13.2 Configuring Secure Web Credentials

Use APEX Web Credentials to securely store the authentication details required for REST-Enabled SQL services and other REST API access.

Once you have saved a credential secret, it is encrypted and there is no way to retrieve it in clear text. APEX supports many different kinds of stored credentials, including:

Table 13-1 Supported Web Credential Types

Web Credential Type Used For
Basic Authentication Most REST-Enabled SQL access and some REST APIs
OAuth2
  • Client credentials flow
  • Password flow
  • Authorization code flow when used with Social Sign-in Authentication Scheme
OCI Native Authentication
  • Database Tools connection REST-Enabled SQL service
  • Other OCI REST APIs
HTTP Header REST services requiring auth token or API Key in a header
URL Query String REST services requiring an API key in a URL parameter
Key Pair Push notifications and user assertion signing

Basic Authentication and OAuth2 can optionally delegate to a securely stored credential defined in the Oracle database as well.

Tip:

To define REST-Enabled SQL Service for an OCI Database Tools connection, start by defining an appropriate OCI Native Authentication web credential. Then choose this existing credential from the list in the REST-Enabled SQL Service wizard.