How to deal with credentials for external applications using a Java Client/

Question

Hi Guys,
This is the case. I am integrating an external application with an ADF Application. I have implemented some programmatic ViewObjects that are being filled up by a REST Java Client Wrapper. Everything is working fine but the issue is that the credentials the wrapper is using are hard coded inside the java class. I am thinking to ask for the credentials at the beginning of my taskflow and then store them somewhere and use them then to create my client wrapper (passing them in the constructor).
However, I don't know if my approach is good and I would like you to share your experiences or how to deal with this.
Regards

Answer 1

You can use Credential Store Framework to store the credentials securely in the weblogic server instead of hardcoding in the java class.
The Credential Store Framework:
- enables you to manage credentials securely
- provides an API for storage, retrieval, and maintenance of credentials in different back-end repositories
Check the documentation on CSF API -
http://docs.oracle.com/cd/E29505_01/core.1111/e10043/devcsf.htm
Major Steps -
1. Create a credential map and key in em console to store the password (http://docs.oracle.com/cd/E25054_01/core.1111/e10043/csfadmin.htm)
2. Use CSF API to retrieve the stored password
3. In jazn-data.xml give permissions to access CSF key and map