Consuming Web Services in Microsoft Silverlight 3

Simple Back-End Data Access WCF, SOAP “Data Push” (Server to Client) WCF Mashups (Using REST APIs) REST, XML/JSON, Atom/RSS

System.ServiceModel.CommunicationException: The remote server returned an error: NotFound

Binary XML

“Silverlight-enabled WCF Service” - now Binary by default

Using \"typical\" message payloads HP BL680c: 8 Intel EMT64 cores@2.4GHz Windows Server 2008 64-bit, IIS7 Text / HTTP Web service requests/sec 24% Binary / HTTP 7570 6122 71% 4615 2702 Your mileage may vary 20 objects 100 objects Message size

Using large messages with arrays of \"typical\" data 40% 34% Size reduction 15% Your mileage may vary String Int Large object graph

Attempt #1: Naïve Approach

Attempt #2: Enable Debugging

Error info still not in Silverlight! System.ServiceModel.CommunicationException: The remote server returned an error: NotFound

HTTP 500 HTTP 200 http://code.msdn.com/SilverlightWS

HTTP 200

With Silverlight 3 Faults Support

Example with Cookies + Forms Auth E.g.: ASP.NET login Credentials User: YourDomain.com Password: Auth info (cookie) Service calls + Auth info Browser

Login through Silverlight Call with credentials to YourDomain.com User: ASP.NET Auth Service Password: ASP.NET Reply contains cookie Auth Service Service calls + Auth info Browser

Using Windows Authentication Windows login User: YourDomain.com Password: Service calls + Creds Browser

Cross-Domain Threat MyBank.com Login Credentials User: MyBank.com Password: Auth info (e.g. cookie) Could steal or change data Malicious call + Auth info if protection wasn’t in place Malicious application EvilApps.com

Identity managed by Silverlight, not the Browser YourDomain.com User: Password: Creds are added by Silverlight, not browser No creds EvilApps.com Browser

[OperationContract] public decimal GetAccountBalance (int accountID, string userName, string password);

Default max skew is 5 minutes – may require changes (Client clock can’t be more that 5 minutes out of sync with server)

sl

EndpointAddress address = new EndpointAddress(\"http://example.com/Service1.svc\"); CustomBinding binding = new CustomBinding( new PollingDuplexBindingElement(), new TextMessageEncodingBindingElement( MessageVersion.Soap12WSAddressing10, Encoding.UTF8), new HttpTransportBindingElement());

CallbackContract=… IsOneWay=true GetCallbackChannel

HTML DOM + JavaScript XmlHttpRequest Proxied through a Service

“Paste XML as Serializable Types”

Your feedback is important!

© 2009 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

High-level components and User Code HttpWebRequest Browser Plugin APIs Restrictions Web Browser - Cookies - Authenticated sessions Restrictions - Caching - Proxy server to use Windows/Mac Networking Layer

Client Client Any messages? Server Server App Duplex Duplex App Channel 10-15sec Channel No messages Any messages? Message Message Message Any messages? Client Browser Server

Consuming Web Services in Microsoft Silverlight 3

0 comments

Notes on slide 1

1 Favorite