Example for Implementing SQL Authenticator

Question

Hi,
I am using JDev - 11.1.1.5.0 and WLS - 10.3
I have a standalone ADF Application which is assessed by users registered in Oracle Application System (11i/R12). I need to authenticate the users using entries in "fnd_user" and "fnd_responsibility" tables.
Since the password in "fnd_user" table is encrypted, I need a way to authenticate using username and password given in plain text in the login page. Taking these values I need to validate the user and the responsibility and then allow the user into the application.
Please let me know suitable example or document containing SQL Authentication with encrypted password i.e. using "fnd_user" table for authentication.
Thanks
Rathnam

Answer 1

Hi,
Maybe you are talking about hashing of passwords (but not about password encryption), because SHA-1 is not an encryption algorithm but a hashing one. If your table contains hash digests of passwords (e.g. MD5 or SHA-1 digests), you should set a statement similar to the one below into authenticator's parameter "SQL Get User Password":
<tt>SELECT '{SHA-1}' || UTL_RAW.CAST_TO_VARCHAR2( UTL_ENCODE.BASE64_ENCODE( password ))
FROM users_table
WHERE username = ?</tt>
This statement assumes that a SHA-1 digest of the password is stored in a DB column <tt>users_table.password</tt> of datatype RAW. If your algorithm is MD5, then replace <tt>{SHA-1}</tt> with <tt>{MD5}</tt> in the statement above. If your column is not of datatype RAW, then modify the SELECT statment accordingly.
Dimitar