4 Replies Latest reply on Mar 28, 2019 1:05 PM by svalesmu

ORDS database authentication - only for plsql gateway?

Vanja Keglević Feb 19, 2019 8:10 PM

Hello,

is ORDS database authentication only intended to be a replacement for the old plsql web gateway? https://docs.oracle.com/en/database/oracle/oracle-rest-data-services/18.4/aelig/developing-REST-applications.html#GUID-BA4F699C-A1F9-4306-A5BE-CE30FBBB876A

e.g. could you use it for ORDS modules, ORDS auto sql and plsql? I assume no.

Initially I thought it could be used for all ORDS functionalities, without the need to use the (for me at least) complicated OAuth.

If so, does anybody know a simple way to use database users to authenticate and authorize to ORDS web services?

Thanks in advance,

Vanja

1. Re: ORDS database authentication - only for plsql gateway?

thatJeffSmith-Oracle Feb 20, 2019 12:05 AM (in response to Vanja Keglević)

It should be avoided whenever possible, but it works for REST enabled SQL
Like Show 0 Likes(0)

Actions
2. Re: ORDS database authentication - only for plsql gateway?

Vanja Keglević Feb 20, 2019 11:31 AM (in response to Vanja Keglević)

My requirement is to have a simple way to manage ORDS users and their roles and privileges, and have a simple (e.g. basic) authentication scheme to my ORDS web service.
What I've found so far, haven't tried it though, it requires also having APEX installed, is to use APEX users to access ORDS web services:
https://ruepprich.wordpress.com/2017/07/25/apex-basic-rest-authentication/
Like Show 0 Likes(0)

Actions
3. Re: ORDS database authentication - only for plsql gateway?

Vanja Keglević Feb 20, 2019 2:18 PM (in response to Vanja Keglević)

Unfortunately no, I can't get successful authentication with an Apex user. I tried following the instructions from the link in the post before, I have an ordinary Apex user, and a workspace developer/administrator (which has an ORDS module). I assigned the "RESTful services" group to the ordinary user, created a privilege on the ORDS module which has the "RESTful services" role. When I try accessing the web service, with basic authentication, I get HTTP 401.
Any ideas why this doesn't work?
Like Show 0 Likes(0)

Actions
4. Re: ORDS database authentication - only for plsql gateway?

svalesmu Mar 28, 2019 1:05 PM (in response to Vanja Keglević)

Hello Vanja,

Not sure if I'm already too late:

java -jar ords.war user XXX "RESTful Services"

Where XXX is the user you would like to create. Of course this way ORDS and APEX would not be linked in the sense that if you change the APEX password, you'll have to do the same in ORDS.

Supposedly, starting ORDS 18.2, APEX and ORDS users may be linked, and in fact I actually tested, but I'm currently testing an ORDS 18.4 and it seems that this limitation has come back, or maybe I'm missing something.

I'll keep looking, but in the meantime, hope it helps.

Regards,
Sergio
Like Show 0 Likes(0)

Actions

Go to original post