Designing Enterprise Applications with the J2EE™ Platform

Inderjeet Singh is lead architect on the Java BluePrints Team, where he works with other architects and engineers to define best uses of Java technologies for application design. Beth Stearns is the principal partner of ComputerEase Publishing, a computer consulting firm she founded in 1982. Among her publications are Java Native Interface in The Java Tutorial Continued (Addison-Wesley), “The EJB Programming Guide” for Inprise Corporation, and “ Understanding EDT, ” a guide to Digital Equipment Corporation's text editor. Mark Johnson is an enterprise computing consultant and author. 0201787903AB09232002

Foreword.


Preface.


About the Authors.


1. Introduction.


Challenges of Enterprise Application Development.



Programming Productivity.



Integration with Existing Systems.



Freedom of Choice.



Response to Demand.



Maintaining Security.



The Platform for Enterprise Solutions.



J2EE Platform Overview.



J2EE Platform Benefits.



J2EE Application Scenarios.



Multitier Application Scenario.



Stand-Alone Client Scenario.



Web-Centric Application Scenario.



Business-to-Business Scenario.



How This Book Is Organized.



Summary.



References and Resources.



2. J2EE Platform Technologies.


Component Technologies.



Types of J2EE Clients.



Web Components.



Enterprise JavaBeans Components.



Components, Containers, and Services.



Platform Roles.



J2EE Product Provider.



Application Component Provider.



Application Assembler.



Deployer.



System Administrator.



Tool Provider.



Platform Services.



Naming Services.



Deployment Services.



Transaction Services.



Security Services.



Service Technologies.



JDBC API.



Java Transaction API and Service.



Java Naming and Directory Interface.



J2EE Connector Architecture.



Java API for XML Processing Technology.



Communication Technologies.



Internet Protocols.



Remote Method Invocation Protocols.



Object Management Group Protocols.



Messaging Technologies.



Data Formats.



Summary.



References and Resources.



3. The Client Tier.


Client Considerations.



Network Considerations.



Security Considerations.



Platform Considerations.



General Design Issues and Guidelines.



Design Issues and Guidelines for Browser Clients.



Presenting the User Interface.



Validating User Inputs.



Communicating with the Server.



Managing Conversational State.



Design Issues and Guidelines for Java Clients.



Presenting the User Interface.



Validating User Inputs.



Communicating with the Server.



Managing Conversational State.



Summary.



References and Resources.



4. The Web Tier.


The Purpose of the Web Tier.



Web-Tier Technologies.



Traditional Web-Tier Technologies.



Web-Tier Technologies in the J2EE Platform.



The Web Container.



Java Servlets.



JavaServer Pages (JSP) Technology.



Web-Tier Technology Guidelines.



Web-Tier Application Structure.



Web-Tier Application Framework Design.



Structuring the Web Tier.



Web-Tier MVC Controller Design.



Web-Tier MVC View Design.



Web-Tier MVC Model Design.



Web Application Frameworks.



Separating Business Logic from Presentation.



Web-Tier State.



Distributable Web Applications.



Summary.



References and Resources.



5. The Enterprise JavaBeans Tier.


Business Logic and Business Objects.



Common Requirements of Business Objects.



Enterprise Beans as J2EE Business Objects.



Enterprise Beans and EJB Containers.



Remote and Local Client Views.



Guidelines for Using Local or Remote Client Views.



Entity Beans and Local Client Views.



Entity Beans.



Guidelines for Using Entity Beans.



Entity Bean Persistence.



When to Use Bean-Managed Persistence.



Session Beans.



Stateful Session Beans.



Stateless Session Beans.



Message-Driven Beans.



Uses of Message-Driven Beans.



Example: Invoice Message-Driven Bean.



Design Guidelines.



Remote versus Local Client Access for Entity Beans.



Session Beans as a Facade to Entity Beans.



Fine-Grained versus Coarse-Grained Object Access.



Master-Detail Modeling Using Enterprise Beans.



Data Access Objects.



Implementing an Entity Bean without a Create Method.



Representing References to Entity Beans.



Portability Guidelines.



Typecast Remote References.



Mark Non-Serializable Fields Transient.



Bean-Managed Persistence and Portability.



Summary.



References and Resources.



6. Integrating with the Enterprise Information System Tier.


Integration Scenarios.



An Internet E-Store Application.



An Intranet Human Resources Application.



A Distributed Purchasing Application.



An Order Fulfillment Application.



J2EE Integration Technologies.



J2EE Connector Architecture.



Java Message Service API.



JDBC and RDBMS Access.



Application Integration Design Approaches.



Synchronous Integration.



Asynchronous Integration.



Comparing Approaches.



Data Integration.



Developing an Integration Layer.



Programming Access to Data and Functions.



Using Tools for EIS Integration.



Developing EIS Access Objects.



Guidelines for Connection Management.



Security Guidelines.



Summary.



References and Resources.



7. Packaging and Deployment.


Packaging Components.



Roles and Tasks.



Application Component Provider Tasks.



Application Assembler Tasks.



Deployer Tasks.



Packaging J2EE Applications.



EJB Modules.



EJB Module Packaging Guidelines.



Web Modules.



Packaging Components into Web Modules.



Application Client Modules.



Resource Adapter Modules.



Deployment Descriptors.



J2EE Naming Environment.



Specifying Deployment Descriptor Elements.



Naming Convention Recommendations.



Deployment Tools.



Deployment Tool Actions.



Deployment Tool Requirements.



Summary.



References and Resources.



8. Transaction Management.


Transactional Concepts.



ACID Transaction Properties.



Transaction Participants.



Transaction Demarcation.



Distributed Transactions.



Two-Phase Commit Protocol.



J2EE Platform Transactions.



Accessing Multiple Resources within a Transaction.



Transactions across Servers.



J2EE Transaction Technologies.



Client Tier Transactions.



Web Tier Transaction Guidelines.



Enterprise JavaBeans Tier Transactions.



Bean-Managed Transaction Demarcation.



Container-Managed Transaction Demarcation.



Transaction Attributes.



Enterprise JavaBeans Tier Transaction Guidelines.



EIS Tier Transactions.



JTA Transactions.



Resource Manager Local Transactions.



EIS Tier Transaction Guidelines.



Compensating Transactions.



Isolation Level.



Performance with Multiple Resource Managers.



J2EE Resource Manager Types.



JDBC Databases.



JMS Providers.



J2EE Connector Architecture.



Summary.



References and Resources.



9. Security.


Security Threats and Mechanisms.



Authentication.



Protection Domains.



Authentication Mechanisms.



Authentication Call Patterns.



Exposing Authentication Boundaries with References.



Authorization.



Declarative Authorization.



Programmatic Authorization.



Declarative versus Programmatic Authorization.



Isolation.



Affects of Identity Selection.



Encapsulation for Access Control.



Controlling Access to J2EE Resources.



Example.



Protecting Messages.



Integrity Mechanisms.



Confidentiality Mechanisms.



Identifying Sensitive Components.



Ensuring Confidentiality of Web Resources.



Auditing.



Summary.



References and Resources.



10. J2EE Internationalization and Localization.


Internationalization Concepts and Terminology.



Internationalization, Localization, and Locale.



Character Sets.



Encodings.



Using J2SE Internationalization APIs in J2EE Applications.



Resource Bundles.



Message Formatting.



Date Formatting.



Collation.



Web Tier Internationalization.



Tracking Locales and Encodings.



Presentation Component Design.



Internationalizing and Localizing JSP Pages.



EIS Tier Internationalization.



Persistent Localized Data.



Internationalizing Database Schema.



Internationalized Application Design.



Internationalizing Applications with XML.



Generating Localized Dynamic Content with XSLT.



Communicating Locale within an Application.



Communicating Locale among Applications.



Localizing Error and Logging Messages.



Client Messages and Application Exceptions.



System Exceptions and Message Logging.



Summary.



References and Resources.



11. Architecture of the Sample Application.


J2EE Architecture Approaches.



Model-View-Controller Architecture.



J2EE Design Patterns.



Sample Application Overview.



Designing the Sample Application.



Choosing Application Tiers.



Choosing Local or Distributed Architecture.



Architecture of the Sample Application.



Application Web Site Architecture.



Fulfillment Center Architecture.



Summary.



References and Resources.



Afterword.


Glossary.


Index. 0201787903T03252002