Basic auth with RESTful WEb service and Web Service reference

Question

Hi, All,
We have made much progress on getting an application working wtih RESTful web services but now are trying to figure out how to lock down a RESTful Web service while making it available for a particular application.
We are using one of the sample 'emp' table web services that come with Apex 4.2 and are trying to apply Basic Auth to the WEb Service via Weblogic filter defined in the web.xml file. That works fine. I now get challenged when I try to go to :
https://wlogic.edu/apex/bnr/ace/hr/empinfo/
And when I authenticate to that challenge I am able to get the data. (we are usiing LDAP authentication at the Weblogic level)
However, I am not sure how to get same basic authentication to work with the Web Service reference in my application. I see the error message in the application when I try to call that Web Service:
401--Unauthorized<
And I see:
"The request requires user authentication. The response MUST include a WWW-Authenticate header field (section 14.46) containing a challenge applicable to the requested resource. The client MAY repeat the request with a suitable Authorization header field (section 14.8). If the request already included Authorization credentials"
How do I provide the credentials in the Web REference or do I provide credentials in the Application?
Web service works fine if I remove the RESTful web service basic auth from the Web.xml file.
Should we NOT use Weblogic basic auth and instead use basic auth from Workspace RESTful web service definition. If so, how do we implement THAT basic auth in the Web Service definition and in the Web SErvice Reference on the application?
Thanks,
Pat

Answer 1

What I mean is diid you try to use the PL/SQL package for APEX webservice. Here is an example I use (modified and shortened, just to show how much better this is than to use it from the application).
CREATE OR REPLACE PACKAGE webservice_pkg
IS
   PROCEDURE create_webservice (
      p_id            IN       NUMBER,
      p_message       OUT      VARCHAR2,
      p_workspace     IN       VARCHAR2 DEFAULT 'MY_WORKSPACE',
      p_app_id        IN       NUMBER DEFAULT v ('APP_ID'),
      p_app_session   IN       VARCHAR2 DEFAULT v ('SESSION'),
      p_app_user      IN       VARCHAR2 DEFAULT v ('APP_USER')
END webservice_pkg;
CREATE OR REPLACE PACKAGE BODY webservice_pkg
IS
   PROCEDURE set_credentials (
      p_workspace     IN   VARCHAR2,
      p_app_id        IN   NUMBER,
      p_app_session   IN   VARCHAR2,
      p_app_user      IN   VARCHAR2
   IS
      v_workspace_id   NUMBER;
   BEGIN
      SELECT workspace_id
        INTO v_workspace_id
        FROM apex_workspaces
       WHERE workspace = p_workspace;
      apex_util.set_security_group_id (v_workspace_id);
      apex_application.g_flow_id := p_app_id;
      apex_application.g_instance := p_app_session;
      apex_application.g_user := p_app_user;
   END set_credentials;
   PROCEDURE create_webservice (
      p_id            IN       NUMBER,
      p_message       OUT      VARCHAR2,
      p_workspace     IN       VARCHAR2 DEFAULT 'MY_WORKSPACE',
      p_app_id        IN       NUMBER DEFAULT v ('APP_ID'),
      p_app_session   IN       VARCHAR2 DEFAULT v ('SESSION'),
      p_app_user      IN       VARCHAR2 DEFAULT v ('APP_USER')
   IS
      v_envelope          VARCHAR2 (32000);
      v_server            VARCHAR2 (400);
      v_url               VARCHAR2 (4000);
      v_result_url        VARCHAR2 (1000);
      v_collection_name   VARCHAR2 (40)    := 'PDF_CARD';
      v_message           VARCHAR2 (4000);
      v_xmltype001        XMLTYPE;
   BEGIN
      v_url := v_server || '.myserver.net/services/VisitCardCreator?wsdl';
      FOR c IN (SELECT *
                  FROM DUAL)
      LOOP
         v_envelope :=
               '<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" '
            || 'xmlns:bran="http://www.myaddress.com">'
            || CHR (10)
            || '<soapenv:Header/><soapenv:Body>'
            || CHR (10)
            || '<parameter:'
            || 'some_value'
            || '>'
            || CHR (10)
            || '<bran:templateID>'
            || p_id
            || '</bran:templateID>'
            || '</soapenv:Body>'
            || CHR (10)
            || '</soapenv:Envelope>';
      END LOOP;
      set_credentials (p_workspace, p_app_id, p_app_session, p_app_user);
      BEGIN
         apex_web_service.make_request
                                     (p_url                  => v_url,
                                      p_collection_name      => v_collection_name,
                                      p_envelope             => v_envelope
         p_message := 'Some message.';
      EXCEPTION
         WHEN OTHERS
         THEN
            v_message :=
                  v_message
               || '</br>'
               || 'Error running Webservice Request. '
               || SQLERRM;
      END;
      BEGIN
         SELECT    v_result_url
                || EXTRACTVALUE (VALUE (t),
                                 '/*/' || 'Return',
                                 'xmlns="http://www.myaddress.com"'
                xmltype001
           INTO v_result_url,
                v_xmltype001
           FROM wwv_flow_collections c,
                TABLE
                    (XMLSEQUENCE (EXTRACT (c.xmltype001,
                                           '//' || 'Response',
                                           'xmlns="http://www.myaddress.com"'
                    ) t
          WHERE c.collection_name = v_collection_name;
      EXCEPTION
         WHEN OTHERS
         THEN
            v_message := v_message || '</br>' || 'Error reading Collection.';
      END;
   EXCEPTION
      WHEN OTHERS
      THEN
         p_message := v_message || '</br>' || SQLERRM;
   END create_webservice;
END webservice_pkg;
/If you use it this way, you will find out what the problem is much faster.
Denes Kubicek
http://deneskubicek.blogspot.com/
http://www.apress.com/9781430235125
http://apex.oracle.com/pls/apex/f?p=31517:1
http://www.amazon.de/Oracle-APEX-XE-Praxis/dp/3826655494
-------------------------------------------------------------------