Java Web Service详解：SOAP、WSDL与安全集成

需积分: 0 124 浏览量更新于2024-07-28 收藏 2.88MB PDF 举报

《Java Web服务》是由David Chappell和Tyler Jewell合著，由O'Reilly出版社于2002年3月首次发行的一本专业书籍。该书的ISBN号码为0-596-00269-6，共276页，深入探讨了如何在Java环境中利用SOAP进行远程方法调用和消息传递，以及如何通过WSDL描述服务接口，理解他人服务的架构。作者还讲解了如何利用UDDI（统一描述、发现与集成）来在全球范围内发布和查找服务，包括本地和全球注册表。书中特别关注安全性和互操作性问题，介绍了Java企业技术如EJB（Enterprise JavaBeans）的整合，以及JAXM（Java API for XML Messaging）和JAX-RPC（Java API for XML Remote Procedure Calls）的相关工作。此外，还涉及了Java Web服务与微软.NET服务的集成，展示了它们在分布式计算模型中的应用，特别是服务导向架构（SOA）和对等计算模型（P2P）的融合。第一部分从介绍什么是Web服务开始，讨论了推动其采用的因素，以及本书将重点关注的Java Web服务在J2EE（Java 2 Enterprise Edition）环境中的应用。接着，作者明确了本书的讨论范围，涵盖了从概念到实践的全方位内容。第二部分深入探讨了复合计算模型，其中核心是服务导向架构，它强调服务的独立性和复用性。此外，书中还介绍了P2P模型如何通过分散和协作的方式支持Web服务的运作。 SOAP（简单对象访问协议）作为互操作性的基石，在第三章中得到了详尽的阐述，它是Web服务通信的基础，允许不同系统之间交换结构化数据。《Java Web服务》是一本实用的指南，不仅适合开发人员和架构师了解并掌握基于Java的Web服务技术，也适合对分布式系统、服务架构和跨平台通信感兴趣的读者。通过阅读这本书，读者能够全面理解和应用这些技术，以构建可扩展、安全且高效的网络应用程序。

Java Web Services

machines, they became important for business-to-business communications. Today, fax

machines are nearly ubiquitous—you can fax in your pizza order. We expect to see the same

trend in web services. They will be used first for internal business communications before

they become part of everyday life. In all cases, though—the rapid adoption of the Web, the

slower adoption of the fax machine, and the current adoption of web services—the same

factor has enabled the paradigm shift. That factor is a standards communications mechanism.

Whether the standard be the phone line and FAX protocols, the TCP/IP stack and HTTP

(together with the phone line and modem protocols), or the web service protocols, standards

have been, and continue to be, the key factor in enabling the acceptance of new technologies.

1.2.1 Industry Drivers

Many tangible drivers make web services technology attractive, both from a business and a

technical perspective. Classic Enterprise Application Integration (EAI) problems require

applications to integrate and interoperate. Even within a particular business unit, there exist

islands of IT infrastructure. For example, a Customer Relationship Management (CRM)

system may have no knowledge of how to communicate with anything outside of its own

application suite. It may need to communicate with a third-party Sales Order system so it can

know about new customers as soon as they place their first order.

Corporate acquisitions and mergers are also an issue. Entire parallel business application

infrastructures have to be synchronized or merged. Business partners such as suppliers and

buyers need to collaborate across corporate boundaries.

These EAI and B2B problems exist in abundance and are increasing exponentially. Every new

deployed system becomes a legacy system, and any future integration with that system is an

EAI or B2B problem. As the growth of integration problems and projects accelerates over the

next couple of years, the standards-based approach that web services offer makes adopting

web services technology an attractive option for companies that need to cost-effectively

accomplish seamless system integration.

1.2.2 Lessons Learned from Recent History

Some industry analysts claim that the web service model is causing a paradigm shift that will

change the way distributed computing is done forever. Others say that this model is just a fad

that will go away soon. Currently, web services is still very much in the hype phase. Drawing

parallels to other new technologies can teach us important lessons.

Other distributed-computing models have had an opportunity to garner universal acceptance

and adoption, yet they have not. While these models offer great technical advantages for

solving real problems, none have achieved the massive widespread adoption that their

proponents had hoped for. This is largely due to their proprietary nature and the inevitable

vendor lock-in. Though COM/DCOM had a widespread following, it could not permeate an

enterprise because it was limited to Microsoft platforms. CORBA was controlled by the

OMG, a neutral standards body. However, software availability was a problem. There were

really only two robust vendor implementations: Iona and Visigenic.

Forcing middleware infrastructure down the throats of other departments and business

partners is not easy. Both CORBA and DCOM required that a piece of the vendor-supplied

middleware be installed at every node of the system. You can't always force a business

Java Web Services

partner to install a piece of your software at their site for them to be able to participate in

business transactions with your systems. Even within the four walls of an organization,

agreeing upon and rolling out an enterprise-wide middleware solution is a huge, concerted

effort. CORBA implementations eventually achieved cross-vendor interoperability, but by

then it was too late; the wave had already passed.

Crossing corporate boundaries in a secure, reliable fashion is key. If you go back only as far

as 1996 to 1997, you would have seen every trade magazine talking about a world of

distributed CORBA objects happily floating around on the Internet, discovering one another

dynamically and communicating through firewalls. Standards were proposed for firewall

communications, and IIOP was going to be adopted by all major firewall vendors as a

recognizable protocol. It just never happened—partly due to the aforementioned adoption

problems and partly due to widespread adoption and general acceptance of HTTP as a

firewall-friendly protocol.

1.2.3 Why Web Services, and Why Now?

What is so different about web services, and why are they poised for success, whereas other

preceding technologies have failed to achieve widespread adoption? The answer lies in the

challenge that every organization faces today: to create a homogeneous environment while

still leveraging its core abilities and existing applications. IT needs a simple, platform-neutral

way of communicating between applications.

For starters, XML is ideal for representing data. IT developers have had exposure to XML for

a few years and they understand what it's good for. Even though the average IT developer

hasn't yet become a walking XML parser, by now most developers understand the concepts

behind XML and how it can be used.

Also, the base technologies of SOAP, WSDL, and UDDI are not themselves very exciting;

they are just new dressings for the same old distributed-computing model. What draws people

to them is the promise of what they enable. Finally, we have a platform-neutral

communication protocol that provides interoperability and platform independence. A

bidirectional conversation may occur between a Biztalk server and a set of hand-rolled Perl

scripts. The Perl scripts may be simultaneously involved in a conversation with a set of

applications held together by a J2EE-based application server or a message-oriented

middleware (MOM) infrastructure. The minimum requirement is that each participant in the

multiparty collaboration knows how to construct and deconstruct SOAP messages and how to

send and receive HTTP transmissions.

The heavy involvement of the Microsoft camp and the J2EE camp in web services is good for

everyone. It's advantage is not about .NET versus J2EE or .NET versus SunONE; it's about

the fact that you no longer have to let that debate or choice get in the way of achieving

interoperability across the enterprise. The programming languages and associated

infrastructure of each respective camp will continue to coexist and will remain "camps" for a

long time.

1.2.3.1 Low barrier to entry means grass-roots adoption

The widespread adoption of web services can be predicted by drawing parallels to the CGI

phenomenon discussed earlier.

Java Web Services

Similar conditions exist today. The straightforward approach that SOAP takes—XML

messages sent over HTTP—means that anyone can grab Apache SOAP and start exchanging

data with the application owned by the guy down the hall. There isn't any overly complex,

mysterious alchemy involving a strategic architecture group that takes two years to figure out.

A corporate-wide infrastructure adoption shift doesn't need to occur for a company to start

working and benefiting from web services; companies can be selective about how and where

they adopt these technologies to get the best return on their investment.

1.3 Web Services in a J2EE Environment

A common thread found throughout various web services specifications is the regular

reference to web services "platforms" and "providers." A web services platform is an

environment used to host one or more web services. It includes one or more SOAP servers,

zero or more UDDI business registries, the security and transaction services used by the web

services hosted on it, and other infrastructure provisions. A web services provider is generally

considered a vendor-supplied piece of middleware infrastructure, such as an ORB, an

application server, or a MOM. The provider may fully supply a platform, or it may deliver

some base J2EE functionality plus some web service add-ons.

Web services are a new approach for exposing and advertising enterprise services that are

hosted on a platform. These platform services still have a variety of enterprise requirements,

such as security, transactions, pooling, clustering, and batch processing. Web services do not

provide these infrastructure capabilities, but expose the services that do. J2EE and .NET still

play an important role in the enterprise as platform definitions: they define the behavior of

core capabilities that every software program needs internally. Web services, however, offer a

standard way to expose the services deployed onto a platform.

An important question is, "What is being web service enabled?" If the answer is the business

systems that run the enterprise, then the role of J2EE in the whole web services picture

becomes abundantly clear. The core requirements of a web service enabled ecosystem are the

same as they have always been—scalability, reliability, security, etc. Web services provide

new ways of wrapping things at the edge of the enterprise, but if you poke your head through

the web services hype, the requirements for holding together your core systems don't change

that much. The implemention of the web services backbone should still be based on the J2EE

architecture. Web services and J2EE come together at multiple points. The use of each J2EE

component depends on the application's requirements, just as it did prior to the advent of web

services. If the nature of the web service is for lightweight, quick-and-dirty processing, then

use a web container and implement the web service directly as a JSP. If the solution requires

a distributed component model, then use EJB. If the solution requires a highly distributed,

highly reliable, loosely coupled environment, then use JMS. Naturally, any of these

combinations is allowed and encouraged, as illustrated in Figure 1-4.

Java Web Services

Figure 1-4. SOA based on a J2EE backbone

1.4 What This Book Discusses

This is a book on Java and web services. It is for developers who need to develop client- or

server-side programs that either use web services or are exposed as web services. Web

services are built on XML and have specifications that focus on the XML nature of the

technology. These specifications do not discuss how these technologies might be bound to a

particular programming language such as Java. As a result, a plethora of industry technologies

that facilitate Java/web service integration have been proposed.

This book introduces the basics of SOAP, WSDL, and UDDI, and then discusses some of the

different Java technologies available for using each of these platforms within a Java program.

The technologies we've chosen range from open source initiatives, such as the Apache

project, to big-ticket commercial packages. One reason for touching on so many different

packages is that the web services story is still developing; a number of important standards are

still in flux, and vendors are providing their own solutions to these problems. Of course, this

book looks at the standards efforts designed to consolidate and standardize how Java

programs interface with web services. Most notably, this book discusses Java/XML

technologies, such as JAXR, JAX-RPC, and JAXM, and how they can be used in a web

services environment.

These standards are still works in progress; their status may be clarified by the time we write a

second edition. In the meantime, we thought it was important (and even critical) to show you

how things look. Just be aware that changes are certain between now and the time when these

standards are finalized and actual products are released.

Additionally, for developers who are producing J2EE applications, this book discusses

different technologies that are being proposed to web service-enable standard J2EE

applications. This book discusses how a web service facade can integrate with a J2EE

infrastructure. It also introduces some of the standards efforts proposed for solidifying this

work.

剩余248页未读，继续阅读

Kilin_Gao

粉丝: 3
资源: 26

Java Web Service详解：SOAP、WSDL与安全集成

Java Web Service技术解析与应用

C++调用Java Web Service 实战指南

Java Web Service开发指南：Axis, XFire, CXF实战

java调用java web service

SOAP.rar_SOAP java_Web Service SOAP_java soap_java web service_s

JAVA Web service 开发

java web service 教程

java web service 入门

Java Web Service总结

Java Web Service教程

最新资源