Week 10-11 SOAP PDF
Week 10-11 SOAP PDF
Inter-systems Communications
Web Service and Middleware (SOAP)
Who Was First?
Advantages
– Open, text-based standards
– Modular approach
– Inexpensive to implement (relatively)
– Reduce the cost of enterprise application integration
– Incremental implementation
Accenture
– Live Information Models
– stock traders access real-time information from a single terminal
The rules:
– method name -> first level element in the SOAP Body
– arguments identifiers -> second level elements
– arguments values -> third level elements
– arguments types -> attribute xsi:type
WSDL (Web Service Description Language)
• Web services are self-describing
• Description is written in WSDL, an XML-based language through which a web service conveys to
applications the methods that the service provides and how those methods are accessed
• WSDL is meant to be read by applications (not humans)
Fundamentally a client uses the WSDL to create the stub or to dynamically decode messages.
– WSIL and UDDI are the standard way to search Web Services. (Discovery stack)
– WSIL is the decentralized approach.
– Fundamentally a WSIL document contains a directory of the Web Services deployed on a server.
– It is analogous to the index.html document for web pages.
– In the future, specific crawlers will browse the Internet looking for WSIL documents, like Google does
today for web pages.
WS-Security
Describes how to attach signature and encryption headers to SOAP messages; how to attach security tokens such
as X.509 certificates and Kerberos tickets.
WS-Policy
Describes the capabilities and constraints of the security and business policies on intermediaries and endpoints
WS-Privacy
Model for how web services and requesters state privacy preferences and organizational privacy practice
statements
WS-Secure Conversation
Manage and authenticate message exchanges between parties, including security context exchange and
establishing and deriving session keys
WS-Federation
Manage and broker trust relationships in a heterogeneous federated environment, including support for
federated identities.
WS-Authorization
Manage authorization data and authorization policy.