Interactive auth via oauth2 in custom visuals still not possible?

[Meagan]

I read the discussion onHow was authentication accomplished in ArcGIS Maps for Power BI? that says it's not possible to provide interactive authentication in a custom visual. Is that still the case, or has anything changed? I understand an API Key is an option, but I notice when I run fiddler that the API key is sent in plain text. Is that required, or can that be hashed before sending it? I'm trying to find a secure way for someone to create a custom visual that connects to an external service that currently authenticates users using Open ID Connect using JWT/Oauth2.0. While they could generate API keys for users, that is not preferred. Is there another option? 

[dm-p · Accepted solution]

Hi @Meagan,

As one of the participants on that thread, I can confirm that nothing has really changed in this area since then. I would suggest reaching out to the visuals team directly (pbicvsupport@microsoft.com) to see if they have any specific advice for this scenario.

Regards,

Daniel