Connect to a password-protected MS Access db using UCanAccess 5.1.x and Jackcess Encrypt

[Takumi-Inoue-hulft]

I was connecting to a password-protected ACCDB file using UcanAccess 5.0.1 by implementing the JackcessOpenerInterface as follows:

import io.github.spannm.jackcess.CryptCodecProvider;
import io.github.spannm.jackcess.Database;
import io.github.spannm.jackcess.DatabaseBuilder;
import net.ucanaccess.jdbc.JackcessOpenerInterface;

import java.io.File;
import java.io.IOException;

public class CryptCodecOpener implements JackcessOpenerInterface {

    public Database open(File fl, String pwd) throws IOException {
        DatabaseBuilder dbd = new DatabaseBuilder(fl);
        dbd.setAutoSync(false);
        dbd.setCodecProvider(new CryptCodecProvider(pwd));
        dbd.setReadOnly(false);
        return dbd.open();
    }
}

I am attempting to upgrade to UcanAccess 5.1.2. However, since Jackcess has been forked and the package has moved from com.healthmarketscience.jackcess to io.github.spannm.jackcess, the argument expected by io.github.spannm.jackcess.DatabaseBuilder#withCodecProviderhas also changed to io.github.spannm.jackcess.impl.CodecProvider.

The interface for CryptCodecProvider in jackcess-encrypt 4.0.2 (the latest version as of now) is from com.healthmarketscience.jackcess.impl, so it cannot be set with withCodecProvider.

• Is there a way to connect to a password-protected ACCDB file using UcanAccess 5.1.2?
• Alternatively, do you plan to fork jackcess-encrypt in the same manner as Jackcess?

[spannm]

Hi Takumi,

I was wondering whether someone would ask that question :)
So here we are.
I am sure we can do something about that, ideally without forking jackcess-encrypt.
Let me think about it and get back here soon.
Markus

[spannm]

Update: I am working on a compatible version of jackcess-encrypt. The artifact has now been released and is available for usage.

[Takumi-Inoue-hulft]

Thank you for dealing with this matter.

[congjuny]

If it's done, do you have a simple working example?

[spannm]

Hi everyone 🙋🏼‍♂️

please find a complete, runnable example for encrypted .accdb access in this dedicated branch:

example/issue-21-password-protection

Requirements

To enable decryption support, ensure you have the jackcess-encrypt extension in your pom.xml:

<dependency>
    <groupId>io.github.spannm</groupId>
    <artifactId>jackcess-encrypt</artifactId>
    <version>5.1.3</version>
</dependency>

Components

• PasswordProtectedOpener.java
  Implements IJackcessOpenerInterface to provide the CryptCodecProvider with your password

package net.ucanaccess.example;

import io.github.spannm.jackcess.Database;
import io.github.spannm.jackcess.DatabaseBuilder;
import io.github.spannm.jackcess.encrypt.CryptCodecProvider;
import net.ucanaccess.jdbc.IJackcessOpenerInterface;

import java.io.File;
import java.io.IOException;

/**
* Custom opener for password-protected databases.
*/
public final class PasswordProtectedOpener implements IJackcessOpenerInterface {

  @Override
  public Database open(File dbFile, String password) throws IOException {
      return new DatabaseBuilder()
          .withFile(dbFile)
          .withCodecProvider(new CryptCodecProvider(password))
          .open();
  }

}

• PasswordProtectedDemo.java
  Demonstrates the JDBC connection, metadata retrieval, and data output

Path dbPath = Path.of("src/main/resources/password-protected.accdb");
String password = "alligator3";
String tableName = "t_demo";

String url = String.format("jdbc:ucanaccess://%s;jackcessOpener=%s",
  dbPath, PasswordProtectedOpener.class.getName());

LOG.log(Level.INFO, "About to connect to database ''{0}''", dbPath.getFileName());

try (Connection conn = DriverManager.getConnection(url, "user", password)) {
  LOG.log(Level.INFO, "Connection to ''{0}'' successful", dbPath.getFileName());
// ...            

Quick Start

Simply run mvn in the root directory to execute the demo against the bundled database (password: alligator3).

 

Enjoying UCanAccess and Jackcess? Please leave a 🌟 to support the projects! Your stars help to keep open source development visible and going.