Friday Mar 28, 2008

Tech Tip: Secure Conversations for Web Services With Metro

Not so secure image

A new Tech Tip written by Jiandong Guo of the Application Server Web Services Security team was just posted. Read the tip and learn the basics of WS-SecureConversation. Also see an example that demonstrates how to enable secure conversations for a web service through the WS-SecureConversation support in Metro. You can find the tip here.

Setting up the infrastructure can be tricky, so if you're getting started with WS-SecureConv, this is a good document to read.

You can get to all the Tech Tips from this site or this blog.

Tuesday Mar 25, 2008

Metro and GlassFish on the road to yet better interop with Microsoft's Web Services stack

connecting wires

The latest stable version of Metro (which ships as part of GlassFish v2) has been extensively tested with Microsoft's WCF (Windows Communication Foundation) version 3.0. The next version of .Net 3.5 is already out and the team is working hard to achieve the best possible interoperability with this new set of WS-\* implementations.

Harold and Rama report on the most recent "plugfest" with Microsoft engineers. The work involves moving from some non-standard technologies (such as WS-ReliableMessaging 1.0 which is "just" a specification, not an open standard) to the OASIS version (OASIS WS-RM 1.1, dated July 2007) for better interoperability. The set of test scenarios is comprehensive and results very promising.

Check out Metro's roadmap here for an idea of when to expect stable releases. In the mean time, you can get the nightly builds.

Tuesday Feb 26, 2008

SOAP Security in GlassFish's Metro

Map of Beijing Metro

Does GlassFish support REST or SOAP Web Services? Both! REST through Jersey and SOAP through Metro (Jersey will be included in a future Metro release, see Roadmap).

Security is very important for SOAP Web Services and Jiandong has a set of notes describing how Metro supports WS-SX (OASIS Web Services Security Exchange). Check out the Overview, How to Issue SAML Tokens and a description of a Scenario based on WS-SX.

Monday Feb 18, 2008

Updated "Java Web Services At A Glance"

We recently realized that our "Web Services" page was pretty out of date. If you're new to Web Services in either Java EE 5 or in GlassFish and you are trying to make sense of Metro, JAX-WS, JAXB, WSIT, or Tango, the new version of that page is now available for you to find all about them.

You may also be interested in the list of Web Services Technical Articles and Tips. I find the Enterprise Tech Tips to be often very well written and straight to the point. Check them out and tell us what other topics you'd like to be covered.

Saturday Jan 19, 2008

New Policy Project in Metro

Statue of Lady Justice

There is now a new Policy subproject of Metro (see Governance email).

Quoting from the project page, the project has two distict goals:

• In the short term, make JAX-WS WS-policy aware by moving out the generic policy code from project Tango.

• In the long term, provide a common, abstract policy API layer. The API design should be independent of any particular policy expression language. Instead it should be use case driven and ease-of-use oriented.

JAX-WS Maven Plugin - New Enterprise Tech Tip

Maven Icon

In an Enterprise Tech Tip, Rama describes how to use the JAX-WS Maven plugin to develop Web services. The article describes why you may be interested in the  plugin:

don't have to get the JAX-WS dependencies, set up the classpath, and configure and invoke the tool tasks for compilation and packaging -- steps required by the Ant tasks.

The different tooling options around Metro are described in an Earlier  Post.

You can also subscribe to the Tech Tips as an RSS feed.

Thursday Jan 17, 2008

JAX-RS and Jersey 0.5 released

Jersey Island

Paul is announcing the availability of JAX-RS v0.5. As with previous releases, this one is synchronized with Jersey v0.5, its Reference Implementation. Traditional delivery vehicles such a the GlassFish Update Center and NetBeans will soon follow (Maven should be already there).

Among new things, Jersey has an improved deployment and configuration process (courtesy of Grizzly and asm) and a rewritten URI dispatching architecture. Paul has more details in his blog entry.

Both the JSR and the reference implementation are developed in a very collaborative way. Schedule leading up to version 1.0 is here.

NOTD: Tango Overview Article Translated in Chinese

Radio Receiver Icon

Overview article about Project Tango (now part of Metro) is now available in Chinese as well. Read it at Sun Developer Network China.

Saturday Jan 05, 2008

Metro 1.1 and GlassFish v2 UR1

Radio Receiver

I posted a tip describing how to override Metro 1.0 in GlassFish v2 UR1 with a more recent Metro 1.1.

Several screencasts are available to get you started with Metro.

Friday Dec 21, 2007

Metro 1.0 and Metro 1.0.1 Released

Radio Receiver Icon

Two New Metro Releases: Metro 1.1 and 1.0.1. Check out

Vivek's Announcement
&bull Last week's note on the Metro Roadmap

Sunday Dec 09, 2007

New Training Classes: WebServices on GlassFish

Student with Teacher

New Java Web Services Instructor-led Training Courses for GlassFish.

Creating Web Services Using Java Technology
Designing Java Web Services
Developing Secure Java Web Services

These courses are for GlassFish v1 but the v2 courses are almost ready.

Thanks to Arun for the tip

Saturday Dec 08, 2007

Running Metro on Sun WebServer 7 Update 1

Informational Sign

A tip from Krishna:
How to Run Metro on Sun WebServer 7 Update 1

This takes advantage that Metro only depends on Servlet 2.4. Thanks to Vivek for the tip

Metro Security - Configuring Kerberos Token Profile and Accessing SAML Assertions

Mosaic of Cerberus - From Valencia, Spain

Two new posts explaining advanced uses of Web Services security in Metro. First Ashutosh explains how to Run a Kerberos Token Profile based WS Security scenario as it was used at the Latest Plugfest at Redmont. This builds on an earlier entry describing earlier entry on the same topic.

Then Kumar shows how to programmatically Access the SAML Assertion in a WSIT Secure Scenario.

Tuesday Nov 20, 2007

JAX-WS - Too convenient to ignore

Map of the Internet

Heard at the JavaPosse Google group:

I think JAX-WS is one of the more amazing hidden secrets of Web Services. I guess because the SOA pushers would find their business collapsing if Web Services became easy, and JAX-WS makes them incredibly easy indeed.

Some might argue that contract-first is the proper methodology for web services, but I myself find JAX-WS too convenient to ignore.

Sunday Nov 18, 2007

GlassFish and NetBeans just works ...

Map of the Internet

Heard on the IBM's DeveloperWorks:

After struggling with Eclipse and WASCE for 1 week, I've moved onto Glassfish and Netbeans.

Let me just say Glassfish and Netbeans just works. I can create JAX-WS and REST web services very easily.

I don't think I'll be touching WASCE for a while.