Forum Discussion

Anonymous's avatar
Anonymous
Not applicable
10 months ago
Solved

Power Query SDK - use user input as parameter of helper functions

Hello.   I am creating custom Power BI connector using Power Query SDK with Oauth2 authentication. I am trying to improve security of my code and instead of keeping Azure client secret in the code...
Need Help
v-aatheeque's avatar
v-aatheeque
Icon for Community Support rankCommunity Support
10 months ago

Hi Anonymous 

Just checking in to see if the previous response helped resolve your issue. If not, feel free to share your questions and we’ll be glad to assist.

Anonymous's avatar
Anonymous
Not applicable
10 months ago

hello v-aatheeque 

thanks for response. previous comment is not solving my question.

So - what I am trying to achieve - is to enhance security in my custom connector created in Power Query SDK. 

I am connecting to WEB API sending bearer token created using Oauth authentication (with StartLogin, FinishLogin, TokenMethod functions etc..)

Currently my Azure client_secret is hardcoded in my code. I am wondering how I could improve on this topics - for example to take client_secret as user input and send it to FinishLogin method or maybe to keep it in Azure Vault and later reference it in code. Is any of these options possible?

  • v-aatheeque's avatar
    v-aatheeque
    Icon for Community Support rankCommunity Support
    10 months ago

    Hi Anonymous 

    • Power Query SDK does not support runtime access to external secrets like Azure Key Vault.
    • Avoid hardcoding the client_secret in your code.
    • Taking client_secret as user input is possible but insecure and not recommended.
    • Use Managed Identity or let Power BI/Fabric handle OAuth2 so the secret stays securely stored in the service.