Implementing Security in web services developed using JAX WS approach

Hi ,
Our Organization has developed a Web service using JAX WS approach exposing EJB as EndPoint .This wsdl file URL is only used by third party companies that register with us (Means i want to say that this wsdl url is not world wide accessable).
Now we need to implement security for this service , please tell me what is the appropiate for doing so ??
Thank you in advance .
Waiting for your valuable suggestions .
Please help .

You can implement message level security in many ways. Some of the ways are
SAML
Digital certificates etc
You may have to work with your vendor specific API to achieve this. Take a look at one case study.
http://www.ibm.com/developerworks/webservices/library/ws-security.html
You will find lot of articles on google to implement message level security however my recommendation would be to get in touch with security expert.

Similar Messages

XML Parser Error while creating Web service Client using JAX RPC

hello evryone,
Im facing XML Parser Error while creating web service client using JAX RPC. Im using Net Beans IDE for development purpose. I have wrote configuration file for client. Now i want to create Client stub. However i dont know how to do this in Net Beans. So i tried to do it from Command promt using command :
wscompile -gen:client -d build -classpath build config-wsdl.xml
here im getting Error:
error parsing configuration file: XML parsing error: com.sun.xml.rpc.sp.ParseException:10: XML declaration may only begin entities
Please help me out.
Many thanks in advance,
Kacee

Can i use the client generated using jdeveloper 11g to import into the oracle forms 10g, i.e., form builder 10g. Currently this is the version we have in our office.

Security-role for java web services developed using j-developer 10.1.2.1

I have developed a java web service using j-developer 10.1.2.1, I have deployed this web service to oracle 10g (10.1.2.1) application server successfully. Now I want to add security-role to my web service deployment descriptor so that only a group of users that belong to a group can access my web service.
How can I do this? Can any one please let me know.
Thanks,
SC.

Hi.
I suspect you have a proxy server between your localhost and the
drive-app1.drivesoftwaresolutions.com
Probably in Jdev that proxy is setup nicely in Tools->Preferences->Web Browser and Proxy
But maybe your OC4J container running BPEL on localhost does not have that proxy setup.
You need to add startup parameters to the JVM. In 10.1.3 you can do this via the "AS Control" administration pages (there is a link on the SOA suite welcome page). Go to JVM, click on the container and switch to the "Administration" tab.
The properties are proxySet, proxyHost, proxyPort and nonProxyHosts
When deploying from JDev, the compilation in JDev works fine (uses the proxy). But when the JAR is transferred to the server, it is compiled again. This fails because the proxy is not used on the server side and it cannot read the wsdl.

Problem in accessing Web Services developed using JDeveloper 10.1.3

We have developed J2EE 1.4 JAX RPC Web Services using Jdeveloper 10.1.3.
I take the WSDL document generated by JDev and created Web Proxy for that WSDL.
I have developed the Swing Client for accessing the Web Service and when i tried to run from JDev it is working fine.
My requirement is to access the swing client from Java Web start.
When i tried to run from Web start, I am getting the following exception.
standard type mapping initialization error: javax.xml.rpc.JAXRPCException: javax.xml.soap.SOAPException: Unable to create SOAP Factory: Provider com.sun.xml.messaging.saaj.soap.ver1_1.SOAPFactory1_1Impl not found
     at oracle.j2ee.ws.client.BasicService.createLiteralMappings(BasicService.java:282)
     at oracle.j2ee.ws.client.BasicService.createStandardTypeMappingRegistry(BasicService.java:244)
     at com.foursoft.tplex.webservices.runtime.MasterDocumentWS_SerializerRegistry.getRegistry(MasterDocumentWS_SerializerRegistry.java:26)
     at com.foursoft.tplex.webservices.runtime.MasterDocumentWS_Impl.<init>(MasterDocumentWS_Impl.java:26)
     at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
     at sun.reflect.NativeConstructorAccessorImpl.newInstance(Unknown Source)
     at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(Unknown Source)
     at java.lang.reflect.Constructor.newInstance(Unknown Source)
     at java.lang.Class.newInstance0(Unknown Source)
     at java.lang.Class.newInstance(Unknown Source)
     at oracle.j2ee.ws.client.ServiceFactoryImpl.createService(ServiceFactoryImpl.java:92)
     at oracle.j2ee.ws.client.ServiceFactoryImpl.loadService(ServiceFactoryImpl.java:121)
     at com.foursoft.tplex.webservices.MasterDocumentWSSoapHttpPortClient.<init>(MasterDocumentWSSoapHttpPortClient.java:18)
     at com.foursoft.tplex.webservices.client.MasterDocumentClient.invokeButton_actionPerformed(MasterDocumentClient.java:119)
     at com.foursoft.tplex.webservices.client.MasterDocumentClient.mav$invokeButton_actionPerformed(MasterDocumentClient.java)
     at com.foursoft.tplex.webservices.client.MasterDocumentClient$2.actionPerformed(MasterDocumentClient.java:99)
     at javax.swing.AbstractButton.fireActionPerformed(Unknown Source)
     at javax.swing.AbstractButton$ForwardActionEvents.actionPerformed(Unknown Source)
     at javax.swing.DefaultButtonModel.fireActionPerformed(Unknown Source)
     at javax.swing.DefaultButtonModel.setPressed(Unknown Source)
     at javax.swing.plaf.basic.BasicButtonListener.mouseReleased(Unknown Source)
     at java.awt.AWTEventMulticaster.mouseReleased(Unknown Source)
     at java.awt.Component.processMouseEvent(Unknown Source)
     at java.awt.Component.processEvent(Unknown Source)
     at java.awt.Container.processEvent(Unknown Source)
     at java.awt.Component.dispatchEventImpl(Unknown Source)
     at java.awt.Container.dispatchEventImpl(Unknown Source)
     at java.awt.Component.dispatchEvent(Unknown Source)
     at java.awt.LightweightDispatcher.retargetMouseEvent(Unknown Source)
     at java.awt.LightweightDispatcher.processMouseEvent(Unknown Source)
     at java.awt.LightweightDispatcher.dispatchEvent(Unknown Source)
     at java.awt.Container.dispatchEventImpl(Unknown Source)
     at java.awt.Window.dispatchEventImpl(Unknown Source)
     at java.awt.Component.dispatchEvent(Unknown Source)
     at java.awt.EventQueue.dispatchEvent(Unknown Source)
     at java.awt.EventDispatchThread.pumpOneEventForHierarchy(Unknown Source)
     at java.awt.EventDispatchThread.pumpEventsForHierarchy(Unknown Source)
     at java.awt.EventDispatchThread.pumpEvents(Unknown Source)
     at java.awt.EventDispatchThread.pumpEvents(Unknown Source)
     at java.awt.EventDispatchThread.run(Unknown Source)
CAUSE:
javax.xml.rpc.JAXRPCException: javax.xml.soap.SOAPException: Unable to create SOAP Factory: Provider com.sun.xml.messaging.saaj.soap.ver1_1.SOAPFactory1_1Impl not found
     at oracle.j2ee.ws.client.BasicService.createLiteralMappings(BasicService.java:282)
     at oracle.j2ee.ws.client.BasicService.createStandardTypeMappingRegistry(BasicService.java:244)
     at com.foursoft.tplex.webservices.runtime.MasterDocumentWS_SerializerRegistry.getRegistry(MasterDocumentWS_SerializerRegistry.java:26)
     at com.foursoft.tplex.webservices.runtime.MasterDocumentWS_Impl.<init>(MasterDocumentWS_Impl.java:26)
     at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
     at sun.reflect.NativeConstructorAccessorImpl.newInstance(Unknown Source)
     at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(Unknown Source)
     at java.lang.reflect.Constructor.newInstance(Unknown Source)
     at java.lang.Class.newInstance0(Unknown Source)
     at java.lang.Class.newInstance(Unknown Source)
     at oracle.j2ee.ws.client.ServiceFactoryImpl.createService(ServiceFactoryImpl.java:92)
     at oracle.j2ee.ws.client.ServiceFactoryImpl.loadService(ServiceFactoryImpl.java:121)
     at com.foursoft.tplex.webservices.MasterDocumentWSSoapHttpPortClient.<init>(MasterDocumentWSSoapHttpPortClient.java:18)
     at com.foursoft.tplex.webservices.client.MasterDocumentClient.invokeButton_actionPerformed(MasterDocumentClient.java:119)
     at com.foursoft.tplex.webservices.client.MasterDocumentClient.mav$invokeButton_actionPerformed(MasterDocumentClient.java)
     at com.foursoft.tplex.webservices.client.MasterDocumentClient$2.actionPerformed(MasterDocumentClient.java:99)
     at javax.swing.AbstractButton.fireActionPerformed(Unknown Source)
     at javax.swing.AbstractButton$ForwardActionEvents.actionPerformed(Unknown Source)
     at javax.swing.DefaultButtonModel.fireActionPerformed(Unknown Source)
     at javax.swing.DefaultButtonModel.setPressed(Unknown Source)
     at javax.swing.plaf.basic.BasicButtonListener.mouseReleased(Unknown Source)
     at java.awt.AWTEventMulticaster.mouseReleased(Unknown Source)
     at java.awt.Component.processMouseEvent(Unknown Source)
     at java.awt.Component.processEvent(Unknown Source)
     at java.awt.Container.processEvent(Unknown Source)
     at java.awt.Component.dispatchEventImpl(Unknown Source)
     at java.awt.Container.dispatchEventImpl(Unknown Source)
     at java.awt.Component.dispatchEvent(Unknown Source)
     at java.awt.LightweightDispatcher.retargetMouseEvent(Unknown Source)
     at java.awt.LightweightDispatcher.processMouseEvent(Unknown Source)
     at java.awt.LightweightDispatcher.dispatchEvent(Unknown Source)
     at java.awt.Container.dispatchEventImpl(Unknown Source)
     at java.awt.Window.dispatchEventImpl(Unknown Source)
     at java.awt.Component.dispatchEvent(Unknown Source)
     at java.awt.EventQueue.dispatchEvent(Unknown Source)
     at java.awt.EventDispatchThread.pumpOneEventForHierarchy(Unknown Source)
     at java.awt.EventDispatchThread.pumpEventsForHierarchy(Unknown Source)
     at java.awt.EventDispatchThread.pumpEvents(Unknown Source)
     at java.awt.EventDispatchThread.pumpEvents(Unknown Source)
     at java.awt.EventDispatchThread.run(Unknown Source)
Caused by: javax.xml.rpc.JAXRPCException: javax.xml.soap.SOAPException: Unable to create SOAP Factory: Provider com.sun.xml.messaging.saaj.soap.ver1_1.SOAPFactory1_1Impl not found
     at oracle.j2ee.ws.common.encoding.literal.LiteralFragmentSerializer.<init>(LiteralFragmentSerializer.java:90)
     at oracle.j2ee.ws.common.encoding.literal.LiteralFragmentSerializer.<init>(LiteralFragmentSerializer.java:57)
     at oracle.j2ee.ws.common.encoding.literal.LiteralAnyElementSerializer.<init>(LiteralAnyElementSerializer.java:16)
     at oracle.j2ee.ws.common.encoding.literal.StandardLiteralTypeMappings.<init>(StandardLiteralTypeMappings.java:198)
     at oracle.j2ee.ws.client.BasicService.createLiteralMappings(BasicService.java:280)
     ... 39 more
Caused by: javax.xml.soap.SOAPException: Unable to create SOAP Factory: Provider com.sun.xml.messaging.saaj.soap.ver1_1.SOAPFactory1_1Impl not found
     at javax.xml.soap.SOAPFactory.newInstance(SOAPFactory.java:33)
     at oracle.j2ee.ws.common.encoding.literal.LiteralFragmentSerializer.<init>(LiteralFragmentSerializer.java:88)
     ... 43 more
CAUSE:
javax.xml.rpc.JAXRPCException: javax.xml.soap.SOAPException: Unable to create SOAP Factory: Provider com.sun.xml.messaging.saaj.soap.ver1_1.SOAPFactory1_1Impl not found
     at oracle.j2ee.ws.client.BasicService.createLiteralMappings(BasicService.java:282)
     at oracle.j2ee.ws.client.BasicService.createStandardTypeMappingRegistry(BasicService.java:244)
     at com.foursoft.tplex.webservices.runtime.MasterDocumentWS_SerializerRegistry.getRegistry(MasterDocumentWS_SerializerRegistry.java:26)
     at com.foursoft.tplex.webservices.runtime.MasterDocumentWS_Impl.<init>(MasterDocumentWS_Impl.java:26)
     at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
     at sun.reflect.NativeConstructorAccessorImpl.newInstance(Unknown Source)
     at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(Unknown Source)
     at java.lang.reflect.Constructor.newInstance(Unknown Source)
     at java.lang.Class.newInstance0(Unknown Source)
     at java.lang.Class.newInstance(Unknown Source)
     at oracle.j2ee.ws.client.ServiceFactoryImpl.createService(ServiceFactoryImpl.java:92)
     at oracle.j2ee.ws.client.ServiceFactoryImpl.loadService(ServiceFactoryImpl.java:121)
     at com.foursoft.tplex.webservices.MasterDocumentWSSoapHttpPortClient.<init>(MasterDocumentWSSoapHttpPortClient.java:18)
     at com.foursoft.tplex.webservices.client.MasterDocumentClient.invokeButton_actionPerformed(MasterDocumentClient.java:119)
     at com.foursoft.tplex.webservices.client.MasterDocumentClient.mav$invokeButton_actionPerformed(MasterDocumentClient.java)
     at com.foursoft.tplex.webservices.client.MasterDocumentClient$2.actionPerformed(MasterDocumentClient.java:99)
     at javax.swing.AbstractButton.fireActionPerformed(Unknown Source)
     at javax.swing.AbstractButton$ForwardActionEvents.actionPerformed(Unknown Source)
     at javax.swing.DefaultButtonModel.fireActionPerformed(Unknown Source)
     at javax.swing.DefaultButtonModel.setPressed(Unknown Source)
     at javax.swing.plaf.basic.BasicButtonListener.mouseReleased(Unknown Source)
     at java.awt.AWTEventMulticaster.mouseReleased(Unknown Source)
     at java.awt.Component.processMouseEvent(Unknown Source)
     at java.awt.Component.processEvent(Unknown Source)
     at java.awt.Container.processEvent(Unknown Source)
     at java.awt.Component.dispatchEventImpl(Unknown Source)
     at java.awt.Container.dispatchEventImpl(Unknown Source)
     at java.awt.Component.dispatchEvent(Unknown Source)
     at java.awt.LightweightDispatcher.retargetMouseEvent(Unknown Source)
     at java.awt.LightweightDispatcher.processMouseEvent(Unknown Source)
     at java.awt.LightweightDispatcher.dispatchEvent(Unknown Source)
     at java.awt.Container.dispatchEventImpl(Unknown Source)
     at java.awt.Window.dispatchEventImpl(Unknown Source)
     at java.awt.Component.dispatchEvent(Unknown Source)
     at java.awt.EventQueue.dispatchEvent(Unknown Source)
     at java.awt.EventDispatchThread.pumpOneEventForHierarchy(Unknown Source)
     at java.awt.EventDispatchThread.pumpEventsForHierarchy(Unknown Source)
     at java.awt.EventDispatchThread.pumpEvents(Unknown Source)
     at java.awt.EventDispatchThread.pumpEvents(Unknown Source)
     at java.awt.EventDispatchThread.run(Unknown Source)
Caused by: javax.xml.rpc.JAXRPCException: javax.xml.soap.SOAPException: Unable to create SOAP Factory: Provider com.sun.xml.messaging.saaj.soap.ver1_1.SOAPFactory1_1Impl not found
     at oracle.j2ee.ws.common.encoding.literal.LiteralFragmentSerializer.<init>(LiteralFragmentSerializer.java:90)
     at oracle.j2ee.ws.common.encoding.literal.LiteralFragmentSerializer.<init>(LiteralFragmentSerializer.java:57)
     at oracle.j2ee.ws.common.encoding.literal.LiteralAnyElementSerializer.<init>(LiteralAnyElementSerializer.java:16)
     at oracle.j2ee.ws.common.encoding.literal.StandardLiteralTypeMappings.<init>(StandardLiteralTypeMappings.java:198)
     at oracle.j2ee.ws.client.BasicService.createLiteralMappings(BasicService.java:280)
     ... 39 more
Caused by: javax.xml.soap.SOAPException: Unable to create SOAP Factory: Provider com.sun.xml.messaging.saaj.soap.ver1_1.SOAPFactory1_1Impl not found
     at javax.xml.soap.SOAPFactory.newInstance(SOAPFactory.java:33)
     at oracle.j2ee.ws.common.encoding.literal.LiteralFragmentSerializer.<init>(LiteralFragmentSerializer.java:88)
     ... 43 more
java.lang.NullPointerException
     at com.foursoft.tplex.webservices.runtime.MasterDocumentWS_SerializerRegistry.registerSerializer(MasterDocumentWS_SerializerRegistry.java:95)
     at com.foursoft.tplex.webservices.runtime.MasterDocumentWS_SerializerRegistry.getRegistry(MasterDocumentWS_SerializerRegistry.java:32)
     at com.foursoft.tplex.webservices.runtime.MasterDocumentWS_Impl.<init>(MasterDocumentWS_Impl.java:26)
     at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
     at sun.reflect.NativeConstructorAccessorImpl.newInstance(Unknown Source)
     at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(Unknown Source)
     at java.lang.reflect.Constructor.newInstance(Unknown Source)
     at java.lang.Class.newInstance0(Unknown Source)
     at java.lang.Class.newInstance(Unknown Source)
     at oracle.j2ee.ws.client.ServiceFactoryImpl.createService(ServiceFactoryImpl.java:92)
     at oracle.j2ee.ws.client.ServiceFactoryImpl.loadService(ServiceFactoryImpl.java:121)
     at com.foursoft.tplex.webservices.MasterDocumentWSSoapHttpPortClient.<init>(MasterDocumentWSSoapHttpPortClient.java:18)
     at com.foursoft.tplex.webservices.client.MasterDocumentClient.invokeButton_actionPerformed(MasterDocumentClient.java:119)
     at com.foursoft.tplex.webservices.client.MasterDocumentClient.mav$invokeButton_actionPerformed(MasterDocumentClient.java)
     at com.foursoft.tplex.webservices.client.MasterDocumentClient$2.actionPerformed(MasterDocumentClient.java:99)
     at javax.swing.AbstractButton.fireActionPerformed(Unknown Source)
     at javax.swing.AbstractButton$ForwardActionEvents.actionPerformed(Unknown Source)
     at javax.swing.DefaultButtonModel.fireActionPerformed(Unknown Source)
     at javax.swing.DefaultButtonModel.setPressed(Unknown Source)
     at javax.swing.plaf.basic.BasicButtonListener.mouseReleased(Unknown Source)
     at java.awt.AWTEventMulticaster.mouseReleased(Unknown Source)
     at java.awt.Component.processMouseEvent(Unknown Source)
     at java.awt.Component.processEvent(Unknown Source)
     at java.awt.Container.processEvent(Unknown Source)
     at java.awt.Component.dispatchEventImpl(Unknown Source)
     at java.awt.Container.dispatchEventImpl(Unknown Source)
     at java.awt.Component.dispatchEvent(Unknown Source)
     at java.awt.LightweightDispatcher.retargetMouseEvent(Unknown Source)
     at java.awt.LightweightDispatcher.processMouseEvent(Unknown Source)
     at java.awt.LightweightDispatcher.dispatchEvent(Unknown Source)
     at java.awt.Container.dispatchEventImpl(Unknown Source)
     at java.awt.Window.dispatchEventImpl(Unknown Source)
     at java.awt.Component.dispatchEvent(Unknown Source)
     at java.awt.EventQueue.dispatchEvent(Unknown Source)
     at java.awt.EventDispatchThread.pumpOneEventForHierarchy(Unknown Source)
     at java.awt.EventDispatchThread.pumpEventsForHierarchy(Unknown Source)
     at java.awt.EventDispatchThread.pumpEvents(Unknown Source)
     at java.awt.EventDispatchThread.pumpEvents(Unknown Source)
     at java.awt.EventDispatchThread.run(Unknown Source)
Now we struck with this error and I am not able to proceed further. Pl. help me in resolving the issue.
I shall be thankful to your help.
Regards...
Ravi Kumar

I am also having the same problem. Calling a web service inside JDeveloper 10.1.3.3 works fine. When I deploy to a jar file and include all Jars that the dependency analyzer identifies, the following error occurs:
standard type mapping initialization error: javax.xml.rpc.JAXRPCException: javax
.xml.soap.SOAPException: Unable to create SOAP Factory: Provider com.sun.xml.messaging.saaj.soap.ver1_1.SOAPFactory1_1Impl not found
Your work around defining Java system properties does work, but why do we need to do this using the Oracle SOAP stack?
If there are alternatives to this problem please share. Thank you.

Java Web Services Developer Pack (Java WSDP)

Anybody tried Java Web Services Developer Pack 1.6 ?
http://java.sun.com/webservices/jwsdp/index.jsp
Was it simple and easy to consume external web services using this tool ?
http://java.sun.com/webservices/jwsdp/index.jsp

FYI,
JWSDP 2.0 is now available.
Also, if you want to consume web services try using JAX-WS. It will be part of the next Java SE release (mustang). You can learn more about JAX-WS at http://jax-ws.dev.java.net.

How to create secure EJB web service in Oc4J using JDeveloper?

We are going to develop a EJB web service running in OC4J using JDeveloper 10.1.3.3.
By using the JDeveloper feature, we can simply create the web service by using the "Web Service Endpoint Interface" in the session bean.
However, unlike the web service created from Java class, I can't find any option to change the security setting of this web service. We tried adding annotation like @DenyAll for testing, but there has no effect and related method can still be called without WS-Security header.
Now, we can only change the security setting via the web console after deployment (select the web service, then enable security in administration page, and then edit security configuration to change the inbound policies for authentication). It works in our local machine, but it may not work in the production environment as we cannot touch the em console.
May I know if there has any way to include the security setting inside the project?
Thanks in advance.

If I am not wrong, you might be probably talking about this :
http://docs.oracle.com/cd/B40099_02/books/EAI2/EAI2_WebServices33.html#wp179056
In order to implement the SOAP header, you would have to :
(1) Define SOAP header in the wsdl of the service.
(2) Add a new soap binding in the wsdl, which contains soap header and soap body.
I think, this should get you going..

Unable to call WSS (WS-Security) enabled Web Service using UTL_DBWS

We are attempting to call a WSS (WS-Security) enabled Web Service from PL/SQL using the UTL_DBWS package (see [http://download.oracle.com/docs/cd/B19306_01/appdev.102/b14258/u_dbws.htm#CHDIDGJH] ). We are doing this in similar fashion to [http://www.oracle-base.com/articles/10g/utl_dbws10g.php] with calls to utl_dbws.create_service, utl_dbws.create_call and utl_dbws.invoke.
Using this method we can successfully call an unsecured Web Service, but calls to WSS-enabled Web Services fail. We are currently using Oracle Database 10.2.0.3.
The failure we are getting is:
ORA-29532: Java call terminated by uncaught Java exception: javax.xml.rpc.soap.SOAPFaultException:
com.sun.xml.wss.XWSSecurityException: Message does not conform to configured
policy ( AuthenticationTokenPolicy(S) ): No Security Header found;nested
exception is com.sun.xml.wss.XWSSecurityException:
com.sun.xml.wss.XWSSecurityException: Message does not conform to configured
policy ( AuthenticationTokenPlicy(S) ): No Security Header found
Apparently UTL_DBWS does not support calling WSS enabled services, although this doesn't appear to be an officially recognised position. Does anyone know if Oracle are planning to support this soon (if ever)? Looking at Re: Calling WS from PL/SQL using WS-security suggests that support has been considered before, but not yet realised.
Thanks,
Tom

Having raised a Service Request with Oracle support on this, I got the following response from Oracle Development (On unpublished bug [8542959|https://metalink2.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=BUG&p_id=8542959]):
Development has confirmed that WS-Security is not supported through UTL_DBWS. They have also acknowledged that this is not documented and they will change the official Oracle documentation will reflect this fact. From what is being stated, it would appear that there is no plan to support the use of WS-Security through UTL_DBWS in any release in the near future.
So, in short, without developing your own home-grown SOAP request, there is no way to call a WSS enabled web service from within PL/SQL.
-Tom

Web Service Developer Pack for production use?

Hello,
Can anyone tell me what the licensing is for use of the web services developer pack reference implementations? Can they be used in a production environment, or are they for development purposes only?
Any information is appreciated.
Holly

The JWSDP can be used for production use. It is not just
a reference implementation. The exception is the bundled
UDDI registry which is just for testing development.

Implementation of Asynchronous Web Services using JDeveloper

Various articles and tutorials, which I have read, are talking about asynchronous BPEL processes. These asynch BPEL processes are result of the orchestration of different synch and asynch atomic services (web services in specific). There are even tutorials as part of Oracle SOA Suite and JDeveloper explaining how to consume asynchronous services in a BPEL process. Well and good.
But unfortunately I haven’t seen any tutorial or article talks about the implementation of asynchronous web services (How to implement an asynchronous service?). All what they talk about is the consumption side of it and the applicability of WS-Addressing or Correlation ID for the consumption of the Service.
As part of my research, I delved further into the sample BPEL processes comes out with Oracle BPEL Process Manager. For example; I have had a look into the Asynchronous Loan Processor process, where it is orchestrating a Synch Credit Rating Service and three asynch services namely Star Loan, United Loan and American Loans. But as I delved down into those, I realized that these services are simply BPEL Processes where it is implemented as a sequence of Receive, Assign and Invoke activities, where each of the activities does the following.
Receive -- Receives the request from the client
Assign -- Does some manipulation on the Input variable and set the output variable
Invoke -- Invokes the client back (call back)
These kinds of asynch services are pretty fine to demonstrate theory.
But if we put ourselves more into practical scenarios, where we invoke a service from some application and the result of that invocation shall happen after some time (minutes to hours) in the form of a callback. In that case we WON’T be able to realize the service simply by a simple BPEL Process, rather we will have to implement as a Web Service with two port types implemented, where one port type is for the request and another one for the callback.
I do understand these kinds of services can be implemented using JAX-WS.
Question Here: How I do it using Oracle JDeveloper and Oracle Application Server???
If anyone have done it, the REAL implementation of ASYNCH Web Services *(NOT BY USING BPEL or BPEL Wrapper)* using JDeveloper to deploy on Oracle Application Server or on Oracle SOA Suite, please post the know-how. If someone else is interested in taking it forward, we can take it further together.
-Sudheer
P.S: I am NOT at all interested in theory, as I had enough. Here I don’t want to be Conceptual; rather I am talking about hands-on.

Hi Sudheer,
I am not sure if this will help you
If you take Oracle SOA Suite Order Booking Tutorial and go to Chapter 5 Creating the CreditService Project ( http://download.oracle.com/docs/cd/B31017_01/core.1013/b28937/creditservice.htm ), you learn how to create a synchronous Web service from a WSDL file.
If you take the wsdl and delete output and fault tags (you can see it below) and follow the steps you'll generate an asynchronous web service.
The generated Java method will be a void method
public class ValidateCreditCardImpl {
public void verifyCC(CreditCard creditCard) {
Inside this void method you can try to call to a Receive BPEL Activity.
I hope this will be useful . Regards,
J
<definitions targetNamespace="http://www.globalcompany.com/ns/credit"
xmlns="http://schemas.xmlsoap.org/wsdl/"
xmlns:tns="http://www.globalcompany.com/ns/credit"
xmlns:mime="http://schemas.xmlsoap.org/wsdl/mime/"
xmlns:xsd="http://www.w3.org/2001/XMLSchema"
xmlns:soap="http://schemas.xmlsoap.org/wsdl/soap/"
xmlns:types="http://www.globalcompany.com/ns/credit.xsd">
<types>
<schema targetNamespace="http://www.globalcompany.com/ns/credit.xsd"
xmlns="http://www.w3.org/2001/XMLSchema"
xmlns:SOAP-ENC="http://schemas.xmlsoap.org/soap/encoding/">
<complexType name="CreditCard">
<sequence>
<element name="ccType" type="string"/>
<element name="ccNum" type="string"/>
</sequence>
</complexType>
<element name="CreditCard" type="types:CreditCard"/>
<element name="valid" type="boolean"/>
<element name="error" type="string"/>
</schema>
</types>
<message name="CreditCardValidationRequestMessage">
<part name="CreditCard" element="types:CreditCard"/>
</message>
<message name="CreditCardValidationResponseMessage">
<part name="valid" element="types:valid"/>
</message>
<message name="CreditCardValidationFaultMessage">
<part name="error" element="types:error"/>
</message>
<portType name="ValidateCreditCard">
<operation name="VerifyCC">
<input message="tns:CreditCardValidationRequestMessage"
name="CreditCardInfo"/>
</operation>
</portType>
<binding name="ValidateCreditCardSoapHttp" type="tns:ValidateCreditCard">
<soap:binding style="document"
transport="http://schemas.xmlsoap.org/soap/http"/>
<operation name="VerifyCC">
<soap:operation soapAction="http://www.globalcompany.com/ns/credit/VerifyCC"/>
<input name="CreditCardInfo">
<soap:body use="literal" parts="CreditCard"/>
</input>
</operation>
</binding>
<service name="CreditService">
<port name="ValidateCreditCardServiceSoapHttp"
binding="tns:ValidateCreditCardSoapHttp">
<soap:address location="http://localhost:8888/CreditService"/>
</port>
</service>
</definitions>
Edited by: user10262974 on 30-mar-2009 16:19

Use of security in web service

Hi,
I have tried to use security from the example jaas-sample of jwsdp 1.5 .
I just want to secure my web service with a username/password.
When I called my service from the client...I see the xml flow :
<?xml version="1.0" encoding="UTF-8"?>
<env:Envelope xmlns:env="http://schemas.xmlsoap.org/soap/envelope/" xmlns:enc="http://schemas.xmlsoap.org/soap/encoding/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" env:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/">
<env:Header>
<wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" env:mustUnderstand="1">
<wsse:UsernameToken>
<wsse:Username>Ron</wsse:Username>
<wsse:Password>****</wsse:Password>
<wsse:Nonce EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary">3k18Sv+DMhcO3aoq6YWLB4xa</wsse:Nonce>
<wsu:Created xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">2005-03-01T15:26:05Z</wsu:Created>
</wsse:UsernameToken>
</wsse:Security>
</env:Header>
<env:Body>
<ns0:getInformations/>
</env:Body>
</env:Envelope>
it seems to be correct but I have an exception :
Thread : main at 01 mars 2005 16:10:06,593 ERROR Error occured during retrieving informations
java.rmi.ServerException: JAXRPCSERVLET28 : Informations sur le port manquant
at com.sun.xml.rpc.client.StreamingSender._raiseFault(StreamingSender.java:497)
at com.sun.xml.rpc.client.StreamingSender._send(StreamingSender.java:294)
It works when I not use the security option (in wscompile) ...
Have you any idea for a solution?

Hi,
I tried the xws-security samples and everything worked fine.
After editing the "java.security" according to the manual with:
security.provider.2=org.bouncycastle.jce.provider.BouncyCastleProvider
After that change and a restart of the application server I get the same error message.
I copied the jar file "bcprov-jdk14-127.jar" from bouncycastle to the jre/lib/ext folder.
I will check further.
br
Dieter

How to invoke a web service asynchronously using ws-addressing model?

Hi Gurus,
We are invoking an external web service asynchronously using Oracle Work Flow Business events using the following mechanism -
1)Created a web service invoker event to invoke the web service.
2)Created a subscription that invokes the web service (provided the wsdl address, operation info).
3)Defined a subscription parameter WFBES_CALLBACK_EVENT with value pointing to a recieve event.
4)Created a receive event(parameter value for WFBES_CALLBACK_EVENT) and a subscription that directs the response to a custom PL/SQL function to process response.
so far so good. We were able to invoke the web service and get and process the response.
Problem: The external web service can take upto 10 hrs to process the request. A time out of 2 hrs is set on the server hosting the external web service. So when the external web service takes more than 2 hrs to process the request and it times out and we get the following error on EBS side -
'l_error_message:oracle.apps.fnd.wf.bes.InvokerException: HTTP transport error: javax.xml.soap.SOAPException: java.security.PrivilegedActionException: oracle.j2ee.ws.saaj.ContentTypeException: Not a valid SOAP Content-Type: text/html; charset=iso-8859-1'
Now the external web service providers are suggesting that we are not calling their web service asynchronously and we should use ws-addressing model to do so.
Is there a way to invoke this web service using ws-addressing model using business events or from PL/SQL or OA middle-tier?
Regards,
Sunil
CMRO Development.
I am providing here the WSDL of the external web service -
<?xml version="1.0" encoding="UTF-8"?>
<wsdl:definitions targetNamespace="http://service.sdk.webservices.enigma.com" xmlns:soap12="http://schemas.xmlsoap.org/wsdl/soap12/" xmlns:mime="http://schemas.xmlsoap.org/wsdl/mime/" xmlns:http="http://schemas.xmlsoap.org/wsdl/http/" xmlns:ns1="http://org.apache.axis2/xsd" xmlns:wsaw="http://www.w3.org/2006/05/addressing/wsdl" xmlns:ax21="http://service.sdk.webservices.enigma.com/xsd" xmlns:ns="http://service.sdk.webservices.enigma.com" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/wsdl/soap/" xmlns:wsdl="http://schemas.xmlsoap.org/wsdl/">
<wsdl:types>
<xs:schema attributeFormDefault="qualified" elementFormDefault="qualified" targetNamespace="http://service.sdk.webservices.enigma.com/xsd" xmlns:ax22="http://service.sdk.webservices.enigma.com">
<xs:import namespace="http://service.sdk.webservices.enigma.com"/>
<xs:complexType name="JCGWebServicesException">
<xs:complexContent>
<xs:extension base="ax22:Exception">
<xs:sequence>
<xs:element minOccurs="0" name="id" nillable="true" type="xs:string"/>
<xs:element minOccurs="0" name="message" nillable="true" type="xs:string"/>
</xs:sequence>
</xs:extension>
</xs:complexContent>
</xs:complexType>
<xs:complexType name="JCGServiceReply">
<xs:sequence>
<xs:element maxOccurs="unbounded" minOccurs="0" name="pdfStatus" nillable="true" type="ax21:PdfStatus"/>
</xs:sequence>
</xs:complexType>
<xs:complexType name="PdfStatus">
<xs:sequence>
<xs:element minOccurs="0" name="jobCardID" nillable="true" type="xs:string"/>
<xs:element minOccurs="0" name="pdfPath" nillable="true" type="xs:string"/>
<xs:element minOccurs="0" name="status" nillable="true" type="xs:string"/>
</xs:sequence>
</xs:complexType>
</xs:schema>
<xs:schema attributeFormDefault="qualified" elementFormDefault="qualified" targetNamespace="http://service.sdk.webservices.enigma.com" xmlns:ax23="http://service.sdk.webservices.enigma.com/xsd">
<xs:import namespace="http://service.sdk.webservices.enigma.com/xsd"/>
<xs:complexType name="Exception">
<xs:sequence>
<xs:element minOccurs="0" name="Exception" nillable="true" type="xs:anyType"/>
</xs:sequence>
</xs:complexType>
<xs:element name="JCGWebServicesException">
<xs:complexType>
<xs:sequence>
<xs:element minOccurs="0" name="JCGWebServicesException" nillable="true" type="ax21:JCGWebServicesException"/>
</xs:sequence>
</xs:complexType>
</xs:element>
<xs:element name="runJobCard">
<xs:complexType>
<xs:sequence>
<xs:element minOccurs="0" name="a_WorkpackageFilePath" nillable="true" type="xs:string"/>
<xs:element minOccurs="0" name="a_userName" nillable="true" type="xs:string"/>
</xs:sequence>
</xs:complexType>
</xs:element>
<xs:element name="runJobCardResponse">
<xs:complexType>
<xs:sequence>
<xs:element minOccurs="0" name="return" nillable="true" type="ax21:JCGServiceReply"/>
</xs:sequence>
</xs:complexType>
</xs:element>
</xs:schema>
</wsdl:types>
<wsdl:message name="JCGWebServicesException">
<wsdl:part name="parameters" element="ns:JCGWebServicesException">
</wsdl:part>
</wsdl:message>
<wsdl:message name="runJobCardResponse">
<wsdl:part name="parameters" element="ns:runJobCardResponse">
</wsdl:part>
</wsdl:message>
<wsdl:message name="runJobCardRequest">
<wsdl:part name="parameters" element="ns:runJobCard">
</wsdl:part>
</wsdl:message>
<wsdl:portType name="JCGServicePortType">
<wsdl:operation name="runJobCard">
<wsdl:input message="ns:runJobCardRequest" wsaw:Action="urn:runJobCard">
</wsdl:input>
<wsdl:output message="ns:runJobCardResponse" wsaw:Action="urn:runJobCardResponse">
</wsdl:output>
<wsdl:fault name="JCGWebServicesException" message="ns:JCGWebServicesException" wsaw:Action="urn:runJobCardJCGWebServicesException">
</wsdl:fault>
</wsdl:operation>
</wsdl:portType>
<wsdl:binding name="JCGServiceSoap11Binding" type="ns:JCGServicePortType">
<soap:binding style="document" transport="http://schemas.xmlsoap.org/soap/http"/>
<wsdl:operation name="runJobCard">
<soap:operation soapAction="urn:runJobCard" style="document"/>
<wsdl:input>
<soap:body use="literal"/>
</wsdl:input>
<wsdl:output>
<soap:body use="literal"/>
</wsdl:output>
<wsdl:fault name="JCGWebServicesException">
<soap:fault name="JCGWebServicesException" use="literal"/>
</wsdl:fault>
</wsdl:operation>
</wsdl:binding>
<wsdl:binding name="JCGServiceSoap12Binding" type="ns:JCGServicePortType">
<soap12:binding style="document" transport="http://schemas.xmlsoap.org/soap/http"/>
<wsdl:operation name="runJobCard">
<soap12:operation soapAction="urn:runJobCard" style="document"/>
<wsdl:input>
<soap12:body use="literal"/>
</wsdl:input>
<wsdl:output>
<soap12:body use="literal"/>
</wsdl:output>
<wsdl:fault name="JCGWebServicesException">
<soap12:fault name="JCGWebServicesException" use="literal"/>
</wsdl:fault>
</wsdl:operation>
</wsdl:binding>
<wsdl:service name="JCGService">
<wsdl:port name="JCGServiceHttpSoap12Endpoint" binding="ns:JCGServiceSoap12Binding">
<soap12:address location="http://localhost:8080/JCG/services/JCGService"/>
</wsdl:port>
<wsdl:port name="JCGServiceHttpSoap11Endpoint" binding="ns:JCGServiceSoap11Binding">
<soap:address location="http://localhost:8080/JCG/services/JCGService"/>
</wsdl:port>
</wsdl:service>
</wsdl:definitions>
Edited by: sikumar on Jun 22, 2010 1:50 PM

Bharat,
You dont need a Business Event setup to invoke a BPEL process from PL/SQL unless you have a special case and you need to process the response from the BPEL process in a separate thread (or in background)..
For a straight call to BPEL process from PL/SQL, here is a sample script -
function "MYTEST0" return varchar2 AS
soap_request varchar2(30000);
soap_respond varchar2(30000);
http_req utl_http.req;
http_resp utl_http.resp;
resp XMLType;
i integer;
helpStr varchar2(30000);
BEGIN
soap_request:= '<?xml version = ''1.0'' encoding = ''UTF-8''?>
<env:Envelope xmlns:env="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:xsd="http://www.w3.org/2001/XMLSchema"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xmlns:ns0="
http://xmlns.oracle.com/TestWS">
<env:Body>
<ns0:TestWSProcessRequest>
<ns0:input>abc</ns0:input>
</ns0:TestWSProcessRequest>
</env:Body>
</env:Envelope>
/* the BPEL process name is TestWS */
http_req:= utl_http.begin_request
( 'http://hostname:7777/orabpel/default/TestWS/1.0'
, 'POST'
, 'HTTP/1.1'
utl_http.set_header(http_req, 'Content-Type', 'text/xml');
utl_http.set_header(http_req, 'Content-Length', length(soap_request));
utl_http.set_header(http_req, 'SOAPAction', 'process');
utl_http.write_text(http_req, soap_request);
http_resp:= utl_http.get_response(http_req);
utl_http.read_text(http_resp, soap_respond);
utl_http.end_response(http_resp);
resp:= XMLType.createXML(soap_respond);
resp:= resp.extract('/soap:Envelope/soap:Body/child::node()',
'xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"');
helpStr := '';
i:=0;
loop
helpStr := helpStr || substr(soap_respond,1+ i*255,250);
i:= i+1;
if i*250> length(soap_respond)
then
exit;
end if;
end loop;
return helpStr;
END;

Web services Development

A general question for the group (sorry if this is off-topic, if there's a better
forum for this type of Q let me know).
I'm a web services and web app developer who is new to BEA. In the past I've used
toolkits like Axis for web services and I've always preferred this approach. It
seems to me that using BEA I can develop Web Services in one of two ways. The
'low-level' way where I could use the command line tools (or ant) to create, deploy
and manage the code, or I could use WLW and the nice attribute driven approach.
It strikes me (on first blush) that these techniques are not compatible, so if
I choose one I have to stick with that, and I shouldn't (can't) mix and match
the two.
As a relative newcomer to this community which one should I choose?
Which are people out there using?
Can the approaches me mixed?
What implications does using one or the other have in terms of deployment and
the type of WLS I have installed?
Again sorry if this is off topic, or an RTFM. If either of these is the case pointers
to the FM would be appreciated.
Thanks,
Kevin Jones

I think if you are looking for training in "BEA web services" then do
it the WLW way.
However, if you think your web service may be deployed to a non-BEA
app server, then pick up the standards.
This is true for regular web apps using struts vs. WLW's 'netui'
and JSR 162 vs. WLW Portals as well.
Kevin Jones wrote:
Thanks Michael,
anybody else have any comments?
For example if you were looking for training in BEA web services would you expect
it to be WLW or 'command line' based?
Kevin
"Michael Wooten" <[email protected]> wrote:
Hi Kevin,
The two web services development approaches are for two different audiences,
so
it's up to you to select which is more to your liking :-)
Developers who are familiar with the Apache Axis Web Services Platform,
will find
lots of similarities in the Ant-scrpt based approach that the WLS 8.1
Web Services
Platform uses. This would also be the environment for those that really
like to
see that their code uses classes from a standard, like JAX-RPC or SAAJ.
Workshop is really targeted at developers who are less interested in
the mechanics
of Web service construction, and more interested in what they want the
web service
to do. It offers developers with this mindset, almost complete isolation
from
the technologies associated with web service development (i.e. SOAP,
WSDL, XML,
etc.), while still producing a deployable web service that can interoperate
with
web services created by other Web Service stacks.
Again, both of these approaches have healthy developer audiences, so
I see no
real reason to promote one over the other. Personally, I think it makes
sense
to become adept at both.
All in all, I'd have to say that Workshop makes better use of the developer's
time :-)
Regards,
Mike Wooten
"Kevin Jones" <[email protected]> wrote:
A general question for the group (sorry if this is off-topic, if there's
a better
forum for this type of Q let me know).
I'm a web services and web app developer who is new to BEA. In the past
I've used
toolkits like Axis for web services and I've always preferred this approach.
It
seems to me that using BEA I can develop Web Services in one of twoways.
The
'low-level' way where I could use the command line tools (or ant) to
create, deploy
and manage the code, or I could use WLW and the nice attribute driven
approach.
It strikes me (on first blush) that these techniques are not compatible,
so if
I choose one I have to stick with that, and I shouldn't (can't) mixand
match
the two.
As a relative newcomer to this community which one should I choose?
Which are people out there using?
Can the approaches me mixed?
What implications does using one or the other have in terms of deployment
and
the type of WLS I have installed?
Again sorry if this is off topic, or an RTFM. If either of these isthe
case pointers
to the FM would be appreciated.
Thanks,
Kevin Jones

Security with Web Service calling some EJBs

Hi everybody,
I have implemented some web services residing in a war file deployed on my Tomcat. The web services module is a client to some EJBs deployed on my JBoss. I need to log the user in my realm on each WS request and log the user out before the WS response.
I have implemented security on web applications with JBoss and used JAAS realms succesfully but what do I do in this case with Web Services? I mean the requests are stateless. If I use the org.jboss.security.ClientLoginModule
won't this override the credentials of another user who is already logged in the realm?
I have also implemented a standalone application which spawns a thread for each user request and I am wondering about the same thing. This application is a service listening for some kind of messages; on a message the application should log the user in the realm before calling an EJB and log the user after the request is completed. So it's more or less the same situation as above.
Is this possible? I mean logging many users in the same realm in one non-web application?
Any ideas?
Thank you in advance!!!
thoism

requests are stateless, just as are requests to webapps.
Which is hardly surprising as a web services stack is typically implemented as a web application.
If you could log in only a single user at the same time to an EJB application, it would be rather pointless to have the application as a distributed multiuser system :)
What you might check is whether you're allowed to log in the same user several times, if I remember correctly this can be limited in the EJB module deployment descriptors.

Java Web Services Developer Pack 1.5 and SOAP?

Hi all,
I'm trying to figure out what, if any, support does Java Web Services Developer Pack 1.5 have for parsing and dealing with SOAP messages. I couldn't find any documentation or info in the tutorial about it, but founds some packages through JavaDoc that seem to deal with SOAP. Does anyone know what the deal is? Do you use this toolkit for SOAP, maybe even WS-security?
Thanks for any pointers!
Olia

You can use JWSDP 1.3 but the minimum requirement form that toolkit is JDK 1.4. So you need to download the JDK 1.4 from http:/java.sun.com and install it first and after that you can install that JWSDP 1.3. Good Luck.

J2EE web service client using WSDL

Hi,
We are required to develop client program in Java for the
web services developed in SAP XI 2.0.
We will be getting the WSDL files for corresponding web
services.
We have tried doing it with J2EE JAX-RPC...
We studied the sample program of HelloService...
While calling the service from command line..it takes .jar file..
But we have to make use of only WSDL....
Is there any alternative way?? or jax-rpc is the best one???
wat will be the best way to do so??

Hi,
thanx for your reply!
We have written web services in SAP XI 2.0....
we has generated corresponding WSDL..which is little
incomplete..but we can modify and update it according to
requirements...so we have complete WSDL....for corresponding web
services.
My colleagues have developed web dynpro application which
makes use of those services. Now for demostration purpsoe we need
to write java/jsp which will access those services...
can u help???

Implementing Security in web services developed using JAX WS approach

Similar Messages

Maybe you are looking for