP binding – SMTP binding

43. WSDL Binding Example: One-way Over SMTP – – – – – –

44. Request-Response RPC Over HTTP – – – > My first service

45. Web Services Client Tools –MindReef –AboveAll

46. Web Services Survey XMethods examples –Focus on “informational web services” http://pocketodds.com Business APIs –SalesForce –Siebel CRM OnDemand –PayPal

47. Course Project Goal –Build “web service consuming” client applications from desktops and mobile devices Requirements –Use an “informational” web service Has QCUD (Query, Create, Update and Delete operations) –Consume web service from AboveAll or Visual Studio for desktop –Consume WS from GoodAccess Web Services or Visual Studio from mobile device –Optionally write or enhance a backend web service Possibly as a “proxy web service” layer on top of original web service Only if previous steps are achieved –Demo to class –Write up as three page paper including: architecture and UI design Team size –Two people per project Proposal –Due next week: September 8, 2005

48. References Specs –SOAP Specification, http://www.w3.org/TR/soap/ –WSDL Specification, http://www.w3.org/TR/wsdlhttp://www.w3.org/TR/wsdl –UDDI Specification, http://www.uddi.org/specification.html http://www.uddi.org/specification.html Tools –Visual Studio, http://microsoft.com/vstudiohttp://microsoft.com/vstudio –Microsoft Web Services Enhancements http://msdn.microsoft.com/webservices/building/wse/default.aspx

49. How To Reach Me ablum@good.com 408-396-5490 Office hours Thursday at 4pm web-services@sims.berkeley.edu