DEV 371 Visual Studio 2005 WSE 3 0

DEV 371 Visual Studio 2005 + WSE 3. 0 Web Services开发的强大平台 杨滔 Developer Evangelist 合作开发部 微软有限公司

Web Service Architecture - Web Service全貌 Security Management Reliability Business Process Transactions … 应用和 应用基础设施 Metadata Connected Applications 基础 … 传输层 Messaging XML HTTP TCP SMTP

Fundamentals Secure, Reliable, Transacted As of 2/2004 WS-I BP 1. 0 Security Roadmap SRT Web Services Whitepaper Reliable Messaging Roadmap WS-Coordination WS-Transaction WS-Atomic. Transaction WS-Business. Activity WS-Reliable. Messaging WS-Federation WS-Trust WS-Security Addendum WS-Security Profile for Tokens WS-Federation Active Requestor Profile WS-Security SOAP Message Security WS-Security Username Token Profile WS-Security X. 509 Certificate Token Profile Security WS-Security Interoperability Transactions Whitepapers Reliability WS-I formed Evolve and Extend WS-Security Kerberos Binding UDDI 2. 0 WSDL UDDI 3. 0 WS-Policy 1. 1 WS-Policy. Attachments 1. 1 WS-Policy. Assertions 1. 1 WS-Inspection WS-Policy. Attachments WS-Policy. Assertions WS-Security. Policy SOAP 1. 2 SOAP Messages with Attachments 2000 2001 WS-Referral WS-Routing DIME 2002 WS-Addressing WS-Attachments 2003 Messaging SOAP 1. 1 WS-Discovery WS-Metadata. Exchange WS-Eventing MTOM 2004 Metadata UDDI 1. 0 2005

. NET Web Services ASMX是. NET Framework对基本Web Service 的实现 支持基本的Web Service 没有实现 WS-* 规范 WSE是对. NET Framework的扩展 可以扩展ASMX的行为 支持部分WS-*规范 Indigo是新一代的Web service的实现 对WS-*, messaging, queuing, transactions 提供统一的编程模型

Web Services Architecture ASP. NET Web Services Security Management Reliability Business Process Transactions … 应用和 应用基础设施 Metadata Connected Applications 基础 … 传输层 Messaging XML HTTP TCP SMTP

Web Services Architecture Web Services Enhancements 3. 0 Security Management Reliability Business Process Transactions … 应用和 应用基础设施 Metadata Connected Applications 基础 … 传输层 Messaging XML HTTP TCP SMTP

WSE 3. 0和VS 2005的集成 WSE 3. 0 具集成到Visual Studio 2005开发环 境中 扩展了ASMX 的编程模型 Alternative transports e. g. TCP Hosting environments e. g. Console apps Messaging APIs remain Soap. Client, Soap. Service

VS 2005 和 WSE 3. 0集成

Web Services Architecture Web Services Enhancements 3. 0 Security Management Reliability Business Process Transactions … 应用和 应用基础设施 Metadata Connected Applications 基础 … 传输层 Messaging XML HTTP TCP SMTP

安全性是WSE的首要目标 支持如下WS-*规范 WS-Security WS-Trust WS-Secure. Conversation

Turnkey Security Scenario Username. Over. Certificate Internet Intranet Username/Password for Authentication Confidential, signed request using a client key protected with the server certificate Confidential, signed response using the supplied client key Application Server Authenticate username/ Password

Turnkey Security Scenarios 基于业界的最佳实践 Each scenario represented as an assertion Username. Over. Certificate Annonymous. Over. Certificate Username. Over. Transport Kerberos Mutual. Certificate

Security with WSE 3. 0

Web Services Architecture Web Services Enhancements 3. 0 Security Management Reliability Business Process Transactions … 应用和 应用基础设施 Metadata Connected Applications 基础 … 传输层 Messaging XML HTTP TCP SMTP

WSE 3. 0支持WS-Policy Describes requirements for incoming and outgoing messages as policy assertions Limitations of Policy in WSE 2. 0 Request and response messages secured separately Made to think in low level terms Policy files are simplified Simplifies security through the turnkey security assertions New object model for policy // Set the Client. Policy onto the proxy service. Proxy. Set. Policy("Client. Policy");

Service Orientation Tenets 1. 2. 3. 4. Services are autonomous Boundaries are explicit Services share schemas not types Compatibility based on policy

Security Policy Security is a deployment consideration Policy • Only accept Username/Password for authentication, signed and encrypted with server certificate • Only callers who are in the Manager role Policy • Only accept Kerberos authentication

Policy Pipeline Architecture Policy assertions transform the message Policy describes an input pipeline C u s to m T raci n g Application Processing C u s to m … and an output Pipeline T raci n g S e c u r i ty Output Soap Message S e c u r i ty Input Soap Message

Security with Policy

Web Services Architecture Web Services Enhancements 3. 0 Security Management Reliability Business Process Transactions … 应用和 应用基础设施 Metadata Connected Applications 基础 … 传输层 Messaging XML HTTP TCP SMTP

MTOM Message Transmission Optimization Mechanism (MTOM) MTOM取代了对DIME & WS-Attachments 益处 和 WS-Security 可以保护传输的数据 简化的变成模型 减少消息的大小 Security Simplify Reduction

Web Services Architecture Web Services Enhancements 3. 0 Security Management Reliability Business Process Transactions … 应用和 应用基础设施 Metadata Connected Applications 基础 … 传输层 Messaging XML HTTP TCP SMTP

Extend ASMX programming Model Example: ASMX Web Service over TCP public class Stock. Service System. Web. Services. Web. Service { [Web. Method] public Stock. Quote[] Stock. Quote. Request([string[] symbols) { } } static void Main(string[] args) { Uri to = new Uri( "soap. tcp: //Stock. Service/Stock. Quote"); Endpoint. Reference EPR = new Endpoint. Reference(to); Soap. Receivers. Add (EPR, typeof (Stock. Service)); }

Web Service via TCP

Web Services Architecture Indigo Web Services Security Management Reliability Business Process Transactions … Metadata Connected Applications & Application Infrastructure Foundation Messaging XML HTTP TCP SMTP … Transports

天下归一 ASMX . NET Remoting 互操作性 跨平台 . NET 与. NET之间通 讯 分布式事务… 消息队列 对WS-*规范的支持 Enterprise Services System. Messaging WSE

通向Indigo Leveraging Existing Microsoft Investments Side-by-side coexistence with existing distributed technologies Seamless communication with applications built on existing technologies Smooth upgrade of existing code to Indigo ASMX ES WSE 3

http: //msdn. microsoft. com/webservices http: //www. microsoft. com/china/msdn/