Delphi (Prism) SOAP Web Services
and Security
Adding SOAP Headers, Hashing and HTTPS
Bob Swart (aka Dr.Bob)
Agenda
• SOAP Web Services Security
• Delphi Prism XE ASP.NET Chat Server
• Securing ASP.NET Chat Server
– Using SOAP Headers, Hashing and HTTPS
• Writing ASP.NET Chat Client
– Send Hashed SOAP Headers, using HTTPS
• Writing Delphi XE Win32 Client
– Send SOAP Headers, using HTTPS
SOAP Message
• SOAP Envelope
– SOAP Header
• Header Block
•…
– SOAP Body
• Message Body (Request or Response)
• SOAP Fault (only in case of error)
• Part of W3C standard
Summary
• SOAP Web Services Security
– SOAP Headers
– HTTPS / SSL
– Hash contents of SOAP Header (optional)
• SOAP Web Clients
– ASP.NET client
• Send Hashed SOAP Headers, using HTTPS
– Win32 VCL client
– Send SOAP Headers, using HTTPS
References
• Free recent “Dr.Bob Examines…” articles
– #122: Delphi Prism web chat service (Feb 2010)
• http://www.drbob42.com/examines/examinC2.htm
– #127: Securing chat with SOAP Headers (July 2010)
• http://www.drbob42.com/examines/examinC7.htm
• https://www.bobswart.nl/WebChat (actual chat URL)
• Courseware manuals
– Delphi 2010 XML, SOAP & Web Services manual
(from Lulu.com or as PDF from http://www.eBob42.com/courseware)
– Delphi XE edition coming (free update for PDF customers)
– Delphi Prism Development Essentials
Thank You
Bob Swart
Bob@eBob42.com
www.drbob42.com
Friday, Oct 8, 2010 – 6:00am-6:45am PDT