Romulus, Java Web Development made productive.

Transcription

1 Romulus, Java Web Development made productive Carlos A. Iglesias Luca Garulli Informática Gesfor (Spain) Asset Data (Italy)

2 Agenda Romulus project First release JavaTeam Wapiti MyCocktail Janiculum - Roma JSPView Conclusions

3 Joe s story: The lead d. A web for managing online product information, just listing and seeing details Umm. I will ask my team and prepare a proposal Ok, nothing fancy, it is a low budget project. Keep it simple

4 Joe s story - Estimation ible project, a web for managing an online catalog, could you please estimate the project size? Why not? Come on guys, this is an important project And there is a new version of it, maybe we find som We will need hibernate caching, requires of expertise we do Well, itfor seems too and easy itbut this is lots not the case And we should migrate the MVC from Struts to Spring or Struts 2

5 Joe s story - Estimation (II) Ok I m getting scared now Hey guys, have you thought that the solut We could find problems with this new technology... So? set up the development and integration environment, design the data model, the MVC, the ORM, prog

6 Joe s Story - Estimation (III) Quit mywith suffering, how Imuch Oh God always the same this people! wish I effort? were a programmer again Come on, this a simple application we are talking about, isn t that way too much? Well, we could make an effort... 5 people and 3 months, but not less Overtimed again always the same with management Can 6 people 3 months And don t forget to add the cost of the s

7 Joe s Story Preparing the proposal Ok, 5 people and 3 months, You're insane! You are going to ruin this! I will say and pray I don t get rejected on the sp Up to you but know we are taking a huge risk

8 Joe s Story Possible ending 1 The customer has accepted only , so be efficient Err.. ok, we will do our best We are doomed Software like box of chocolates, you know w Software is alike bananas, they ripe atnever the custome The baring of aischild takes months, matter man Wenine cannot bendno iron with how our bare w come we lost money AND do not comply with deadlines in every supposedly small easy project you

9 Joe s Story Possible ending 2 We blew it. The customer has accepted another proposal. Joe, can you explain to me how can we be Err did I tell you about the box of chocolates and the nine women?

10 Web Java Development problems trends and issues appear all the time (rich clients, web 2.0, many tools and frameworks much hand-coding many layers much time to do anything

11 Along came Ruby on Rails

12 Lessons learnt from RoR can be easier for programmers is thought by programmers, not companies fighting in the d The magic of Scaffold Automatically generates skeleton for CRUD apps Convention over configuration Instant feedback DRY principle PROBLEM SOLVED

13 RoR Problems uge number of Java developers and production ready Java ocus on web applications; false sense of productivity des what happens inside upport: community, personnel, tools nterprise fear: It is a BIG change!! Too young to be in produc

14 Is there a better solution?

15 Romulus project Seventh Framework Programme for Research and Technological Development: evelopment based on Open Source Java Metaframework for Pragmatic, Reliable and Joint project of Gesfor (ES), Asset Data (IT), DERI (IE), UPM (ES), Liferay (DE), IMOLA (IT) and ICI (RO).

16 Romulus goals opment, focused on Java, based on a metaframework, Domain Driven Developme hup oriented development. nvolving soft goals such as reliability, traceability, security and performance, as we echnologies and scripting languages

17 Security Vertical Demostrators Scalability Testing Mashups Romulus overview Data Enterprise Web Service Portal Methodology & Best Practices IDEs Client Server Scripting Semantic Social Notifier

18 Let s get real Success indicators Reducing time to market Reducing costs Improving quality Let s see how Romulus could have help J

19 Metaframework +DDD + MDA Metaframework: ROMA Integrates key frameworks Uses a set of behaviour interfaces instead of framework APIs directly Allows to select the targeted framework and change it without touching co But allows to exploit the strengths of underlying frameworks The aim is to cover the 80-90% of most common functionalities (the most use The other 10-20% uncovered can be used using the framework implementat Define an agile methodology for web apps based on the metaframework

20 Mashup Oriented Development II MASHUP ORIENTED DEVELOPMENT Library of mashable elements ready to use! IDE plugin for the mashup creation Data-level mashups Integration heterogeneous data sources Mashup web services compose and provide services such as Google Maps / Yaho Portal mashups: services for portlets (comments / ratings, attachments, CMS,...) Enterprise mashups: ESB/JBI integration Mashups Data Enterprise Web Service Portal

21 Romulus projects EndUser Application s Community needs Security needs Producti vity needs Java developers Mashup needs Reliabilit y needs Enterpris e needs

22 MyCocktail Tool for creating mashups based on Afrous Similar to Yahoo Pipes. Full client technology (JavaScript / Ext) Provides: Ability to build (and save) mashups from Amazon, Flickr, Google, Operators to manage JSON Soon: Mashup Editor.

23 MyCocktail

24

25

26

27 MyCocktail Case study Extend Java App functionalities... without programming Video

28 Test scenario: savings Huge saving compared to custom development CRM integration Amazon product info Blog, comments on products Raising widget popularity

29 Wapiti Wapiti. Web Application Security Scanner Project created in 2006 by Nicolas Surribas Written in Python More than 18,700 downloads in sourceforge.net Gesfor joins the project in 2008 within Romulus Refactoring of code, release Wapiti 2.0 Extensibility of attacks; check it with WebGoat Web interface and portal Reporting module Accepted as OWASP project (Open Web Ap. Project) Packaged in Romulus v.1 (JavaTeam)

30 Wapiti Black-box approach Method: fuzz testing Vulnerabilities that it can detect: XSS SQL Injection CRLF Injection Command Execution detection

31 Wapiti

32 Test scenario: savings Solves security issues often unknown for developers (SQL injection, XSS, ) No users access or other security concerns No costly white box / Black box tests Application expertly secured

33 IDE Integration Plug-in Current console functionalities Automatic generation of configuration files Navigation for related resources IDEs Navigation as class hierachy and class outline

34 Test scenario: savings No need to learn new IDEs for each framework Improved efficiency Improved quality (bug control)

35 Roma Janiculum View Roma well known POJO based Java Web Metaframework Default view: Echo2 From Romulus, new modules for Roma: Janiculum, JSPView module of Roma Alpha Liferay Enterprise Portal Server integration Jasper Reporting Tevere Workflow Eclipse plugin (Netbeans coming...)

36 Roma Janiculum JSPView Automatic generation of JSPs Default main-screen.jsp + css Full interface can be configured Modifying main-screen.jsp Modifying default.jsp for one POJO Modifying css Integrated templating mechanism with FreeMaker Automatization of custom JSP generation for POJOs

37 JavaTeam JavaTeam is a forge portal based on Liferay that integrates Romulus tools: MyCocktail (Romulus' mashup builder) Wapiti security test Blog Demo generated by Roma And it works as a collaborative platform: focused on developers (it includes SVN or JIRA portlets) with a social network approach. Developers below to different projects. Like-Facebook functionalities (Wall, Friend's activities...)d b

38 JavaTeam

39 Try it! Install, try... and join Romulus community!!!

40 Summary. Romulus advantages Much less code to write, test, maintain and learn 100% POJO based: easy to understand and maintain Much less tools to learn but total freedom if you want to Secured applications Portlet development faster Mashable elements easily integrable (including portlets) Help in the testing phase, partial automatic tests.

41 Is Romulus the solution? Romulus is not the only effort in this direction (Grails, Dyango, RoR) There are other alternatives for each of the core components Sponsoring by big players (Sun) could change the picture This is a R&D project!

42 Per informazioni Coordinatore: Carlos A. Iglesias Informática Gesfor Avda. Manoteras, Madrid (Spain) WWW: Grazie per l'attenzione!