Access Tokens for PowerBI Rest API

[eusahn]

If I have an app that the whole world can see from a URL, (aka PowerBI embedded on a frontend platform),

What's the way to handle tokens?

I currently have a backend that will be associated with 1 microsoft account, and I can grab the access tokens that way and this will expire hourly, and I can refresh this. From this, I can get the Authorization bearer code to access the Power BI Rest API.

Is this a scalable token management method for public access?