|
osdir.com mailing list archive F.A.Q. -since 2001! |
|
|
|
Subject: WS-Addressing and URIs - msg#00047List: org.w3c.tag
by Date: Prev Next Date Index by Thread: Prev Next Thread Index
Hi all, I believe there to be a rather large Web-architectural flaw with the recent WS-Addressing submission[1] that I wanted to raise with the TAG. The spec itself covers a lot of ground, but I'm primarily interested in section 2[2], "Endpoint References". As you might expect from the use of the word "reference" (and even the title of the spec, "addressing"), there is considerable overlap with URIs. More specifically, what the WS-Addressing spec appears to be doing is actually *discouraging* the use of URIs for identification, and instead replacing them with an XML document (the EPR). Consider the following example[3] of such a document; <wsa:EndpointReference xmlns:wsa="..." xmlns:fabrikam="..."> <wsa:Address>http://www.fabrikam123.example/acct</wsa:Address> <wsa:ReferenceProperties> <fabrikam:CustomerKey>123456789</fabrikam:CustomerKey> </wsa:ReferenceProperties> <wsa:ReferenceParameters> <fabrikam:ShoppingCart>ABCDEFG</fabrikam:ShoppingCart> </wsa:ReferenceParameters> </wsa:EndpointReference> In that example, the URI "http://www.fabrikam123.example/acct" is used to identify a "gateway" of sorts, beyond which one is left requiring the use of the CustomerKey value for the actual identification of the customer account resource. Can any of the WS-Addressing submitters explain why the customer account isn't just identified by a URI such as this one? http://www.fabrikam123.example/acct/123456789 (I'm ignoring the reference parameter there for the moment since it's role is slightly different than the property, and should not, arguably, be part of the URI) If the issue here is that Web services needs to license a client to peek into an identifier (which seems to be the case, otherwise why would you standardize it?), I would recommend that they define a new URI scheme, say, "epr". This would at least be consistent with the webarch good practice item[4] which states; "Agents making use of URIs SHOULD NOT attempt to infer properties of the referenced resource except as specified by relevant specifications." But on the other hand, I don't see why this licensing is required, and therefore why a relatively opaque http URI wouldn't suffice. Thanks. [1] http://www.w3.org/Submission/2004/SUBM-ws-addressing-20040810/ [2] http://www.w3.org/Submission/2004/SUBM-ws-addressing-20040810/#_Toc77464317 [3] http://www.w3.org/Submission/2004/SUBM-ws-addressing-20040810/#_Toc77464320 [4] http://www.w3.org/TR/webarch/#pr-uri-opacity Mark. -- Mark Baker. Ottawa, Ontario, CANADA. http://www.markbaker.ca
Thread at a glance:
Previous Message by Date:Re: ACTION NW xmlChunk-44: Chunk of XML - Canonicalization and equalityI think Norm and Henry are onto a very important issue regarding Infosets: we should in the Infoset Recommendation do a better job of clarifying consistency constraints or lack thereof. For example, Henry and others seem to have inferred that an Infoset with a Doc Info Item indicating version 1.0 should contain only content serializable as XML 1.0. Norm suggests otherwise. Except insofar as silence indicates lack of a constraint, I think the Infoset Rec. can reasonably be read either way. Indeed, there are other similar and perhaps more insidious points of confusion. I and other members of the SOAP WG were somewhat surprised to be shown that the Infoset Rec. nowhere restricts character [children] to be those allowed in some version of XML. Thus, NULs are allowed in an Infoset by this interpretation, even though no published version of XML allows NUL characters. We had to make a late clarification in some of our SOAP work to handle this (I don't think it made the original Rec., but is in the mill as an erratum, I think.) Yet another question is whether [parent]'s must be present. Some have inferred that an [attribute] is necessarily associated with a parent element, and that both can eventually trace their ancestory to a [document information item], which might in turn provide a constraining XML version. My own reading is that no such constraint is present regarding parents, and that a Rec such as Schema 1.0 that refers only to [Element Information Item]s would need an explicit clarification if all elements to be validated were required to have a doc info ancestor. The point of this note is not to suggest what the constraints answers are, if any, but that the Infoset Recommendation should be clarified. If, as Norm suggests, the intention is indeed to avoid constraints, we should make that clearer. I wonder whether it would then be worth giving a name to Infosets that do after all meet certain common constraints. For example, one might list a set of rules for Infosets "serializable as XML 1.0 documents", "full document infosets" (I.e. those with a [Document Information Item] or some such. We have a number of Recommendations that either create or by implication are capable of using synthetic Infosets that are intended to represent either entire well-formed XML documents or fragments thereof. As it stands, it's a bit tricky to write such Recommendations, and constraints such as "[children] must consist of characters matching the {char} production of XML 1.0" potentially require restatement in each Recommendation. That seems unfortunate. -------------------------------------- Noah Mendelsohn IBM Corporation One Rogers Street Cambridge, MA 02142 1-617-693-4036 -------------------------------------- Next Message by Date:Re: WS-Addressing and URIsQuoting Mark Baker <distobj@xxxxxxx>: > If the issue here is that Web services needs to license a client to > peek into an identifier (which seems to be the case, otherwise why > would you standardize it?), I would recommend that they define a new > URI scheme, say, "epr". This would at least be consistent with the > webarch good practice item[4] which states; > > "Agents making use of URIs SHOULD NOT attempt to infer properties of the > referenced resource except as specified by relevant specifications." > > But on the other hand, I don't see why this licensing is required, and > therefore why a relatively opaque http URI wouldn't suffice. Even in the case of such "licensing", and ignoring the fact that this amounts to building mini-webs that aren't fully built into the web, would they still be unable to use URIs, or even disadvantaged by it. -- Jon Hanna <http://www.hackcraft.net/> "I don't like to LOOK out of the windows even - there are so many of those creeping women, and they creep so fast." - Charlotte Perkins Gilman, _The Yellow Wallpaper_ Previous Message by Thread:Re: ACTION NW xmlChunk-44: Chunk of XML - Canonicalization and equalityI think Norm and Henry are onto a very important issue regarding Infosets: we should in the Infoset Recommendation do a better job of clarifying consistency constraints or lack thereof. For example, Henry and others seem to have inferred that an Infoset with a Doc Info Item indicating version 1.0 should contain only content serializable as XML 1.0. Norm suggests otherwise. Except insofar as silence indicates lack of a constraint, I think the Infoset Rec. can reasonably be read either way. Indeed, there are other similar and perhaps more insidious points of confusion. I and other members of the SOAP WG were somewhat surprised to be shown that the Infoset Rec. nowhere restricts character [children] to be those allowed in some version of XML. Thus, NULs are allowed in an Infoset by this interpretation, even though no published version of XML allows NUL characters. We had to make a late clarification in some of our SOAP work to handle this (I don't think it made the original Rec., but is in the mill as an erratum, I think.) Yet another question is whether [parent]'s must be present. Some have inferred that an [attribute] is necessarily associated with a parent element, and that both can eventually trace their ancestory to a [document information item], which might in turn provide a constraining XML version. My own reading is that no such constraint is present regarding parents, and that a Rec such as Schema 1.0 that refers only to [Element Information Item]s would need an explicit clarification if all elements to be validated were required to have a doc info ancestor. The point of this note is not to suggest what the constraints answers are, if any, but that the Infoset Recommendation should be clarified. If, as Norm suggests, the intention is indeed to avoid constraints, we should make that clearer. I wonder whether it would then be worth giving a name to Infosets that do after all meet certain common constraints. For example, one might list a set of rules for Infosets "serializable as XML 1.0 documents", "full document infosets" (I.e. those with a [Document Information Item] or some such. We have a number of Recommendations that either create or by implication are capable of using synthetic Infosets that are intended to represent either entire well-formed XML documents or fragments thereof. As it stands, it's a bit tricky to write such Recommendations, and constraints such as "[children] must consist of characters matching the {char} production of XML 1.0" potentially require restatement in each Recommendation. That seems unfortunate. -------------------------------------- Noah Mendelsohn IBM Corporation One Rogers Street Cambridge, MA 02142 1-617-693-4036 -------------------------------------- Next Message by Thread:Re: WS-Addressing and URIsQuoting Mark Baker <distobj@xxxxxxx>: > If the issue here is that Web services needs to license a client to > peek into an identifier (which seems to be the case, otherwise why > would you standardize it?), I would recommend that they define a new > URI scheme, say, "epr". This would at least be consistent with the > webarch good practice item[4] which states; > > "Agents making use of URIs SHOULD NOT attempt to infer properties of the > referenced resource except as specified by relevant specifications." > > But on the other hand, I don't see why this licensing is required, and > therefore why a relatively opaque http URI wouldn't suffice. Even in the case of such "licensing", and ignoring the fact that this amounts to building mini-webs that aren't fully built into the web, would they still be unable to use URIs, or even disadvantaged by it. -- Jon Hanna <http://www.hackcraft.net/> "I don't like to LOOK out of the windows even - there are so many of those creeping women, and they creep so fast." - Charlotte Perkins Gilman, _The Yellow Wallpaper_
blog comments powered by Disqus
|
|