Technical Information



Similar documents
e-filing Secure Web Service User Manual

The following is intended to outline our general product direction. It is intended for information purposes only, and may not be incorporated into

GetLibraryUserOrderList

MINISTRY OF FINANCE SYSTEM INTEGRATION PLAN ATTACHMENT NR 2 SEAP XML SPECIFICATION WEBSERVICE INTERFACE FOR EXTERNAL SYSTEMS PROJECT ECIP/SEAP

HireRight Integration Platform and API: HireRight Connect. Third Party Developer Guide

Digital Signature Web Service Interface

Copyright 2012, Oracle and/or its affiliates. All rights reserved.

Java Security Web Services Security (Overview) Lecture 9

Home Network Administration Protocol (HNAP) Whitepaper

HTTP and HTTPS Statistics Services

How to consume a Domino Web Services from Visual Studio under Security

Next Generation Mobile Technology & Standardization Conference OMA Strategy on Open API Standardization

Creating a Secure Web Service In Informatica Data Services

EUR-Lex 2012 Data Extraction using Web Services

Mobility Information Series

webcrm API Getting Started

MAGEJAM PLUGIN INSTALLATION GUIDE

Secure XML API Integration Guide. (with FraudGuard add in)

WEB SERVICES. Revised 9/29/2015

Easy CramBible Lab DEMO ONLY VERSION Test284,IBM WbS.DataPower SOA Appliances, Firmware V3.6.0

Web Service Facade for PHP5. Andreas Meyer, Sebastian Böttner, Stefan Marr

Web Services Description Language (WSDL) Wanasanan Thongsongkrit

Developing Java Web Services

vcommander will use SSL and session-based authentication to secure REST web services.

PowerCenter Real-Time Development

Integration of Hotel Property Management Systems (HPMS) with Global Internet Reservation Systems

ATWD XML Web Service Handbook

Server based signature service. Overview

HOST EUROPE CLOUD STORAGE REST API DEVELOPER REFERENCE

17 March 2013 NIEM Web Services API Version 1.0 URI:

SOAP WSDL & HTTP MIME REST Web Services Companion Guide HIPAA Operating Rules (HOpR) CORE Phase II

The BritNed Explicit Auction Management System. Kingdom Web Services Interfaces

United Concordia (UCD) Real Time Claim Submission & Adjudication Connectivity Specifications

HireDesk API V1.0 Developer s Guide

Securing Web Services Using Microsoft Web Services Enhancements 1.0. Petr PALAS PortSight Software Architect

TARGETPROCESS WEB SERVICES GUIDE

Q Lately I've been hearing a lot about WS-Security. What is it, and how is it different from other security standards?

Developer Guide to Authentication and Authorisation Web Services Secure and Public

Curtis Mack Looking Glass Analytics

The OMA Perspective On SOA in Telecoms

Most common problem situations in direct message exchange

SmarterMeasure Inbound Single Sign On (SSO) Version 1.3 Copyright 2010 SmarterServices, LLC / SmarterServices.com PO Box , Deatsville, AL 36022

CICS Web Service Security. Anthony Papageorgiou IBM CICS Development March 13, 2012 Session: 10282

Grid Computing. Web Services. Explanation (2) Explanation. Grid Computing Fall 2006 Paul A. Farrell 9/12/2006

CONTRACT MODEL IPONZ DESIGN SERVICE VERSION 2. Author: Foster Moore Date: 20 September 2011 Document Version: 1.7

Authentication and Single Sign On

Twinfield Single Sign On

ITS. Java WebService. ITS Data-Solutions Pvt Ltd BENEFITS OF ATTENDANCE:

Appendix report 1: Syntax and structure of EDIFACT and XML messages Regulation F1:

Salesforce Integration Using PI: How to Perform Query and Other DML Operations Using the Enterprise WSDL

Middleware and the Internet. Example: Shopping Service. What could be possible? Service Oriented Architecture

X Real-Time Claim Submission & Connectivity Specifications. Highmark, Inc. October 1, 2014 Document Version 1.1

Order Notifications - reporting a payment status

Grandstream Networks, Inc.

A Signing Proxy for Web Services Security. Dr. Ingo Melzer RIC/ED

Sending an Image File Through XI in a File-to-Mail Scenario

REST web services. Representational State Transfer Author: Nemanja Kojic

E-invoice manual Instruction for a client implementation of the B2B web service

XML Processing and Web Services. Chapter 17

Replacements TECHNICAL REFERENCE. DTCCSOLUTIONS Dec Copyright 2009 Depository Trust Clearing Corporation. All Rights Reserved.

Message Containers and API Framework

Core Feature Comparison between. XML / SOA Gateways. and. Web Application Firewalls. Jason Macy jmacy@forumsys.com CTO, Forum Systems

Table of contents. 2. Technical details Protocols used Messaging security Encoding Input and output...

The presentation explains how to create and access the web services using the user interface. WebServices.ppt. Page 1 of 14

Sentinel EMS v7.1 Web Services Guide

Using mobile phones to access Web Services in a secure way. Dan Marinescu

Using Web Services to Exchange data with Qualtrics and Hobsons Connect

JobScheduler Web Services Executing JobScheduler commands

XML Character Encoding and Decoding

IBM SPSS Collaboration and Deployment Services Version 6 Release 0. Single Sign-On Services Developer's Guide

CRM On Demand. Oracle Web Services On Demand Guide

CVR Online User Guide. June 2009

Secure Authentication and Session. State Management for Web Services

Overview Document Framework Version 1.0 December 12, 2005

Java Web Services Training

Sage 100 ERP. ebusiness Web Services Installation and Reference Guide

Secure XML API Integration Guide - Periodic and Triggered add in

Lecture Notes course Software Development of Web Services

Magensa Services. Administrative Account Services API Documentation for Informational Purposes Only. September Manual Part Number:

PeopleTools 8.55: Reporting Web Services

What are Web Services? A BT Conferencing white paper

CRM On Demand. Oracle CRM On Demand CTI Developer s Guide

N/A N/A. NA NA N/A 2006 CC-2006: Unknown field name. NA NA N/A 2201 CC-2201: Server unable to allocate required resources. NA NA

Creating Web Services in NetBeans

An Oracle White Paper November Oracle Primavera P6 EPPM Integrations with Web Services and Events

Network Security. Chapter 10. Application Layer Security: Web Services. Part I: Introduction to Web Services

Emerging Technologies Shaping the Future of Data Warehouses & Business Intelligence

ImageNow Message Agent

Attacking WCF Web Services. AppSec DC. The OWASP Foundation. Brian Holyfield Gotham Digital Science

Web Service Description Document

Load Testing SOAs which Utilize Web Services

DocuSign Connect Guide

e-gov Architecture Service Interface Guidelines

T Network Application Frameworks and XML Web Services and WSDL Tancred Lindholm

Web Service Development Using CXF. - Praveen Kumar Jayaram

Transcription:

Technical Information Linkon Web Services Version 0.4.1 Date 2009-09-09 Author Magnus Kling Filename Technical Information About Linkon Web Services.doc

Table of contents 0 Revisions... 3 1 Technical Information About Linkon Web Services... 4 1.1 Host Environment Addresses... 4 1.2 Namespace policy... 4 1.3 Communication Protocol... 4 1.4 Identification... 5 1.4.1 Example Header 5 1.4.2 Reference 5 1.5 Encoding... 5 2

0 Revisions Date Version Section Author Comment 2009-08-26 0.1 - Magnus Kling First draft 2009-08-28 0.2 - Per Lindberger Proposed changes 2009-08-28 0.3 - Magnus Kling Accepted changes. Added section about namespace. 2009-09-02 0.4 1.4.1 Magnus Kling Added example of SOAP-header 2009-09-09 0.41 1.4.1 Per Lindberger Updated section on identification. 3

1 Technical Information About Linkon Web Services 1.1 Host Environment Addresses The URLs used to access Linkon s web services in production usually are of the form https://petra2services.linkon.se/<domain>/<service> For example, https://petra2services.linkon.se/customer/privatecustomerservice or https://petra2services.linkon.se/timetable/timetableservice It may also happen that the URL carries a version indicator at the end as in https://petra2services.linkon.se/timetable/timetableservice/1_2 An automatically generated, reversely engineered WSDL file for each WebService may be found at a similar address by just adding '?wsdl' For example, https://petra2services.linkon.se/extendedcustomer/extendedprivatecustomerservice?wsdl However, it may be better to study and download the original WSDL contracts through the site http://docs.linkon.se The table below indicates where the Linkon web services can be reached in different environments. The environment for system- and integration test (R) is usually the one to use for development activities outside Linkon. Host environment Internal system- and integration test External system- and integration test Acceptance test Test (production-like environment) Production URL https://q.petra2services.linkon.se/<service>/<webservice>[/version] https://r.petra2services.linkon.se/<service>/<webservice>[/version] https://a.petra2services.linkon.se/<service>/<webservice>[/version] https://n.petra2services.linkon.se/<service>/<webservice>[/version] https://petra2services.linkon.se/<service>/<webservice>[/version] 1.2 Namespace policy The namespaces use two version numbers, a major and a minor number. The major number is increased for larger upgrades. The minor number is increased for smaller changes to an interface. This is used to distinguish between incompatible versions of the interfaces. A client upgrading between versions of a web service with different namespaces will at least have to adapt to use the upgraded interface s namespace. The client will obviously also have to implement any other changes in the API that are not backwards compatible. 1.3 Communication Protocol The communication protocol supported by Linkon s web services is SOAP over HTTP with the addition of SSL. All external communication shall thus be performed over HTTPS. 4

1.4 Identification For user authentication a subset of WS-Security is used..a Security/UsernameToken must therefore be supplied in a SOAP header with each request. Along with the UsernameToken another SOAP-header, ClientInformation, must also be supplied. The ClientInformation header typically contains a SalesUnitKey for the requestor and preferences for language (LanguageCode) and perhaps other meta data. 1.4.1 Example Header Normally tooling on the client side will be responsible for producing the actual XML that makes up the SOAP headers. The end result should look something close to this: <soapenv:header> <wsse:security env:mustunderstand='1' xmlns:wsse='http://docs.oasisopen.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd' xmlns:wsu='http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility- 1.0.xsd'> <wsse:usernametoken> <wsse:username>userid</wsse:username> <wsse:password>xxyyzz</wsse:password> </wsse:usernametoken> </wsse:security> <ns2:clientinformation xmlns:ns2='http://petra.linkon.se/commontypes/data/v1_2'> <ns2:salesunitkey>salesunitkey</ns2:salesunitkey> </ns2:clientinformation> </soapenv:header> 1.4.2 Reference For more information regarding WS-Security and UsernameToken, see http://docs.oasis-open.org/wss/v1.1/wss-v1.1-spec-os-soapmessagesecurity.pdf and http://docs.oasis-open.org/wss/v1.1/wss-v1.1-spec-os-usernametokenprofile.pdf 1.5 Encoding The Linkon web services accept the UTF-8 character encoding as reflected by the XML declaration below: <?xml version="1.0" encoding="utf-8"?> 5