My Oracle Support Banner

Need Each Connection To Prompt For Authentication The First Time It Is Used By A Browser Session (Doc ID 2556021.1)

Last updated on OCTOBER 22, 2019

Applies to:

Oracle REST Data Services - Version 3.0.6 and later
Oracle HTTP Server - Version 11.1.1.1.0 and later
Information in this document applies to any platform.

Goal

We have upgraded a mod_plsql application to ORDS using database authentication (DB_AUTH). This is working but there is a change in behavior regarding login behavior between mod_plsql.

For example, in mod_plsql / OHS:
* Enter the URL http://<HOST>:<PORT>/dadname1/procedure.name
  The user is prompted for their login information.

* Enter the URL for another application on the same server:
  http://<HOST>:<PORT>/dadname2/procedure.name2
  The user is prompted for their login information.

However, with ORDS, the user is not prompted for the second application / DAD.
* Enter the URL http://<HOST>:<PORT>/ords/procedure.name
  The user is prompted for their login information.

* Enter the URL for another application on the same server:
  http://<HOST>:<PORT>/ords/app2/procedure.name2
  Instead of presenting a new login screen the user is automatically logged into the application using the userid / password from the previous step.

What is the cause of this behavior? Is there a way around it?
 

Solution

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Goal
Solution


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.