I would like to hand over a webapplication to some people but these people should not allowed to has access to the database with some tools. Using the webapplicaton and in the background the database is ok.
Wildfly has a config with these code:
<xa-datasource jndi-name="java:jboss/datasources/ExampleXADS" pool-name="ExampleXADS">
<driver>h2</driver>
<xa-datasource-property name="URL">jdbc:h2:mem:test</xa-datasource-property>
<xa-pool>
<min-pool-size>10</min-pool-size>
<max-pool-size>20</max-pool-size>
<prefill>true</prefill>
</xa-pool>
<security>
<user-name>sa</user-name>
<password>sa</password>
</security>
</xa-datasource>
As you can see, there is also the username and password available. How is it possible to exclude / encrypt these, so only the administrator know the password for the database. The same also for the whole application server - there are also users and password. How can I do this?
EDIT: The "customer" will get the whole application inclusive the webserver configuration. (Wilfly and .war - file) It´s only for saving the software key in the database. The first time if the "customer" start the web application, he will be prompted so enter the licence key. After entering the license key a Webservice will be called. The return code is "false" or "true" (is key valid or is key not valid) My first idea was to store the flag in the database. But if a user has access to the database, he can manipulate this flag on his own. Is there any other possibility to set a flag for "the software key is valid" instead saving the flag in the database. Any ideas?