AnsweredAssumed Answered

Custom JSP load internal JSTC/JDBC driver

Question asked by Jude Yip on Jan 20, 2017
Latest reply on Jan 22, 2017 by Pradeep Kadambar

Like • Show 0 Likes0
Comment • 3

HI i would like to develop a custom jsp page and upload it to let users access it.
However there's a few challenges i've met.
I'm consuming data from external database. I would like to know how do i import the internal wildfly jstd / jdbc / oracle database driver onto the jsp page.
Also, I realized i will need to store the password on the jsp page. is there a way to store password profile in build in wildfly aveksa, so that my jsp file can make use of this connection profile.?

Do take note that I am aware that i can use forms and connectors to build all this up..
Due to customers requirements, i might need to research in the jsp way..

Pradeep Kadambar

Jan 22, 2017 5:22 PM

Correct Answer

Since the custom JSPs uploaded is merely a part of Aveksa.ear file, you need to add the JDBC jar file to the ear file and redeploy.

Refer to the Customize RSA Identity Governance and Lifecycle section in RSA G&L Installation Guide for details.

See the reply in context

No one else had this question

Outcomes

Pradeep Kadambar

Jan 21, 2017 9:30 AM

Making a database call from a JSP might compromise the security measures built into the system. If not properly coded it might lead way to SQL injection.

You might want to consider this.

If you need to build a business process like user registration page etc, build it as a separate web application and use G&L web services.

Actions

Jude Yip Jan 22, 2017 11:02 AM

HI Pradeep,

Yes i do understand the security risk.
I just want to know how to import the jar into my jsp page and use this to establish a connection to another database..

Actions

Pradeep Kadambar

@ Jude Yip on Jan 22, 2017 5:22 PM

Since the custom JSPs uploaded is merely a part of Aveksa.ear file, you need to add the JDBC jar file to the ear file and redeploy.

Refer to the Customize RSA Identity Governance and Lifecycle section in RSA G&L Installation Guide for details.

Actions

3 Replies

Pradeep Kadambar Jan 21, 2017 9:30 AM
Mark Correct
Correct Answer
Making a database call from a JSP might compromise the security measures built into the system. If not properly coded it might lead way to SQL injection.

You might want to consider this.

If you need to build a business process like user registration page etc, build it as a separate web application and use G&L web services.
Like • Show 0 Likes0
Actions
Jude Yip Jan 22, 2017 11:02 AM
Mark Correct
Correct Answer
HI Pradeep,

Yes i do understand the security risk.
I just want to know how to import the jar into my jsp page and use this to establish a connection to another database..
Like • Show 0 Likes0
Actions
- Pradeep Kadambar @ Jude Yip on Jan 22, 2017 5:22 PM
  Unmark Correct
  Correct Answer
  Since the custom JSPs uploaded is merely a part of Aveksa.ear file, you need to add the JDBC jar file to the ear file and redeploy.
  
  Refer to the Customize RSA Identity Governance and Lifecycle section in RSA G&L Installation Guide for details.
  Like • Show 0 Likes0
  Actions

Custom JSP load internal JSTC/JDBC driver

Outcomes

Related Content

Recommended Content