How to validate EBS session from inside APEX
AraKOct 13 2011 — edited Oct 17 2011We followed the instructions in the "Extending Oracle E-Business Suite Release 12 using Oracle Application Express" white paper. However, since we are not using SSO, the user has to log in twice: once in EBS, and once again in APEX. We want to avoid doing that.
What we have done is this:
In our custom authentication plugin, we get the name of the EBS session cookie by calling fnd_session_management.getSessionCookieName(). Now, we need to extract the session ID from the cookie and validate the session. To do that, we use icx_call.decrypt3() to decrypt the session ID, then call fnd_session_management.check_session() to check the validity of the session.
The problem is that none of these APIs is public and, moreover, there are many duplicates:
fnd_session_management.check_session()
icx_sec.validatesession()
fnd_icx_sec.check_session()
Etc.
I assume that one of these APIs is going to become public fairly soon, if only to support the upcoming version of the EBS SDK for Java. The question is: which one should we use today?