Solved: How to RSA-OAEP encrypt credentials using Node js ...

dpiret · ‎08-23-2021

Hi there,

I need to create a data source on a gateway that connects to an on-premises SQL Server.

I have understood that I need to RSA-OAEP encrypt the credentials (Basic username/password), for which I've found examples in Power shell and in c# (Configure credentials programmatically for Power BI )

Is there any way to encrypt the credentials with Node or using an API-based third-party service?

Thanks!

dpiret · ‎08-30-2021

In case this helps anyone seekeing a solution for the sale problem, here's what I did.

I used a PowerShell script as described here https://endjin.com/blog/2020/12/how-to-update-credentials-for-an-on-prem-power-bi-data-source-using-... then executed ith with Node, retrieving the resulting JSON. The Node code looks like this

```javascript
const { exec } = require('child_process');
const PShellScriptFile = './rsa-oeap-encrypt-credentials.ps1'
const datasourceCredentialsEncryptedFile = "./datasourceCredentialsEncryptedFile.json"
var username = "useNameHere"
var password = "passwordHere"
// WARNING. Gateway module is fixed and should go as param
exec(`${PShellScriptFile} -username ${username} -password ${password} -outputFile ${datasourceCredentialsEncryptedFile}`, {'shell':'powershell.exe'}, (error, stdout, stderr)=> {
    // you can use stdout but I choose getting the JSON file already generated by the script
})
```

The outcome looks like this

{
    "credentialDetails":  {
                              "encryptedConnection":  "Encrypted",
                              "credentialType":  "Basic",
                              "credentials":  "oCvURzaedv3WNvV...lRQZ",
                              "privacyLevel":  "Private",
                              "encryptionAlgorithm":  "RSA-OAEP"
                          }
}

Which you can then use in Gateways - Create Datasource - REST API (Power BI Power BI REST APIs) | Microsoft Docs

View solution in original post

dpiret · ‎08-30-2021

In case this helps anyone seekeing a solution for the sale problem, here's what I did.

I used a PowerShell script as described here https://endjin.com/blog/2020/12/how-to-update-credentials-for-an-on-prem-power-bi-data-source-using-... then executed ith with Node, retrieving the resulting JSON. The Node code looks like this

```javascript
const { exec } = require('child_process');
const PShellScriptFile = './rsa-oeap-encrypt-credentials.ps1'
const datasourceCredentialsEncryptedFile = "./datasourceCredentialsEncryptedFile.json"
var username = "useNameHere"
var password = "passwordHere"
// WARNING. Gateway module is fixed and should go as param
exec(`${PShellScriptFile} -username ${username} -password ${password} -outputFile ${datasourceCredentialsEncryptedFile}`, {'shell':'powershell.exe'}, (error, stdout, stderr)=> {
    // you can use stdout but I choose getting the JSON file already generated by the script
})
```

The outcome looks like this

{
    "credentialDetails":  {
                              "encryptedConnection":  "Encrypted",
                              "credentialType":  "Basic",
                              "credentials":  "oCvURzaedv3WNvV...lRQZ",
                              "privacyLevel":  "Private",
                              "encryptionAlgorithm":  "RSA-OAEP"
                          }
}

Which you can then use in Gateways - Create Datasource - REST API (Power BI Power BI REST APIs) | Microsoft Docs