Skip to content
This repository has been archived by the owner on Oct 1, 2023. It is now read-only.
CaptEgg edited this page May 9, 2012 · 8 revisions

Plasti-Auth v0.3

This is an authentication plugin for Oracle Application Express 4.1. It's still under development and wont be ready for use in production until version 1.0. Feel free to contribute fixes and improvements.

Download the zip file from the the downloads section and follow the instructions in the README.txt file within.

Raison D'être

Special thanks to Christian Neumueller for clarification of the APEX login process.

Existing Features

  • Requires a specified custom authentication function
  • Recycle user session from browser cookie based on a page id whitelist
  • Clear REQUEST variable when recycling to prevent default DML processes being invoked
  • Optional confirmation page displayed before recycling takes place
  • Error page displayed for incoming links to pages that are not in the whitelist
  • Use the template of a given page when rendering confirm and error pages

Proposed Features

  • Credential test to join session (perhaps a gray-list)
  • Ensure POST method without a valid session always fails
  • Referrer whitelist/regex and corresponding error page
  • Configurable session recycling behaviour when landing on a public page with no session
Clone this wiki locally