Difference between Web Services 1.0 standard from 2004 and the 1.1 standard from 2006
siva saran
Greenhorn
Joined: Mar 11, 2007
Posts: 17
posted
0
I have to create some webservices based applications with compatibility for both the 1.0 and 1.1 versions. Though i did a analysis with the documents from the OASIS website i ws not able to infer much from them. Any help in this matter is welcome
Ulf Dittmer
Marshal
Joined: Mar 22, 2005
Posts: 35240
7
posted
0
Which standard are you referring to? There is no one "web services standard"; rather there are a whole bunch of standards related to one another: SOAP, WSDL, WS-Security, UDDI, WS Basic Profile, BPEL, ...
To be more precise ,I am referring to the WS-Security standards.
Ulf Dittmer
Marshal
Joined: Mar 22, 2005
Posts: 35240
7
posted
0
WS-Sec 1.1 is backwards compatible with 1.0, so supporting 1.1 should be sufficient. From the schema I see that there are new elements called "SignatureConfirmation" and "EncryptedHeader"; those must be for new functionality.
siva saran
Greenhorn
Joined: Mar 11, 2007
Posts: 17
posted
0
I checked the schema for 1.1 at http://docs.oasis-open.org/wss/v1.1/oasis-wss-wssecurity-secext-1.1.xsd and found that the namespace wsse has been changed to tns but i see a pretty small schema with the two elements mentioned EncryptedData and SignatureConfirmation. Can i get a complete 1.1 version schema some where the 1.0 version elements have been incuded ie the 1.1 is built over the 1.0 schema
Ulf Dittmer
Marshal
Joined: Mar 22, 2005
Posts: 35240
7
posted
0
The 1.1 schema includes the 1.0 one, so everything that was in 1.0 also is in 1.1.
siva saran
Greenhorn
Joined: Mar 11, 2007
Posts: 17
posted
0
Since 1.1 supports 1.0 also ,in case while verifying the incoming message wont there would be any namespace collisions.
If I am correct the namespace xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"
has been replaced by xmlns:tns='http://docs.oasis-open.org/wss/oasis-wss-wssecurity-secext-1.1.xsd'
So do i have to check the namespaces everytime and then continue my verification process?
I agree. Here's the link: http://ej-technologies/jprofiler - if it wasn't for jprofiler, we would need to
run our stuff on 16 servers instead of 3.
subject: Difference between Web Services 1.0 standard from 2004 and the 1.1 standard from 2006