Oracle ATG Web Commerce - GetPassWordHashKey Web Service

GetPassWordHashKey Web Service

The GetPassWordHashKey Web service is used as part of the optional client-side encryption feature (see Using Client-Side Password Encryption). It returns a temporary hashKey used by the client to encrypt a password for a single authentication call. The client forward-encrypts the password with this hash key. The server then stores the hash key in the current session so you do not have to return it to the LoginUser service.

EAR file

userprofilingWebServices.ear

WAR file

usersession.war

Context root

userprofiling/usersession

Servlet

getPasswordHashKey

Web Service URL

http://hostname:port/userprofiling/usersession/ getPasswordHashKey

WSDL URL

http://hostname:port/userprofiling/usersession/ getPasswordHashKey?WSDL

Web Service Class

webservice.GetPasswordHashKeySEIImpl

Input Parameters

None

Output

String PasswordHashKey

Nucleus Component

/atg/userprofiling/ProfileServices (class atg.userprofiling.ProfileServices)

Method

getPasswordHashKey()

Executes within a session

Yes

Security FunctionalName

loginOperation