Forum Discussion

Anonymous's avatar
Anonymous
Not applicable
10 months ago
Solved

Power Query SDK - use user input as parameter of helper functions

Hello.   I am creating custom Power BI connector using Power Query SDK with Oauth2 authentication. I am trying to improve security of my code and instead of keeping Azure client secret in the code...
Need Help
v-aatheeque's avatar
v-aatheeque
Icon for Community Support rankCommunity Support
10 months ago

Hi Anonymous 

  • Power Query SDK does not support runtime access to external secrets like Azure Key Vault.
  • Avoid hardcoding the client_secret in your code.
  • Taking client_secret as user input is possible but insecure and not recommended.
  • Use Managed Identity or let Power BI/Fabric handle OAuth2 so the secret stays securely stored in the service.
Anonymous's avatar
Anonymous
Not applicable
10 months ago

hello v-aatheeque 

thank you for your response. could you elaborate on last 2 points?

 

  • Taking client_secret as user input is possible but insecure and not recommended.

how is that possible? as I have investigated, you can only take user input in main function. client_secret is being used in TokenMethod function, which runs before main function - this means there should be no possibility of doing this.

 

  • Use Managed Identity or let Power BI/Fabric handle OAuth2 so the secret stays securely stored in the service.

do you have any useful sources on these?