Programming applications for Derby user authentication

To program user authentication into Derby applications, use the DriverManager.getConnection call to specify the user name and password.

An application can provide the user name and password in the following ways.

Separately, as arguments to the following signature of the method: getConnection(String url, String user, String password)
```
Connection conn = DriverManager.getConnection(
    "jdbc:derby:myDB", "mary", "little7xylamb");
```

As attributes to the database connection URL:

Connection conn = DriverManager.getConnection(
    "jdbc:derby:myDB;user=mary;password=little7xylamb");

By setting the user and password properties in a Properties object as with other connection URL attributes:

Properties p = new Properties();
p.put("user", "mary");
p.put("password", "little7xylamb");
Connection conn = DriverManager.getConnection(
    "jdbc:derby:myDB", p);

Note: The password is not encrypted. When you are using Derby in the context of a server framework, the framework should be responsible for encrypting the password across the network. If your framework does not encrypt the password, it is strongly recommended that you protect network connections with SSL/TLS (see Configuring SSL/TLS).

For information about the treatment of user names within the Derby system, see Users and authorization identifiers.