ORDS 22.1 enabling and protecting instance api?

Paavo

Hi,

how to enable instance api and create a secure system adm role user for it?

java version "17.0.3" 2022-04-19 LTS
ords.installed_version 22.1.0.r1051723

It looks like there isn't instance.api.enabled key?

$ /mypath/22.1.0/bin/ords --config /mypath/221 config info instance.api.enabled

ORDS: Release 22.1 Production on Mon May 02 16:39:25 2022

Copyright (c) 2010, 2022, Oracle.

Configuration:
 /mypath/221/


Setting information from configuration /mypath/221/databases/default

  Setting: instance.api.enabled
Description: The setting named: instance.api.enabled is not known

   Value: None
  Default: None
 Sensitive: No
   Global: No

And when enabled, how to authorize access to this api?

rgrds Paavo

thatJeffSmith-Oracle

create an ords user with the appropriate roles as Kris shows here, the docs however should talk about the security model for these APIs

https://krisrice.io/2021-01-19-Instance-API/

Paavo

Thanx!

Found also this blog : https://peterobrien.blog/2021/10/11/ords-pool-usage-chart-with-apex/ it is neat because it has apex app example. In that blog he claims that the "credentials"-file based user repository is not intended for production use, so somewhat better approach is needed. Hmm :)

btw. the dba/dbactions (sdw/rest) ords stuff are awesome!

rgrds Paavo

Gunther Pippèrr

Hello All,

 after enabling the ORDS Instance API in an ORDS / Tomcat environment (see also the tutorial "How to enable ORDS Instance API ? (Doc ID 2890153.1) in the Support Portal" , I can call the API, but no values are displayed.

 curl --user ORDS_USER:xxxxxx http://<my_server>:8080/ords/_/instance-api/stable/database-pools-cache/

{"items":[], "links":[{"rel": "self", "href": http:// <my_server>:8080/ords/_/instance-api/stable/database-pools-cache/},{"rel": "describedby", "href": http:// <my_server>ords/_/instance-api/stable/metadata-catalog/}]}

 curl --user ORDS_USER:xxxxxx http:// <my_server>:8080/ords/_/instance-api/stable/status

{

 "invalid_pools_count" : 0, "valid_pools_count" : 0,…

}

 But in the DB the pool is visible:

 select count(*) from v$session where username = 'ORDS_PUBLIC_USER';

    COUNT(*)

------------

         10

  

Is there anything more that needs to be set?

 ORDS version "Oracle REST Data Services 22.3.1.r2901647".

Thanks

 Many greetings

Gunther Pippèrr