Authentication - "Invalid Login Credentials" ? ? ?

Question

Hey guys,
Need some help regarding Log in.
I have a table in the database (table name USER_SECURITY) which has the list of users who are authorized to log in to the application.
I have to incorporate this in the application page
Could you please help me with the logic how to go about it in APEX
Thank You for your help and suggestions
Jesh

Answer 1

Hi,
I did try the link and it helped me understand alot, [ http://djmein.blogspot.com/2007/07/custom-authentication-authorisation.html]
and I tried an example as mentioned in Duncan Mein's Blog and it did work, but then when I try to use it in my application and entered the username and password it says *"Invalid Login Credentials".*
Here's the code I used:
The table was already created in the database: ASQ_USER_SECURITY
has four columns: USER_ID, USER_ROLE, USER_NAME, PASSWORD
Created an Application Security Package
CREATE OR REPLACE PACKAGE app_security_pkg
AS
PROCEDURE add_user
p_user_id IN VARCHAR2,
p_user_role IN VARCHAR2,
p_username IN VARCHAR2,
p_password IN VARCHAR2
PROCEDURE login
p_uname IN VARCHAR2
,p_password IN VARCHAR2
,p_session_id IN VARCHAR2
,p_flow_page IN VARCHAR2
FUNCTION get_hash
p_username IN VARCHAR2
,p_password IN VARCHAR2
RETURN VARCHAR2;
PROCEDURE valid_user2
p_username IN VARCHAR2
,p_password IN VARCHAR2
FUNCTION valid_user
p_username IN VARCHAR2
,p_password IN VARCHAR2
RETURN BOOLEAN;
END app_security_pkg;
CREATE PACKAGE BODY
CREATE OR REPLACE PACKAGE BODY app_security_pkg
AS
PROCEDURE login
p_uname IN VARCHAR2
,p_password IN VARCHAR2
,p_session_id IN VARCHAR2
,p_flow_page IN VARCHAR2
IS
lv_goto_page NUMBER DEFAULT 1;
BEGIN
IF UPPER(p_uname) = 'ADMIN'
THEN
lv_goto_page := 1;
ELSE
lv_goto_page := 1;
END IF;
wwv_flow_custom_auth_std.login
p_uname => p_uname,
p_password => p_password,
p_session_id => p_session_id,
p_flow_page => p_flow_page || ':' || lv_goto_page
EXCEPTION
WHEN OTHERS
THEN
RAISE;
END login;
PROCEDURE add_user
p_user_id IN VARCHAR2,
p_user_role IN VARCHAR2,
p_username IN VARCHAR2,
p_password IN VARCHAR2
AS
BEGIN
INSERT INTO app_users (USER_ID,USER_ROLE,USER_NAME, PASSWORD)
VALUES (p_user_id,p_user_role,UPPER (p_username),
get_hash (TRIM (p_username), p_password));
COMMIT;
EXCEPTION
WHEN OTHERS
THEN
ROLLBACK;
RAISE;
END add_user;
FUNCTION get_hash (p_username IN VARCHAR2, p_password IN VARCHAR2)
RETURN VARCHAR2
AS
BEGIN
RETURN DBMS_OBFUSCATION_TOOLKIT.md5 (
input_string => UPPER (p_username)
|| '/'
|| UPPER (p_password));
END get_hash;
PROCEDURE valid_user2 (p_username IN VARCHAR2, p_password IN VARCHAR2)
AS
v_dummy VARCHAR2 (1);
BEGIN
SELECT '1'
INTO v_dummy
FROM ASQ_USER_SECURITY
WHERE UPPER (USER_NAME) = UPPER (p_username)
AND PASSWORD = get_hash (p_username, p_password);
EXCEPTION
WHEN NO_DATA_FOUND
THEN raise_application_error (-20000, 'Invalid username / password.');
END valid_user2;
FUNCTION valid_user (p_username IN VARCHAR2, p_password IN VARCHAR2)
RETURN BOOLEAN
AS
BEGIN
valid_user2 (UPPER (p_username), p_password);
RETURN TRUE;
EXCEPTION
WHEN OTHERS
THEN RETURN FALSE;
END valid_user;
END app_security_pkg;
When I tried to Create a Test User it worked and added a record in the database
exec app_security_pkg.add_user ('RS','E','jesh','goodone')
Create your own Authentication Scheme
Authentication Function Section: RETURN APP_SECURITY_PKG.valid_user
Switch on your Custom Scheme: made it “My Auth Scheme”
Also Altered the Login Process on Page 101
app_security_pkg.login (P_UNAME => :P101_USERNAME, P_PASSWORD => :P101_PASSWORD, P_SESSION_ID => v('APP_SESSION'), P_FLOW_PAGE => :APP_ID );
This is pretty much what was there in the Duncan Mein's Blog
Thank you for having a look at the code
Appreciate your help
Jesh