General J2EE: hide database password
I have been making some tests both with Weblogic and Tomcat, and when it comes to define de database connection pool, I must give both the username and the password, leaving them clearly in the configuration file. My question is:
Is there any application server or any option within the ones I have tried not to show at least the database password?
Thanks in advance
I did this one time and it worked well.
When the application starts, bring up a DB configuration page. Supply whatever parameters you want to connect to the DB. Then keep a reference to the DB parameters in memory.