title: How to avoid storing credentials to connect to Oracle with JDBC?
body: <p>Is it possible to setup a JDBC connection to Oracle without providing username/password information in a configuration file (or in any other standard readable location)?</p>
  
  <p>Typically applications have a configuration file that contains setup parameters to connect to a database. Some DBAs have problems with the fact that usernames and passwords are in clear text in config files.</p>
  
  <p>I don't think this is possible with Oracle and JDBC, but I need some confirmation...</p>
  
  <p>A possible compromise is to encrypt the password in the config file and decrypt it before setting up the connection. Of course, the decryption key should not be in the same config file. This will only solve accidental opening of the config file by unauthorized users.</p>