Obtain API Token with secure Authentication

[Anonymous]

Hello I'm new to Power BI,

I'm trying to obtain a third party REST API token using Web.Contents, but I want a secure way to do this other than entering a username and password into Power BI.

Saving the username/password to a secured file on a desktop or sharepoint are not ideal solutions.

Any advice?

let
Details="{""username""****":"",""password"":""****""}",
Token = Json.Document(Web.Contents("https://myurl/api/login",[Headers =[#"accept"="*/*",#"Company"="MyCompany",#"Content-Type"="application/json"], Content = Text.ToBinary(Details)]))
in
Token

Where **** for username and password are hidden and myurl is the url to login for my specific third party API.

[Anonymous]

Hi  @Anonymous,

Please review the following links, hope they can help you.

Using REST API:

How do I retrieve a bearer token from a service in Power BI?

Get token from Post API call

let

url = "https://login.windows.net/xxx/oauth2/v2.0/token",

headers = [#"Content-Type" = "application/x-www-form-urlencoded"],

postData = "grant_type=client_credentials&scope=xxx&client_id=xxx&client_secret=xxx",

response = Web.Contents(

url,

[Headers = headers,

Content = Text.ToBinary(postData)

]

),

JsonResponse=Json.Document(response),

access_token = JsonResponse[access_token]

in

access_token​

REST API Get Access Token

Using Power Automate:

How to use a service principal in Power BI Admin REST APIs in Power Automate

Best Regards

[Anonymous]

Thanks for your response @Anonymous,

This has partially helped me by exploring concepts for service as a principal. 
Enable service principal authentication for read-only admin APIs - Power BI | Microsoft Learn 

However, in the example it appears that the code is passing the client ID and client secret, this seems as unsecure as using a username and password.

I'm not sure if I should be attempting to access the token this way, or in another way described here: Handling authentication for Power Query connectors - Power Query | Microsoft Learn. 

Any advice is appreciated.