Discussion on "Access ATP APEX using a Reverse Proxy"

Matt Paine · 2022-09-27T19:48:18.166Z

Introduction In a previous blog post, we restricted access to your Always Free Oracle ATP database to trusted IP addresses. That’s good to start with, but to make your APEX apps available to the public internet or allow access from a different set o...

Hi Matt, thanks for the cool article - I'll be trying it out within the next few days.

I can see you mentioned that SSO wouldn't work with this. Can you confirm if other API calls would work - such as an API request to PayPal?

Hi - other outbound calls should have no issues; the problem for Social Sign On and SSO is that ORDS passes a callback URL to SSO which doesn't match the reverse proxy - bit of a specialized exception. There's no mechanism to change this that I'm aware of. Otherwise, all should be well.

Excellent. Just confirming that you don’t need to install customer managed ORDS, just point to the ATP URL?

Hey Jon - you don't have to use customer-managed ORDS in this use-case, however, one of the things I'm finding is that the approach above breaks Social Sign-on. So if that's a requirement, you're into customer-managed ORDS territory. See the "Epilogue" above.

Thanks for clarifying.

Search Hashnode

Access ATP APEX using a Reverse Proxy

Responses(2)