Using_APEX_Sessions_in_plsql_webpages

Question

I am working on a project that needs to integrate an APEX app (4.1.1) in 11gR2 database with an old pl/sql web toolkit (HTP.P calls) application.
I need to authenticate both users once using a custom database table.
Users will login in using an APEX page and then fing a link to the old pl/sql app.
They can use the old app as usual but I need to use APEX session management for those non APEX Pages.
How would you implement the following in a stand-alone pl/sql procedure:
1) Capture the APEX session id (either from APEX cookie or read session variable) and pass it to each external webpage (pl/sql procedure web page)
2) Validate the APEX session id in each external pl/sql procedure (non-APEX) before displaying the page to user.
3) Updating the APEX session expiration if user navigates to the non-APEX pages.
I found that APEX uses this internal table for sesion management, but I want to avoid updating that and use somehow a call to blank APEX page or function every time and let APEX update the session from pl/sql procedure (if possible)
desc apex_040000.wwv_flow_sessions$
==>

Answer 1

937449 wrote:
I am working on a project that needs to integrate an APEX app (4.1.1) in 11gR2 database with an old pl/sql web toolkit (HTP.P calls) application.
I need to authenticate both users once using a custom database table.
Users will login in using an APEX page and then fing a link to the old pl/sql app.
They can use the old app as usual but I need to use APEX session management for those non APEX Pages.
How would you implement the following in a stand-alone pl/sql procedure:
1) Capture the APEX session id (either from APEX cookie or read session variable) and pass it to each external webpage (pl/sql procedure web page)
You can always capture the session ID from your apex app using built-in item http://docs.oracle.com/cd/E23903_01/doc/doc.41/e21674/concept_sub.htm#HTMDB25037
2) Validate the APEX session id in each external pl/sql procedure (non-APEX) before displaying the page to user.Open you non-apex pages within your apex app using frames without navigating away from you current application
FYI http://docs.oracle.com/cd/E23903_01/doc/doc.41/e21676/apex_auth.htm#BABHDFII
3) Updating the APEX session expiration if user navigates to the non-APEX pages.
You can simplay do a logout http://docs.oracle.com/cd/E23903_01/doc/doc.41/e21676/apex_auth.htm#AEAPI232
You can use this to expire the session in other way http://docs.oracle.com/cd/E23903_01/doc/doc.41/e21676/apex_util.htm#CHDDHJAH
>
I found that APEX uses this internal table for sesion management, but I want to avoid updating that and use somehow a call to blank APEX page or function every time and let APEX update the session from pl/sql procedure (if possible)Update the tables directly at your own risk (Oracle does not support)