topic Re: Hide the SAS Token in the URL? in Developer

Hide the SAS Token in the URL?

Anonymous — Thu, 17 Mar 2022 12:48:39 GMT

Hi All,

I have staff images being hosted in BLOB storage, I am using the BLOB connector & concatinating the URL with the SAS token.

This allows me to see the images.

My issue is if you then view the image as a table you can then see the SAS token;

https://pandorasbox.blob.core.windows.net/phototest/User1test.jpg?sp=r&st=2022-03-17T11:58:24Z&se=2022-03-17T19:58:24Z&spr=https&sv=2020-08-04&sr=c&sig=BZmeR4pIYhxJaaaTWz6BrgXm2HrE4hklity&^vho%3D

The user would then be able to work out how to access the other photos as we will be structuring the folders.

Thanks

Andy

Re: Hide the SAS Token in the URL?

Hariharan_R — Fri, 18 Mar 2022 05:51:21 GMT

Hi @Anonymous

Show as a table in Power BI Desktop only display the image not the URL but yes in Service it will display the complete URL. I understand your concern on the security here. There are multiple options to see the complete URL used on the images.

1. Tooltip - Replace the current tooltip with custom page tooltip with different relevant information of the image

2. Show as a table - We can't disable as of today but you can disable the whole visual header which disabled all the options including the export data.

Thanks

Hari

Please accept this as a solution if your question has been answered !!

Appreciate a Kudos 😀

Re: Hide the SAS Token in the URL?

Anonymous — Tue, 22 Mar 2022 16:20:43 GMT

Hi Hari,

Thanks for the tips, I managed to put the key into a measure as a string I then created a new column and concatinated the two, once hosted in service show as table no longer shows the secret key 😉