topic Obtain API Token with secure Authentication in Developer

Obtain API Token with secure Authentication

Anonymous — Thu, 08 Dec 2022 22:55:57 GMT

Hello I'm new to Power BI,

I'm trying to obtain a third party REST API token using Web.Contents, but I want a secure way to do this other than entering a username and password into Power BI.

Saving the username/password to a secured file on a desktop or sharepoint are not ideal solutions.

Any advice?

let
Details="{""username""****":"",""password"":""****""}",
Token = Json.Document(Web.Contents("https://myurl/api/login",[Headers =[#"accept"="*/*",#"Company"="MyCompany",#"Content-Type"="application/json"], Content = Text.ToBinary(Details)]))
in
Token

Where **** for username and password are hidden and myurl is the url to login for my specific third party API.

Re: Obtain API Token with secure Authentication

Anonymous — Fri, 09 Dec 2022 09:50:02 GMT

Hi @Anonymous,

Please review the following links, hope they can help you.

Using REST API:

How do I retrieve a bearer token from a service in Power BI?

Get token from Post API call

let url = "https://login.windows.net/xxx/oauth2/v2.0/token", headers = [#"Content-Type" = "application/x-www-form-urlencoded"], postData = "grant_type=client_credentials&scope=xxx&client_id=xxx&client_secret=xxx", response = Web.Contents( url, [Headers = headers, Content = Text.ToBinary(postData) ] ), JsonResponse=Json.Document(response), access_token = JsonResponse[access_token] in access_token

REST API Get Access Token

Using Power Automate:

How to use a service principal in Power BI Admin REST APIs in Power Automate

Best Regards

Re: Obtain API Token with secure Authentication

Anonymous — Fri, 09 Dec 2022 19:34:45 GMT

Thanks for your response @Anonymous,

This has partially helped me by exploring concepts for service as a principal.
Enable service principal authentication for read-only admin APIs - Power BI | Microsoft Learn

However, in the example it appears that the code is passing the client ID and client secret, this seems as unsecure as using a username and password.

I'm not sure if I should be attempting to access the token this way, or in another way described here: Handling authentication for Power Query connectors - Power Query | Microsoft Learn.

Any advice is appreciated.