A practical guideline to the effective usage of web Service technologies

Building Secure and Reliable web Services

2 days Hands-on course contents.

What you will learn :

Core technologies for web services

• High level overview of XML, WSDL, SOAP and UDDI
  
• Demystying the underlying core technologies
  
• The classic service provider
  
• The service interface
  
• The service consumer

Web Services Demo

• Web services in action
  
• A web services client and server demo
  
• Quote service demonstation
  
• Interaction between XML, WSDL, and SOAP
  
• Connecting to an Internet web service on the web
  
• Demo using XMPSpy, BizTalk, Eclipse, Java...

Web Services Standards and Organisations

• The web services standards space
  
• The standards body and their associated recommendations
  
• Overview of OASIS, W3C, WS-I, OMG and Java Community

XML Technologies

• XML elements and attributes with sample documents
  
• XML namespaces
  
• XML Schema Definition (XSD)
  
• Fundamentals of Extensible Stylesheet Language (XSLT)

SOAP - Simple Object Access Protocol

• Structure of a SOAP message
• Sample SOAP requests and responses
  
• Using SOAP as a protocol
  
• Using SOAP as an envelope

UDDI - Universal Discover Description and Integration

• UDDI technologies, API, and acceptance
  
• Alternatives to UDDI
  
• The green, white and yellow books
  
• tModels explained

WSDL - Web Services Description Language

• Understanding the logical interface
  
• Types, messages, operations and portTypes
  
• Different kinds of WSDL operations
  
• Example of One-way, Request-response
  
• Example of solicit-response and notification
  
• Understanding the physical interface
  
• Example of service ports and bindings
  
• Interface modelling using WSDL

The Wrapped-Doc-Literal Style for WSDL

• Discussion of different message encodings and styles
  
• Historical evolution and the on-the-wire format
  
• Why doc-literal is preferred over RPC-encoded
  
• Why using the wrapped form?
  
• Design guidelines for wrapped-doc-literal approach.

Best Practise in WSDL Design

• Advice on how to design interoperable WSDL
  
• Making WSDL easy to understand and re-use
  
• Operation Granularity
  
• Naming: portTypes, services, ports and bindings
  
• Client access
  
• WSDL-first design

Web Services Security

• Why security is so important for web services
  
• Challenges (and solutions) for web services security
  
• Presentation and discussion
  
• Use of secure transports (HTTPS) and WSSE headers
  
• Security related standards

Web Services Transactions

• Why transactions are so important
  
• Some things cannot be rolled back...
  
• Different semantics: long-lived, short-lived
  
• ACID, business process modelling, compensation
  
• Requirements for a web-services transaction monitor
  
• Transactions-related standards

Web Services and Service Oriented Architecture

• What are services, and what benefits do they offer?
  
• Service-oriented architecture
  
• Why web services are ideally suited for SOA
  
• service-oriented architecture
  
• SOA and the "Enterprise service bus"
  
• SOA without web services

Principles of service oriented design

• The principles of good service oriented design
  
• Loose-coupling, formal contracts, abstraction
  
• Examples of re-use, composition, autonomy
  
• Stateless and discovery
  
• Conclusions: how "service-oriented" is your actual architecture?