topic Re: Store client credentials securely in Developer

Store client credentials securely

Anonymous — Mon, 20 Mar 2023 14:54:44 GMT

I am retrieving an access token by calling an API and then use this access token to obtain employee data. I'm using a blank query with the following code.

body="grant_type=client_credentials&client_id="&<client_id>&"client_secret="&<client_secret>, Source = Json.Document(Web.Contents(baseUrl, [ RelativePath = "oauth/issueToken", Headers = [#"Content-Type"="application/x-www-form-urlencoded"], Content=Text.ToBinary(body) ] )), token = Source[access_token], data= Json.Document(Web.Contents(baseUrl, [ RelativePath = "api/employees", Headers = [#"Authorization"="Bearer "&token] ] )),

I'm getting access token calling our own API (not using AAD). What is the best way to store these client credentials (client_id and client_secret) instead of hardcoding in the code?

Re: Store client credentials securely

lbendlin — Wed, 22 Mar 2023 01:29:34 GMT

store them in a text file in a sharepoint document library that only you have access to. Then retrieve that file as part of the Power Query transforms etc.

Re: Store client credentials securely

ams1 — Wed, 22 Mar 2023 05:44:56 GMT

Besides the great option @lbendlin mentioned, with an additional API endpoint you could also use the builtin credentials manager https://community.powerbi.com/t5/Power-Query/How-to-securely-store-and-use-token-and-secret-for-API-request/m-p/3121190#M99878