Applied SOA Patterns on the Oracle Platform电子书

Applied SOA Patterns on the Oracle Platform

Table of Contents

Applied SOA Patterns on the Oracle Platform

Credits

About the Author

About the Reviewers

www.PacktPub.com

Support files, eBooks, discount offers, and more

Why subscribe?

Free access for Packt account holders

Instant updates on new Packt books

Preface

What this book covers

What you need for this book

Who this book is for

Conventions

Reader feedback

Customer support

Downloading the example code

Downloading the color images of this book

Errata

Piracy

Questions

1. SOA Ecosystem – Interconnected Principles, Patterns, and Frameworks

The characteristics, goals, and benefits of SOA

An example of architecting for tactical goals

SOA principles

Standardized service contract

Loose Coupling

Service abstraction

Level of abstraction – granularity and models

Service reusability

Service autonomy

Service statefulness

Service discoverability

Service composability

SOA technology concept

XML

Web Services (WS)

WS transports

Need for the WS-* extensions

SOA standards

Methodology and governance

SOA Repository Artifact Model and Protocol (S-RAMP)

Service definitions, routing, and reliability

WSDL

WS-Addressing

WS-ReliableMessaging

Policy and metadata

WS-MetadataExchange

Standard Business Document Header (SBDH)

WS-Policy

Transaction control and activity coordination

WS-Coordination

Security

Interconnected WS-* standards

SOA frameworks

The Application Business Connector Services framework

The Object Modeling and Design framework

The XML Modeling and Design framework

The Enterprise Business Flows framework

The Enterprise Business Services framework

The Enterprise Service Repository / Inventory framework

SOA Service Patterns that help to shape a Service inventory

Summary

2. An Introduction to Oracle Fusion – a Solid Foundation for Service Inventory

The Oracle SOA technology platform

The Oracle SOA development roadmap – past, present, and future

Oracle SOA frameworks and technology layers

Oracle SOA Foundation – methodology

Enterprise Business Object

Enterprise Business Message

Enterprise Business Services

Application Business Object and Message

Oracle SOA foundation – runtime backbone

The Oracle database

The Oracle application server

The Oracle Rule Engine

Oracle transformation and translation engine

How Oracle products compose the SOA framework

Service creation – Object and XML Design frameworks

Service development – automated test and deployment

Establishing the adapter framework

Providing orchestration – enterprise business flows

Setting up Service Bus – enterprise business services

Discovering enterprise – enterprise service repository

Service governing – monitoring, error handling, and recovering

Securing service interactions – Security Gateway

Summary

3. Building the Core – Enterprise Business Flows

Oracle SOA's dynamic Orchestration platform

The telecommunication primer

Basic facts about the telecommunication enterprise

History of CTU

Technical infrastructure and automation environment

Business goals and obstacles

Oracle Enterprise Business Flows SOA patterns

Establishing a Service Inventory

Initial analysis

A summary of the initial solution

Detailed analysis – functional decomposition

Asynchronous agnostic Composition Controller

Extending the asynchronous agnostic Composition Controller

Usage and limitations of a Mediator as a dynamic router

Dynamic compensations in a simple agnostic controller

The Rule Engine endpoint and decision service

Using Mediator for process discoverability

The Orchestration pattern and embedded Java

Summary

4. From Traditional Integration to Composition – Enterprise Business Services

The Dynamic Service Collaboration platform

Improving the Agnostic Composition Controller

The Proxy design pattern and its relatives

Implementing a basic Proxy on OSB

From Message Broker to Service Broker

A simplified Message Broker implementation

Receive

Transform

Deliver

The pros and cons of a simplified Message Broker

Oracle Enterprise Business Service's SOA patterns

Detailed analysis – functional decomposition

Short summary

Establishing a Service Inventory

Asynchronous Agnostic Composition Controller

Business Delegate (main dispatcher)

Execution plan extraction

Parameter initiation

Main tasks loop

Service invocation

Invoking custom services

Invoking Generic Adapter

Transformation

Validation

Enrich

Operate

Routing to the protocol adapters (delivery)

Conclusion – the pros and cons of OSB Agnostic Composition Controller

Summary

5. Maintaining the Core – Service Repository

Flexible taxonomy for Service Repository

General objectives

Service metadata for Agnostic Composition Controller

Exploring the Oracle Repository's taxonomy

Open standards for the SOA taxonomy

The UDDI taxonomy (V.3) in Oracle OSR

Runtime Discoverability analysis

Runtime lookup

Entity types

Entity types' relations

Decentralized realization

The application project store

Centralized realization

Domain Repository

The Cross-domain Utility layer

The Enterprise Service Repository

Creating a lightweight taxonomy for dynamic service invocations

Service as an entity model

Object

Service/Task

Composition/Process

Rules

Event

Message

The SQL implementation of the service taxonomy (example)

The XML implementation of Execution Plan

Managing Service Repository

Summary

6. Finding the Compromise – the Adapter Framework

Optimizing the Adapter Framework

Logistic primer

Basic facts about the company

RRD history

Technical infrastructure and automation environment

Initial analysis

Refactoring the DB-centric Fusion Application

Events registration

Events filtering

Message construction

Message parsing

Endpoint handling

Enqueue

Dequeue

Conclusion

Establishing the Adapter Framework

Exposing EJB through OSB

Traditional DB Adapter implementation

Dynamic Adapters implementation and DB Transport Adapter

Summary

7. Gotcha! Implementing Security Layers

Where are we now?

Initial analysis

Common SOA vulnerabilities

Error handling vulnerability analysis

Information leakage

Missing error handling

Empty catch block/uncaught exception

Catching NullPointerException

Return inside the finally block

Inappropriate cleaning

Handling dissimilar exceptions in the same block

Authentication and authorization vulnerabilities

Simple authentication protocol

Password system exploits

Authentication decision based on the Referer field

Authentication decision based on the DNS name resolution

Single-factor authentication

Least Privilege Violation

File Access Race Condition

Common SOA risks

Injection

Broken authentication and session management

Cross-site scripting (XSS)

Insecure direct object references

Security misconfiguration

Sensitive data exposure

Missing function-level access control

Cross-site request forgery (CSRF)

Using components with known vulnerabilities

Attack types

Reflection attacks

Identity spoofing

Replay attack

SQL injection

XPATH injection

JSON injection/JavaScript injections

Schema poisoning

Forced browsing

Risk mitigation design rules

Identity management – defending credentials verification systems

Directory services products

Exception shielding – preventing an information leakage

EH05

EH06

Message screening – preventing injection attacks

Oracle Enterprise (API) Gateway

Vendor-neutral (generic) requirements

Performance requirements

Summary

8. Taking Care – Error Handling

Associating SOA patterns with OFM standard tools

Initial analysis

Common requirements

Maintaining Exception Discoverability

Error-handling design rules

Basis for proactive Fault Management

Technical monitoring for proactive Fault Management

OFM Fault Management frameworks

Policy-based handling

Compensative transactions

Exception handling in OSB

Complex exception handling

Automated recovery concepts

Summary

9. Additional SOA Patterns – Supporting Composition Controllers

Processing complex events

Initial analysis

Processing Object Context in business logic events

Case 1 – basic event type

Cases 2 and 3 – complex event type

Realization of business cases using event processing (Rule Engine)

Communication and machine events

Fast events + Big Data

EDN in the SOA stack – a practitioner's approach

High service performance combined with High Availability

Coherence and OSB

Coherence and event processing

Monitoring service activities

Direct integration of BAM and BPEL

The BAM and JMS connection

BAM and the webservice API

SOA as a cloud foundation

Summary

Index