Changes for page Web Services-Problems
Last modified by Francis Labrie on 2007/10/15 16:21
From version 4.1
edited by smmccraw
on 2007/07/08 09:46
on 2007/07/08 09:46
Change comment:
There is no comment for this version
To version 7.1
edited by Francis Labrie
on 2007/10/09 13:16
on 2007/10/09 13:16
Change comment:
Layout and content table.
Summary
-
Page properties (3 modified, 0 added, 0 removed)
Details
- Page properties
-
- Title
-
... ... @@ -1,1 +1,1 @@ 1 - Programming__WebObjects-WebServices-Problems1 +Web Services-Problems - Author
-
... ... @@ -1,1 +1,1 @@ 1 -XWiki. smmccraw1 +XWiki.flabrie - Content
-
... ... @@ -1,70 +1,60 @@ 1 -= Problems = 1 +|= Contents 2 +| {{section}} 3 +# [#Problems] 4 +## [#DirectToWebService can't return a WSDL with secure HTTPS references in it] 5 +## [#SOAP serializers and deserializers registered with {{WOWebServiceRegistrar}} class doesn't appear in the WSDL schema] 6 +## [#DirectToWebService can't return a WSDL with custom namespace and definitions name in it] 7 +## [#WOWebServiceClient class can't connect to a server that requires an authentication] 8 +## [#Web Services can't return a WSDL with secure HTTPS references specifying port other than the default 443] 9 +{{/section}} 2 2 11 += Problems = 12 + 3 3 This section describes some problems and bugs that sometimes occur when using //WebObjects Web Services//. 4 4 5 -== DirectToWebService can't return a WSDL with secure HTTPS references in it 15 +== DirectToWebService can't return a WSDL with secure HTTPS references in it == 6 6 7 - **Authors:** Francis Labrie 17 +**Authors:** Francis Labrie 18 +**Affected products:** //WebObjects// 5.2.x, 5.3.x 19 +**Bug reference:** [[rdar://3546304]] 8 8 9 - **Affected products:** //WebObjects//5.2.x, 5.3.x21 +=== Problem: === 10 10 11 - **Bugreference:**rdar:~/~/354630423 +A //DirectToWebService// defined Web Services doesn't return correct WSDL document, even if the correct procedure (see [[Secure Web Services]]) is followed. So only classes oriented Web Services manually registered with the ##com.webobjects.appserver.WOWebServiceRegistrar## class seems to generate a correct WSDL. 12 12 13 -=== Problem:25 +=== Solution: === 14 14 15 - A //DirectToWebService//definedWebServicesdoesn'treturncorrectWSDLdocument,even ifthecorrectprocedure(seeSecure Web Services)isfollowed. So onlyclassesorientedWeb Servicesmanuallyregisteredwiththe{{code}}com.webobjects.appserver.WOWebServiceRegistrar{{/code}}classseemstogenerateacorrect WSDL.27 +Darel Lee from Apple told me that right now, the dynamic WSDL generation is not exposed to developers so there currently isn't a clean solution to perform this. One workaround is to hardcode rules (of ##com.webobjects.directtoweb.Assignment## type) with the ##serviceLocationURL## key for each operation that you want to use secure HTTPS references. For instance: 16 16 17 -=== Solution: === 18 - 19 -Darel Lee from Apple told me that right now, the dynamic WSDL generation is not exposed to developers so there currently isn't a clean solution to perform this. One workaround is to hardcode rules (of {{code}}com.webobjects.directtoweb.Assignment{{/code}} type) with the {{code}}serviceLocationURL{{/code}} key for each operation that you want to use secure HTTPS references. For instance: 20 - 21 -{{panel}} 22 - 23 - {code} 24 - 25 -{{/panel}} 26 - 27 -((operationName="anOperation") and (serviceName="Service")) -> 28 - 29 -{{panel}} 30 - 31 - serviceLocationURL="https://host.net/cgi-bin/Service.woa/ws/Service" 32 - 33 -{{/panel}} 34 - 35 35 {{code}} 36 36 31 +((operationName="anOperation") and (serviceName="Service")) -> 32 + serviceLocationURL="https://host.net/cgi-bin/Service.woa/ws/Service" 37 37 38 -If you need all operation to be called using the secure protocol, you can also define a more generic rule like this one: 39 - 40 - 41 41 {{/code}} 42 42 43 -(serviceName="Service") -> 44 - serviceLocationURL="https:~/~/host.net/cgi-bin/Service.woa/ws/Service" 36 +If you need all operation to be called using the secure protocol, you can also define a more generic rule like this one: 45 45 46 46 {{code}} 47 47 40 +(serviceName="Service") -> 41 + serviceLocationURL="https://host.net/cgi-bin/Service.woa/ws/Service" 48 48 49 -h2. SOAP serializers and deserializers registered with 50 50 {{/code}} 51 51 52 -WOWebServiceRegistrar{{code}} class doesn't appear in the WSDL schema 53 - *Authors:* Francis Labrie 45 +== SOAP serializers and deserializers registered with ##WOWebServiceRegistrar## class doesn't appear in the WSDL schema == 54 54 55 - *Affected products:* _WebObjects_ 5.2.x, 5.3.x 47 +**Authors:** Francis Labrie 48 +**Affected products:** //WebObjects// 5.2.x, 5.3.x 49 +**Bug reference:** [[rdar://3546330]] 56 56 57 - *Bugreference:*rdar://354633051 +=== Problem: === 58 58 53 +Custom SOAP serializers and deserializers registered to Web Services with ##com.webobjects.appserver.WOWebServiceRegistrar## class are never added to the types / schema definition of the WSDL. The only type definitions shown are the following: 59 59 60 -h3. Problem: 61 -Custom SOAP serializers and deserializers registered to Web Services with {{/code}}com.webobjects.appserver.WOWebServiceRegistrar{{code}} class are never added to the types / schema definition of the WSDL. The only type definitions shown are the following: 55 +{{code}} 62 62 63 -{{/code}} 64 - 65 -{{panel}} 66 - 67 - <types> 57 +<types> 68 68 <schema targetNamespace="http://lang.java/" xmlns:soapenc= 69 69 "http://schemas.xmlsoap.org/soap/encoding/" xmlns= 70 70 "http://www.w3.org/2001/XMLSchema"> ... ... @@ -80,7 +80,7 @@ 80 80 </complexContent> 81 81 </complexType> 82 82 <element name="ArrayOf_xsd_any" nillable="true" type= 83 - "lang:ArrayOf_xsd_any"/> 73 + "lang:ArrayOf_xsd_any"/> 84 84 </schema> 85 85 <schema targetNamespace="http://www.apple.com/webobjects/ 86 86 webservices/soap/" xmlns:soapenc="http://schemas.xmlsoap.org/ ... ... @@ -89,7 +89,7 @@ 89 89 <element name="entityName" type="xsd:string"/> 90 90 <element name="primaryKeys" type="lang:ArrayOf_xsd_any"/> 91 91 </complexType> 92 - <element name="EOGlobalID" type="tns:EOGlobalID"/> 82 + <element name="EOGlobalID" type="tns:EOGlobalID"/> 93 93 <complexType name="EOEnterpriseObject"> 94 94 <element name="entityName" type="xsd:string"/> 95 95 <element name="globalID" type="webobjects:EOGlobalID"/> ... ... @@ -98,90 +98,102 @@ 98 98 </schema> 99 99 </types> 100 100 101 -{{/ panel}}91 +{{/code}} 102 102 93 +=== Solution: === 94 + 95 +You must know that all complexe data types referred in operations will be added to the WSDL types definition. But if a complexe type makes references to others complexe types, you should make sure you add proper calls in the ##writeSchema(Types)## method of the class serializer. For example: 96 + 103 103 {{code}} 104 104 99 +public boolean writeSchema(Types types) 100 +throws Exception { 101 + ... 102 + // Add type for Foo 103 + types.writeType(Foo.class, _FooQName); 104 + ... 105 105 106 - h3. Solution:107 - I don't know any dynamic workaround right now... But a static and complete WSDL can be shared through a direct action. It's not very handy though...106 + return true; 107 +} 108 108 109 -h2. DirectToWebService can't return a WSDL with custom namespace and definitions name in it 110 - *Authors:* Francis Labrie 109 +{{/code}} 111 111 112 - *Affectedproducts:*_WebObjects_5.2.x,5.3.x111 +Unfortunately, I don't know a dynamic workaround for all possible cases right now. At least a static and complete WSDL can be shared through a direct action, but it's not very handy though... 113 113 114 - *Bugreference:*113 +== DirectToWebService can't return a WSDL with custom namespace and definitions name in it == 115 115 115 +**Authors:** Francis Labrie 116 +**Affected products:** //WebObjects// 5.2.x, 5.3.x 117 +**Bug reference:** 116 116 117 -h3. Problem: 118 -A _DirectToWebService_ defined Web Services can't return a WSDL with custom values for properties like namespaces and definitions name. Worse, the generated namespace can even contains WebObjects application instance number or the wrong hostname. 119 +=== Problem: === 119 119 120 -h3. Solution: 121 -Base on a tips from Darel Lee, I've found in the 122 -{{/code}} 121 +A //DirectToWebService// defined Web Services can't return a WSDL with custom values for properties like namespaces and definitions name. Worse, the generated namespace can even contains WebObjects application instance number or the wrong hostname. 123 123 124 - com.webobjects.webservices.generation.//private.WOWSDLTemplate{{code}} class some extras key definitions read from theuser.d2wmodel DirectToWebService rule file. For instance:123 +=== Solution: === 125 125 126 -* *serviceLocationURL:* a key that allow the setting of the location URL for an operation. This is usefull if you need your WebServices to be reached using a secure HTTPS reference; 127 -* *WSDLDefinitionName:* a key that allow the definitions name change. So instead of having "ServiceNameDefinition", you can set this value; 128 -* *WSDLTargetNamespace:* a key that allow the namespace change. This is the most usefull: you can avoid dynamic generation depending on WebObjects HTTP Adaptor? with this. 125 +Base on a tips from Darel Lee, I've found in the ##com.webobjects.webservices.generation.private.WOWSDLTemplate## class some extras key definitions read from the ##user.d2wmodel## //DirectToWebService// rule file. For instance: 129 129 127 +* **serviceLocationURL:** a key that allow the setting of the location URL for an operation. This is usefull if you need your WebServices to be reached using a secure HTTPS reference; 128 +* **WSDLDefinitionName:** a key that allow the definitions name change. So instead of having "ServiceNameDefinition", you can set this value; 129 +* **WSDLTargetNamespace:** a key that allow the namespace change. This is the most usefull: you can avoid dynamic generation depending on WebObjects HTTP Adaptor with this. 130 + 130 130 Here is an example of rule definition changing the above values: 131 131 132 -{{/code}} 133 -(serviceName="Service") -> 134 - WSDLTargetNamespace="https:~/~/host.net/cgi-bin/Service.woa/ws/Service" 135 -(serviceName="Service") -> 136 - WSDLDefinitionName="AnotherDefinition" 137 -((operationName="anOperation") and (serviceName="Service")) -> 138 - serviceLocationURL="https:~/~/host.net/cgi-bin/Service.woa/ws/Service"// 139 - 140 140 {{code}} 141 141 142 -h2. WOWebServiceClient class can't connect to a server that requires an authentication (WO 5.2.x, Bug ID 3568441) 143 - *Authors:* Francis Labrie 135 +(se(serviceName="Service") -> 136 + WSDLTargetNamespace="https://host.net/cgi-bin/Service.woa/ws/Service" 137 +(serviceName="Service") -> 138 + WSDLDefinitionName="AnotherDefinition" 139 +((operationName="anOperation") and (serviceName="Service")) -> 140 + serviceLocationURL="https://host.net/cgi-bin/Service.woa/ws/Service" 144 144 145 - *Affected products:* _WebObjects_ 5.2.x, 5.3.x142 +{{/code}} 146 146 147 - *Bug reference:*rdar://3568441144 +== WOWebServiceClient class can't connect to a server that requires an authentication == 148 148 146 +**Authors:** Francis Labrie 147 +**Affected products:** //WebObjects// 5.2.x, 5.3.x 148 +**Bug reference:** [[rdar://3568441]] 149 149 150 -h3. Problem: 151 -The 152 -{{/code}} 150 +=== Problem: === 153 153 154 -com.webobjects.webservices.client.WOWebServiceClient {{code}}class can't connect to a server that requires a Basic HTTP Authentication despite the fact this class offers a way to register a security delegate (see{{/code}}setSecurityDelegateForServiceNamed(Object, String){{code}}instance method).152 +The ##com.webobjects.webservices.client.WOWebServiceClient## class can't connect to a server that requires a Basic HTTP Authentication despite the fact this class offers a way to register a security delegate (see ##setSecurityDelegateForServiceNamed(Object, String)## instance method). 155 155 156 -Normally, the {{/code}}processClientRequest(MessageContext){{code}}delegate method (see{{/code}}com.webobjects.webservices.support.WOSecurityDelegate{{code}}interface documentation) would allow an easy way to set a username and a password to the message context. But there is a problem related to the design of the class: to register a security delegate, the{{/code}}WOWebServiceClient{{code}}class has to fetch the Web Services Definition Language (WSDL) XML document. But to get access to this WSDL, an authentication header must be set. This is the classic chicken and egg problem...154 +Normally, the ##processClientRequest(MessageContext)## delegate method (see ##com.webobjects.webservices.support.WOSecurityDelegateinterface## documentation) would allow an easy way to set a username and a password to the message context. But there is a problem related to the design of the class: to register a security delegate, the ##WOWebServiceClient## class has to fetch the Web Services Definition Language (WSDL) XML document. But to get access to this WSDL, an authentication header must be set. This is the classic chicken and egg problem... 157 157 158 -h3. Solution: 159 -The best would be to add a default method to {{/code}}WOWebServiceClient{{code}} class to register a default security delegate that is not related to a service name before the class fetch the WSDL. But unfortunately, all key methods that would allow this kind of behavior change are privates, so subclassing is not a solution... 156 +=== Solution: === 160 160 161 - But aworkaround isstillpossible:158 +The best would be to add a default method to ##WOWebServiceClient## class to register a default security delegate that is not related to a service name before the class fetch the WSDL. But unfortunately, all key methods that would allow this kind of behavior change are privates, so subclassing is not a solution... 162 162 163 -# Fetch the WSDL document yourself and store it to the local filesystem, using the java.net.URL instance and setting up the Basic HTTP Authentication header field of the {{/code}}java.net.URLConnection{{code}} yourself; 164 -# Instanciate another {{/code}}java.net.URL{{code}} class that refer to the local WSDL document file; 165 -# Instanciate the {{/code}}com.webobjects.webservices.client.WOWebServiceClient<>code> class using the file URL; 160 +But a workaround is still possible: 166 166 162 +1. Fetch the WSDL document yourself and store it to the local filesystem, using the java.net.URL instance and setting up the Basic HTTP Authentication header field of the ##java.net.URLConnection## yourself; 163 +1. Instanciate another ##java.net.URL## class that refer to the local WSDL document file; 164 +1. Instanciate the ##com.webobjects.webservices.client.WOWebServiceClient## class using the file URL; 167 167 1. Set for each service a security delegate that will add the proper credential information for the Basic HTTP Authentication. 168 168 169 169 That's it. It looks like a big hack, but it works... 170 170 171 -~=== Web Services can't return a WSDL with secure HTTPS references specifying port other than the default 443 === 172 -~: '''Authors:''' Francis Labrie<br> 173 -~: '''Affected products:''' ''WebObjects'' 5.2.x, 5.3.x<br> 174 -~: '''Bug reference:''' rdar:~/~/4196417<br> 169 +== Web Services can't return a WSDL with secure HTTPS references specifying port other than the default 443 == 175 175 176 -~==== Problem: ==== 171 +**Authors:** Francis Labrie 172 +**Affected products:** //WebObjects// 5.2.x, 5.3.x 173 +**Bug reference:** [[rdar://4196417]] 174 + 175 +=== Problem: === 176 + 177 177 HTTPS protocol references can be published in Web Services WSDL. But unfortunately, WebObjects seems to ignore ports other than the default 443. 178 178 179 -This problem is related to the bad way <code>com.webobjects.appserver.WORequest{{code}}build the URL prefix: if the protocol is secure and no port (i.e. 0) is set when calling the{{/code}}//completeURLPrefix(StringBuffer,boolean,int){{code}}method, the port will always be 443. Unfortunately, Web Services{{/code}}com.webobjects.appserver.//private.WOWebService{{code}}class seems to call this method without setting the port number.179 +This problem is related to the bad way ##com.webobjects.appserver.WORequest## builds the URL prefix: if the protocol is secure and no port (i.e. 0) is set when calling the ##//completeURLPrefix(StringBuffer, boolean, int)//##// method, the port will always be 443. Unfortunately, Web Services ##com.webobjects.appserver.##//##private.WOWebService## class seems to call this method without setting the port number. 180 180 181 -h3. Solution: 182 -To work around this bug, you can subclass the {{/code}}com.webobjects.appserver.WORequest{{code}} class like this: 181 +=== Solution: === 183 183 184 -{{/code}} 183 +To work around this bug, you can subclass the ##com.webobjects.appserver.WORequest## class like this: 184 + 185 +{{code}} 186 + 185 185 package com.smoguli.appserver; 186 186 187 187 import com.webobjects.appserver.WORequest; ... ... @@ -188,63 +188,51 @@ 188 188 import com.webobjects.foundation.NSData; 189 189 import com.webobjects.foundation.NSDictionary; 190 190 191 -/ 192 - 193 -{{panel}} 194 - 193 +/** 195 195 * This class provide fixed {@link com.webobjects.appserver.WORequest} methods. 196 196 * To use it, just overload the {@link com.webobjects.appserver.WOApplication. 197 - * createRequest(String,String,String,NSDictionary,NSData,NSDictionary)} method 196 + * createRequest(String,String,String,NSDictionary,NSData,NSDictionary)} method 198 198 * to instanciate this class instead. 199 199 * 200 - * @author 199 + * @author Francis Labrie <francis.labrie at smoguli.com> 201 201 */ 202 - 203 -{{/panel}} 204 - 205 205 public class WOFixedRequest extends WORequest { 206 206 207 - / 203 + /** 204 + * @see com.webobjects.appserver.WORequest#WORequest(String,String,String, 205 + * NSDictionary,NSData,NSDictionary) 206 + */ 207 + public WOFixedRequest(String method, String url, String httpVersion, NSDictionary headers, NSData content, NSDictionary info) { 208 + super(method, url, httpVersion, headers, content, info); 209 + } // WOFixedRequest 208 208 209 -* @see com.webobjects.appserver.WORequest#WORequest(String,String,String, 210 -* NSDictionary,NSData,NSDictionary) 211 - **/ 212 - public WOFixedRequest(String method, String url, String httpVersion, NSDictionary headers, NSData content, NSDictionary info) { 213 - super(method, url, httpVersion, headers, content, info); 214 - } ~/~/ WOFixedRequest** 211 + /** 212 + * This method builds the URL prefix into the <code>urlPrefix</code> buffer 213 + * with the appropriate protocol (<code>http</code> or <code>https</code>) 214 + * and the right TCP port. But unlike the {@link com.webobjects.appserver. 215 + * WORequest#_completeURLPrefix(StringBuffer,boolean,int} method, it 216 + * supports secure HTTP protocol (<code>https</code>) with port other than 217 + * <code>443</code>, even if the <code>port</code> parameter is set 218 + * <code>0</code>. 219 + * 220 + * @param urlPrefix the buffer that receives the contructed URL. 221 + * @param isSecure a flag indicating if the protocol is secure. 222 + * @param port the port number. 223 + */ 224 + public void _completeURLPrefix(StringBuffer urlPrefix, boolean isSecure, int port) { 225 + if(isSecure && (port == 0)) { 226 + String serverPort; 215 215 216 - / 228 + serverPort = _serverPort(); 229 + if((serverPort != null) && !serverPort.equals("443")) { 230 + try { 231 + port = Integer.parseInt(serverPort); 232 + } catch(NumberFormatException exception) {} // catch 233 + } // if 234 + } // if 217 217 218 -* This method builds the URL prefix into the <code>urlPrefix</code> buffer 219 -* with the appropriate protocol (<code>http</code> or <code>https</code>) 220 -* and the right TCP port. But unlike the {@link com.webobjects.appserver. 221 -* WORequest#//completeURLPrefix(StringBuffer,boolean,int} method, it // 222 -* supports secure HTTP protocol (<code>https</code>) with port other than 223 -* <code>443</code>, even if the <code>port</code> parameter is set 224 -* <code>0</code>. 225 - 226 -* @param urlPrefix the buffer that receives the contructed URL. 227 -* @param isSecure a flag indicating if the protocol is secure. 228 -* @param port the port number. 229 - **/ 230 - public void //completeURLPrefix(StringBuffer urlPrefix, boolean isSecure, int port) { 231 - if(isSecure && (port == 0)) { 232 - String serverPort;//** 236 + super._completeURLPrefix(urlPrefix, isSecure, port); 237 + } // _completeURLPrefix 238 +} // WOFixedRequest 233 233 234 - serverPort = //serverPort(); 235 - if((serverPort [[image:= null) &&]]serverPort.equals("443")) { 236 - try { 237 - port = Integer.parseInt(serverPort); 238 - } catch(NumberFormatException exception) {} ~/~/ catch 239 - } ~/~/ if 240 - } ~/~/ if// 241 - 242 - super.//completeURLPrefix(urlPrefix, isSecure, port); 243 - } ~/~/ //completeURLPrefix 244 -} ~/~/ WOFixedRequest 245 - 246 -{{code}} 247 - 248 - 249 -Category:WebObjects 250 250 {{/code}}