Re: [ljc] SOAP web services vs. simpler RESTful

From: Kevin W.
Sent on: Monday, January 7, 2013 10:19 AM
Not so.

All you need to do is supply the relevant CORS headers for your service -

A few lines of code in a servlet filter will suffice.  It's also available through an easy to use mechanism in a great many frameworks (this is true in the Scala ecosystem, anyway)

Again… This is a domain/url based mechanism, and so will play along very nicely with any DNS-based resource discovery - allowing you to restrict the allowed origins to something less than the entire internet :)

JsonP is neither required, nor recommended.

On 7 January[masked]:02, Peter Reisinger <[address removed]> wrote:
just one think about "rest - easier to access from javascript", keep in mind that if you want to call something from javascript it has to be on the same host (or you would have to use jsonp), so you would need some server side proxy.

On Sun, Jan 6, 2013 at 7:56 PM, Abraham Marín Pérez <[address removed]> wrote:
Hello everyone,

We've been having a bit of an architectural discussion to choose the right technology to implement some web services and I would appreciate any thoughts any of you could have on it. I'll try and explain the scenario as thoroughly as possible and the reasons why we can't decide between the different options, but please do ask if anything isn't clear.

We are preparing a new web application for a retail environment, the application won't be accessed by final customers but by shop staff; shop staff will use both a standard PC and a tablet to access the web application.

Although most of the information needed by the web app is held centrally and hence it is accessible by the web server, some information is specific to the shop and is stored within other machines in the very shop itself, which means the web application needs some means of local communication. We don't want the central server to know the configuration of each individual shop and we want to avoid manual configuration in each shop, so we're seeking a way in which the web application can automatically find the necessary local services.

From here we thought of several options.


The in-shop machines offer a web service API and the web application is accessed from a browser that is embedded on a thin, native application. The web application communicates with thin native application (the wrapper) by means of JavaScript, and the wrapper will marshal the calls to the in-shop machines, making the web application independent from the shop configuration. The wrapper finds the in-shop services by means of a discovery protocol, which leads us to two suboptions:


Web services are implemented in SOAP, which includes a discovery protocol that is handled by the wrapper app.


Web services are implemented in simpler RESTful (eg a URL get API), and a different technology is used for discovery protocol (like UPnP, also handled by wrapper app). This makes the web services simpler but adds the need of another technology.


In-shop machines still offer a web service API, but there will be no wrapper application. Instead, the JavaScript in the web application will participate in the discovery protocol itself and will contact the other local machines. This eliminates the need of a local, native app simplifying deployments, but includes potential CORS conflicts and makes testing a bit trickier. In addition to this, the two suboptions about SOAP or simpler RESTful remain:


Web services in SOAP, which requires only one technology but may be too complex a protocol to be managed from JavaScript


Web services in RESTful, easier to access from JavaScript but then need to implement UPnP or other in JS.


Remove the wrapper application and discovery protocol and hard-code the IPs for the local services so these are known by the central web server. This may not render possible since we haven't got confirmation at this point that we can force the same hard-coded IPs in all shops, but assuming it is possible then the same two subtoptions appear.


Web services in SOAP, maybe a bit of an overkill since discovery is not needed now.


Web services in RESTful, easier to access from JS but again the potential CORS conflict.

I think that's pretty much it, thoughts and comments greatly appreciated.


Twitter: @AbrahamMarin

Our Sponsors

  • Our Blog

    Read the latest news from the LJC

  • RecWorks Ltd

    Fixing Tech Recruitment using the Power of Community

  • jClarity

    Java/JVM Performance Analysis Tools & mentoring for Java related matters

  • LJC Aggrity

    Our LJC Aggrity site contains blog posts from our members

  • LJC Book Club

    Our Book club with book reviews from our members

  • Devoxx UK

    Java Community Conference, in collaboration with the LJC 12/13 Jun 14

  • SkillsMatter

    "Host, help organise, promote, film many of our meetings."

  • New Relic

    New Relic makes sense of billions of metrics a day in real time.

  • Hazelcast

    Hazelcast is the leader in operating in-memory computing.

  • Java.Net

    We are an official Java User Group recognised by Oracle's JUG program

  • JRebel

    Free 3 month J-Rebel license.

  • O'Reilly

    40% discount on printed books and 50% on e-books.

People in this
Meetup are also in:

Sign up

Meetup members, Log in

By clicking "Sign up" or "Sign up using Facebook", you confirm that you accept our Terms of Service & Privacy Policy