Hi,
I have developed an application in ASP .NET MVC that generates a pdf file using crystal reports libraries. What I would like to get is the ability to call this action from the grid in Oracle Apex, although I would like this application to verify that I am really me. The main concern here is security. What are the best practices in this case ?
Oracle Apex
1 I log into Oracle Apex - here I will add that it is a database user (Oracle User)
2. I display the relevant grid
3. I click on an action on one of the rows in the relevant column
.NET MVC APP
1.After clicking on the link in Oracle Apex, the identity of the logged-in user in ASP .NET APP is verified, and if it is indeed the user who clicked on the link in Oracle Apex, the corresponding action in ASP .NET MVC is launched
I would very much prefer not to have Someone be able to trigger this action bypassing Oracle Apex.
Generally speaking, the report that will be generated contains data in the context of the logged-in user. Here I would like to be able to block the possibility of generating this data for a user other than the one currently logged into Oracle Apex.
I hope I have reasonably explained this ....
Thanks in advance for your help.
Regards
Tom