C# ПІДРУЧНИКИ / c# / Apress - Expert Service-Oriented Architecture in C# 2005, Second Edition
.pdf226 A P P E N D I X ■ R E F E R E N C E S
XML Schemas and SOAP
“Understanding SOAP” Aaron Skonnard
MSDN white paper (March 2003) http://msdn.microsoft.com/webservices/default.aspx?pull=/library/en-us/dnsoap/html/
understandsoap.asp
“XML Schemas and the XML Designer” MSDN article
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/vbcon/html/ vboricreatingschemas.asp
“A Quick Guide to XML Schema” Aaron Skonnard
MSDN Magazine (April 2002) http://msdn.microsoft.com/msdnmag/issues/02/04/xml/default.aspx
“Place XML Message Design Ahead of Schema Planning to Improve Web Service Interoperability”
Yasser Shohoud
MSDN Magazine (December 2002) http://msdn.microsoft.com/msdnmag/issues/02/12/WebServicesDesign/
“RPC/Literal and Freedom of Choice” Yasser Shohoud
MSDN white paper (April 2003) http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnwebsrv/html/
rpc_literal.asp
“Web Services Encoding and More” Aaron Skonnard
MSDN Magazine (May 2003) http://msdn.microsoft.com/msdnmag/issues/03/05/XMLFiles/
“SOAP Is Not a Remote Procedure Call”
Ingo Rammer’s Architecture Briefings (October 2003) http://www.thinktecture.com/Resources/ArchitectureBriefings/
SoapIsNotARemoteProcedureCall.pdf
“Increase Your App’s Reach Using WSDL to Combine Multiple Web Services” Gerrard Lindsay
MSDN Magazine (March 2005) http://msdn.microsoft.com/msdnmag/issues/05/03/WSDL/
A P P E N D I X ■ R E F E R E N C E S |
227 |
WSSpecifications (General)
Resources for developers and links to original standards and specifications documents IBM developerWorks http://www-106.ibm.com/developerworks/views/webservices/standards.jsp
“Secure, Reliable, Transacted Web Services: Architecture and Composition” Donald F. Ferguson (IBM), Tony Storey (IBM), Brad Lovering (Microsoft),
John Shewchuk (Microsoft) MSDN white paper (September 2003)
http://msdn.microsoft.com/webservices/webservices/understanding/ advancedwebservices/default.aspx?pull=/library/en-us/dnwebsrv/ html/wsoverview.asp
“Compare Web Service Security Metrics” Roger Jennings (OakLeaf Systems)
XML and Web Services Magazine (October 2002) http://www.fawcette.com/xmlmag/2002_10/online/webservices_rjennings_10_16_02/
default.aspx
“Installing Certificates for WSDK X.509 Digital Signing and Encryption” Roger Jennings (OakLeaf Systems)
XML and Web Services Magazine (October 2002) http://www.fawcette.com/xmlmag/2002_10/online/webservices_rjennings_10_16_02/
sidebar1.aspx
Web Services Enhancements 2.0 and 3.0 (General)
“What’s New in Web Services Enhancements 3.0” Mark Fussell
MSDN white paper (November 2005) http://msdn.microsoft.com/webservices/default.aspx?pull=/library/en-us/dnwse/html/
newwse3.asp
“Programming with Web Services Enhancements 2.0” Matt Powell
MSDN white paper (May 2004) http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnwse/html/
programwse2.asp
228 A P P E N D I X ■ R E F E R E N C E S
WS-Security
“WSE Security: Protect Your Web Services Through the Extensible Policy Framework in WSE 3.0”
Tomasz Janczuk
MSDN Magazine (February 2006) http://msdn.microsoft.com/msdnmag/issues/06/02/WSE30/default.aspx
Web Services Security (WS-Security) standards documents
OASIS
http://www.oasis-open.org/committees/tc_cat.php?cat=security
“Web Services Security: SOAP Message Security 1.0 (WS-Security 2004)” OASIS Standard 200401, March 2004
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message- security-1.0.pdf
“Understanding WS-Security” Scott Seely
MSDN white paper (October 2002) http://msdn.microsoft.com/webservices/webservices/understanding/
advancedwebservices/default.aspx?pull=/library/en-us/dnwssecur/ html/understw.asp
“WS-Security Drilldown in Web Services Enhancements 2.0” Don Smith
MSDN white paper (August 2004) http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnwebsrv/html/
wssecdrill.asp
(Note: This reference is also listed in the “WS-Secure Conversation” section of this appendix.)
“WS-Security Authentication and Digital Signatures with Web Services Enhancements” Matt Powell
MSDN white paper (December 2002) http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnwse/html/
wssecauthwse.asp
“Building Secure Web Services”
J.D. Meier, Alex Mackman, Michael Dunner, Srinath Vasireddy, Ray Escamilla, and Anandha Murukan
MSDN Patterns and Practices white paper, Chapter 12 (June 2003, revised January 2006) http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetsec/html/
THCMCh12.asp
A P P E N D I X ■ R E F E R E N C E S |
229 |
“Encrypting SOAP Messages Using Web Services Enhancements” Jeannine Hall Gailey
MSDN white paper (December 2002) http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnwse/html/
wseencryption.asp
“Web Services Security: Moving Up the Stack” Maryann Hondo, David Melgar, and Anthony Nadalin IBM developerWorks white paper (December 2002)
http://www-106.ibm.com/developerworks/library/ws-secroad/
“Web Services Security Username Token Profile” OASIS working draft (January 2003)
http://www.oasis-open.org/committees/wss/documents/WSS-Username-11.pdf
“Web Services Security Kerberos Binding”
Giovanni Della-Libera (Microsoft), Brendan Dixon (Microsoft), Praerit Garg (Microsoft), Maryann Hondo (IBM), Chris Kaler (Microsoft), Hiroshi Maruyama (IBM),
Anthony Nadalin (IBM), and Nataraj Nagaratnam (IBM) MSDN white paper (December 2003)
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnglobspec/html/ ws-security-kerberos.asp
“Security Features in WSE 3.0” Keith Brown
MSDN Magazine (November 2005) http://msdn.microsoft.com/msdnmag/issues/05/11/SecurityBriefs/default.aspx
“Web Service Security: Scenarios, Patterns, and Implementation Guidance for Web Services Enhancements (WSE) 3.0”
Jason Hogg (Microsoft), Don Smith (Microsoft), Fred Chong (Microsoft), Dwayne Taylor (RDA Corporation), Lonnie Wall (RDA Corporation), and Paul Slater (Wadeware LLC)
MSDN Patterns and Practices guide (December 2005) http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnpag2/html/
wssp.asp
Web Service Security: Scenarios, Patterns, and Implementation Guidance home page Microsoft Patterns and Practices community workspace http://www.gotdotnet.com/codegallery/codegallery.aspx?id=
67f659f6-9457-4860-80ff-0535dffed5e6
230A P P E N D I X ■ R E F E R E N C E S
“Security for SOA and Web Services” Dipak Chopra
SAP Developer Network https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/library/
webservices/Security%20for%20SOA%20and%20Web%20Services.article
“Windows 2000 Kerberos Authentication” Microsoft TechNet
http://www.microsoft.com/technet/prodtechnol/windows2000serv/deploy/confeat/
kerberos.mspx
WS-Policy
“Web Services Policy Framework”
IBM developerWorks specification (May 2003) http://www-106.ibm.com/developerworks/library/ws-polfram/
“Understanding WS-Policy” Aaron Skonnard
MSDN white paper (August 2003) http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnwebsrv/html/
understwspol.asp
“Web Services Policy Assertions Language (WS-Policy Assertions)”
Don Box (Microsoft), Maryann Hondo (IBM), Chris Kaler (Microsoft), Hiroshi Maruyama (IBM), Anthony Nadalin (IBM), Nataraj Nagaratnam (IBM), Paul Patrick (BEA), Claus von Riegen (SAP), and John Shewchuk (Microsoft)
MSDN white paper (May 2003) http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnglobspec/html/
ws-policyassertions.asp
“Using Role-Based Security with Web Services Enhancements 2.0” Ingo Rammer
MSDN white paper (September 2003) http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnwssecur/html/
wserolebasedsec.asp
WS-Secure Conversation
“Web Services Secure Conversation Language”
IBM developerWorks specification (May 2004, updated February 2005) http://www-128.ibm.com/developerworks/library/specification/ws-secon/
A P P E N D I X ■ R E F E R E N C E S |
231 |
“Web Services Trust Language”
IBM developerWorks specification (May 2004, updated February 2005) http://www-128.ibm.com/developerworks/library/specification/ws-trust/
“WS-Security Drilldown in Web Services Enhancements 2.0” Don Smith
MSDN white paper (August 2004) http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnwebsrv/html/
wssecdrill.asp
(Note: This reference is also listed in the “WS-Security” section of this appendix.)
“Managing Security Context Tokens in a Web Farm” Chris Keyser
MSDN white paper (November 2004) http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnwebsrv/html/
sctinfarm.asp
WS-Addressing
“Web Services Addressing”
IBM developerWorks specification (March 2004, updated August 2004) http://www-106.ibm.com/developerworks/webservices/library/ws-add/
WS-Messaging
“Asynchronous Operations and Web Services, Part 1: A Primer on Asynchronous Transactions” Holt Adams
IBM developerWorks white paper (April 2002) http://www-128.ibm.com/developerworks/library/ws-asynch1.html
“Asynchronous Operations and Web Services, Part 2: Programming Patterns to Build Asynchronous Web Services”
Holt Adams
IBM developerWorks white paper (June 2002) http://www-106.ibm.com/developerworks/library/ws-asynch2/index.html
“Introducing the Web Services Enhancements 2.0 Messaging API” Aaron Skonnard
MSDN Magazine (September 2003) http://msdn.microsoft.com/msdnmag/issues/03/09/XMLFiles/
232 A P P E N D I X ■ R E F E R E N C E S
WS-Routing and WS-Referral
“Routing SOAP Messages with Web Services Enhancements 1.0” Aaron Skonnard
MSDN white paper (January 2003) http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnwse/html/
routsoapwse.asp
WS-Reliable Messaging
“Web Services Reliable Messaging”
IBM developerWorks specification (March 2004, updated February 2005) http://www-106.ibm.com/developerworks/webservices/library/ws-rm/
“Reliable Message Delivery in a Web Services World: A Proposed Architecture and Roadmap” IBM Corporation and Microsoft Corporation
MSDN white paper (March 2003) http://msdn.microsoft.com/webservices/webservices/understanding/advancedwebservices/
default.aspx?pull=/library/en-us/dnglobspec/html/ws-rm-exec-summary.asp
Windows Communication Foundation (Indigo)
“Introduction to Building Windows Communication Foundation Services” Clemens Vasters
MSDN white paper (September 2005) http://msdn.microsoft.com/webservices/indigo/default.aspx?pull=/library/en-us/
dnlong/html/introtowcf.asp
Windows Communication Foundation articles and white papers Resources page http://wcf.netfx3.com/content/resources.aspx
“A Guide to Developing and Running Connected Systems with Indigo” Don Box
MSDN Magazine (January 2004) http://msdn.microsoft.com/msdnmag/issues/04/01/Indigo/
“Creating Indigo Applications with the PDC Release of Visual Studio .NET Whidbey” Yasser Shohoud
MSDN white paper (January 2004) http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnlingo/html/
indigolingo01062004.asp
A P P E N D I X ■ R E F E R E N C E S |
233 |
Miscellaneous
MSDN Web Services Books
List of books on building Web services using .NET in particular http://msdn.microsoft.com/webservices/understanding/books/default.aspx
Discussions in .NET Framework Web Services Enhancements MSDN Newsgroups
http://msdn.microsoft.com/newsgroups/default.aspx?dg=microsoft.public.
dotnet.framework.webservices.enhancements
“Orchestrating XML Web Services and Using the Microsoft .NET Framework with Microsoft BizTalk Server”
Ulrich Roxburgh
MSDN white paper (February 2002) http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnbiz2k2/html/
bts_wp_net.asp
“Accessing Custom Attributes”
.NET Framework Developer’s Guide MSDN articles
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/cpguide/html/ cpconaccessingcustomattributes.asp
Index
A
abstract description elements, 16 Action class, 176
Active Directory Kerberos ticket security tokens, 135
Add Web Reference Wizard autogenerating proxy class, 72, 99
Address class, 176
addressing WSspecifications, 13 addressing classes, 175–176 Addressing property
SoapContext class, 92 AddressingFault class, 176 AddressingHeaders class, 176 AnonymousForCertificateSecurity
assertion, 118 AppDomain class
SetPrincipalPolicy() method, 155
.asmx pages, preparing for WCF, 220 ASP.NET
and asynchronous communication pattern, 170
communication models, 170 hosting environments supported by
WCF, 212
setting permissions with X.509 Certificate Tool, 103–105
Web service technology extended by WCF, 220
working with WSE, 91–94 assemblies
business assembly, 61, 66–68, 80–81 type definition assembly, 61, 64–66
asymmetric encryption, 100, 108 asynchronous communication, 170, 172 authentication, 107
WS-Security specification, 108
authentication models, 133 brokered authentication, 135–137
implementation using Kerberos, 146–158
implementation using Mutual Certificates, 137–145
direct authentication, 133–135 Authentication Service, 146–147 authenticator, 146 authorization, 107, 130
code-based authorization, 131–132 declarative authorization, 131
B
<binding> element, 21–22
concrete implementation elements, 17
Binding property SoapDocumentMethod attribute, 43
Body property SoapEnvelope class, 179
brokered authentication, 135 advantages and disadvantages,
136–137 implementation options, 137 implementation with Mutual
Certificates, 137–145 implementing with Kerberos, 146–158
business assembly
calling service agent, 80–81 creating, 61, 66–68
importing into Web service, 62 business layer, encapsulates service
interfaces, 7 business facade
Web services architecture, 9–10
235