plsql - Oracle authentication not working? -
i implemented logout button logouts user webpage. server oracle http server.
when clicked on logout executes below procedure
procedure log_me_off begin -- open http header owa_util.mime_header('text/html', false, null); -- send cookie logout owa_cookie.send('wdb_gateway_logout', 'yes', path=>'/'); -- close http header owa_util.http_header_close; -- generate page htp.p(' <head> <script type = "text/javascript" > history.pushstate(null, null, ''xna_hpms_ui.log_me_off''); window.addeventlistener(''popstate'', function(event) { history.pushstate(null, null, ''xna_hpms_ui.log_me_off''); }); </script> </head> have been logged off website'); htp.anchor( 'http://www.google.com', 'click here login a'); htp.p('<br>bye'); end; end; / document referred: https://docs.oracle.com/cd/b13789_01/server.101/b12303/secure.htm
problem:
in chrome, when click on log off button log outs user , after when user try refresh or try open webpage in new tab prompt appears asking login credentials, if user clicks cancel , refresh tab automatically gets logged in. while behavior not in ie.
when there many tabs open , user clicks log off button gets logout current page while when navigate other tab if clicks anywhere again asked webpage enter credentials while if clicks cancel , refreshes page again got logged on without entering credentials.
kindly help
i recommend using custom owa , own cookie means of authenticating users. set dad authorize schema using custom_owa. create custom_owa.authorize package/function in schema.
the custom_owa.authorize function called before each page accessed. if returns true request granted. if false, request denied.
this give complete control on can access what. set own cookie when logs website. in custom_owa.authorize check cookie , return true or false accordingly.
when logs off, destroy cookie or expire it.
Comments
Post a Comment