Random Logic l Forum .NET l 2006 1

Web Services Enhancements for Microsoft .NET (WSE)

Forum .NET ● October 4th, 2006

Random Logic l Forum .NET l 2006 2

Agenda

Introduction WSE 3.0 overview WCF in a nutshell Questions

Random Logic l Forum .NET l 2006 3

Introduction

Web service definition –

“A software system designed to support interoperable

machine-to-machine interaction over a network. It has

an interface described in a machine-processable

format.” - W3C

Simple Object Access Protocol (SOAP).

SoapExtension.

Random Logic l Forum .NET l 2006 4

Introduction (cont.)

SOA – Service Oriented Architecture.

An application architecture within which all functions are defined as independent services with well-defined invocable interfaces which can be called in defined sequences to form scientific processes.

Principles: Service reusability Service contract Service loose coupling Service abstraction

Random Logic l Forum .NET l 2006 5

Introduction (cont.)

Soap Message

definition – XML structure which holds a mandatory parent envelope, optional first child header and mandatory next child body.

An envelope to encapsulate data which defines formatting conventions for describing the message contents and routing directions: header and body.

Random Logic l Forum .NET l 2006 6

Introduction (cont.)

WS-* Specifications –

As the Web services market rapidly expanded, the need for advanced standards governing Web services security, reliability, and transactions arose. Microsoft and other vendors across the industry responded to this need by authoring a set of specifications referred to collectively as the WS-* architecture. The goal of these specifications is to provide a blueprint for advanced functionality while retaining the simplicity of basic Web services.

Random Logic l Forum .NET l 2006 7

Introduction (cont.)

WS-* Specifications – cont.

Means of standardizing various pieces of web services.

WSE 3.0 supports the following WS-* specifications. XML, SOAP, WSDL WS-Security WS-Trust WS-SecureConversation WS-Addressing MTOM

Random Logic l Forum .NET l 2006 8

Introduction (cont.)

Security Basics: Problems and Solutions Authentication: Who sent this message?

Credentials, Login/Password, Digital Certificate Authorization: What can this person do?

Use Roles to define privileges Confidentiality: Who can read this message?

Encryption Integrity: Did anyone tamper with this message?

Digital Signature used to compare sent & received message

Random Logic l Forum .NET l 2006 9

WSE 3.0 Overview

WSE Architecture Policy Files MTOM Securing Applications That Use Web Services Resources

Random Logic l Forum .NET l 2006 10

WSE Architecture (1)

Engine for applying advanced Web service protocols to SOAP messages

Random Logic l Forum .NET l 2006 11

WSE Architecture (2)

Message level security End-to-end message security independent

of transport Supports multiple protocols and multiple encryption

technologies Can encrypt parts of the message Sender need only trust ultimate receiver The signature is stored with the data

Direct vs. Brokered authentication. Sending and receiving SOAP Messages using TCP Secure conversation - SCT

Random Logic l Forum .NET l 2006 12

Policy files (1)

Describes requirements for incoming and outgoing messages as policy assertions

Groups of rules applied to messages Define rules applied to outgoing messages Define demands for incoming messages

Defined in code or in configuration Custom Policies - inherit from the Policy class Policy files are simplified

Simplifies security through the turnkey security assertions

Random Logic l Forum .NET l 2006 13

Policy files (2)

TurnkeyAssertionAuthenticationSecurity

UsernameoverCertificateUser login/passwordServer’s X509 Certificate

UsernameOverTransportUser login/passwordSSL

AnonymousOverCertificateAny user with server’s public key

Server’s X509 Certificate

MutualCertificateClient’s X509 Certificate

Server’s X509 Certificate

Kerberos (Windows)Windows login/password

Windows Domain

Random Logic l Forum .NET l 2006 14

MTOM

Send and receive large amounts of data. Improved Performance Secured messaging.

Random Logic l Forum .NET l 2006 15

Securing Applications That Use Web Services Security credentials Encryption Digital signing Use policy for setting security requirements Demo

Random Logic l Forum .NET l 2006 16

WCF (1)

Windows Communication Foundation -

WCF is Microsoft's unified programming model and runtime for building Web services applications with managed code. It extends the .NET Framework with functionality to build secure, reliable, and transacted Web services that interoperate across platforms.

WSE 3.0: The Road to Indigo

Random Logic l Forum .NET l 2006 17

WCF (2)

Random Logic l Forum .NET l 2006 18

WCF (3)

Random Logic l Forum .NET l 2006 19

WCF (4)

Random Logic l Forum .NET l 2006 20

WCF (5)

Random Logic l Forum .NET l 2006 21

WCF (6)

Random Logic l Forum .NET l 2006 22

WCF (7)

Random Logic l Forum .NET l 2006 23

WCF (8)

Random Logic l Forum .NET l 2006 24

WCF (9)

Random Logic l Forum .NET l 2006 25

WCF (10)

[ServiceContract]public interface IMath{

[ OperationContract] int Add(int x, int y);

}//the service class implements the interface

public class MathService : IMath{

public int Add(int x, int y) { return x + y} ;

}

Random Logic l Forum .NET l 2006 26

WCF (11)public class WCFServiceApp{ public void DefineEndpointImperatively() { //create a service host for MathService ServiceHost sh = new ServiceHost(typeof(MathService)); //use the AddEndpoint helper method to //create the ServiceEndpoint and add it //to the ServiceDescription sh.AddServiceEndpoint( typeof(IMath), //contract type new WSHttpBinding(), //one of the built-in bindings "http://localhost/MathService/Ep1"); //the endpoint's address

//create and open the service runtime sh.Open(); } public void DefineEndpointInConfig() { //create a service host for MathService ServiceHost sh = new ServiceHost (typeof(MathService));

//create and open the service runtime sh.Open(); }}

Random Logic l Forum .NET l 2006 27

WCF (12)using System.ServiceModel;//this contract is generated by svcutil.exe//from the service's metadatapublic interface IMath{ [OperationContract] public int Add(int x, int y) { return x + y; }}

//this class is generated by svcutil.exe//from the service's metadata//generated config is not shown herepublic class MathProxy : IMath{ ...}

Random Logic l Forum .NET l 2006 28

WCF (13)public class WCFClientApp{ public void SendMessageToEndpoint() { //this uses a proxy class that was //created by svcutil.exe from the service's metadata MathProxy proxy = new MathProxy();

int result = proxy.Add(35, 7); } public void SendMessageToEndpointUsingChannel() { //this uses ChannelFactory to create the channel //you must specify the address, the binding and //the contract type (IMath) ChannelFactory<IMath> factory=new ChannelFactory<IMath>( new WSHttpBinding(), new EndpointAddress("http://localhost/MathService/Ep1")); IMath channel=factory.CreateChannel(); int result=channel.Add(35,7); factory.Close();

}}

Random Logic l Forum .NET l 2006 29

Resources

WSE home page Dasblonde what's new web services

Random Logic l Forum .NET l 2006 30

Questions?

Thanks!