Question

GWT RPC is proprietary but looks solid, supported with patterns by Google, and is mentioned by every book and tutorial I’ve seen. Is it really the choice for GWT client/server communcation? Do you use it and if not why and what you chose? I assume that I have generic server application code that can accommodate for RPC, EJBs, web services/SOAP, REST, etc.

Bonus question: any security issues with GWT RPC I need to be aware of?

Answer 1

We primarily use three methods of communications:

1. GWT-RPC – This is our primary and prefered mechanism, and what we use whenever possible. It is the “GWT way” of doing things, and works very well.
2. XMLHttpRequest using RequestBuilder – This is typically for interaction with non-GWT back ends, and we use this mainly to pull in static web content that we need during runtime (something like server side includes). It is useful especially when we need to integrate with a CMS. We wrap our RequestBuilder code in a custom “Panel” (that takes a content URI as its constructor parameter, and populates itself with the contents of the URI).
3. Form submission using FormPanel – This also requires interaction with a non-GWT back end (custom servlet), and is what we currently use to do cross site communications. We don’t really communicate “cross site” per se, but we do sometimes need to send data over SSL on a non-SSL page, and this is the only way we’ve been able to do it so far (with some hacks).