PowerBI embed in Angular5 applications

[unnie]

Hi, I have an Angular5 application which is authenticating users against Azure AD. Now , I am trying to embed a PowerBI dashboard into the app. This app is purely angular5 and has no server side code (like MVC , .net core etc). I was reading the different technical options and I am really confused about below things.

1. I want to authenticate against the power bi using logged in user credentials. So will the already generated AAD tokens work?

2. I am reading that if I want to build "application owns data", I need to pass usercrdentials (service account). Will app owns data work with service principals (cliewnt id, clientsecret)?

3. Also in many blogs embed tokens are generated from server side? Is it bcoz clientid and client secret is required and it is not safe to put them in javascript?

Any pointers will be highly appreciated!