Right way to get Embedded Token

[marcio_fornari]

Hello,

Today i'm using this code in PHP to get a Embedded Token each time that i need view the reports. 

$client = new \GuzzleHttp\Client();
        $url = 'https://login.windows.net/' . $directoryIdAzure . '/oauth2/token';
        try {
            /** @var GuzzleHttp\Client $client **/
            $response = $client->post(
               
                $url,
                [
                    "headers" => [
                        "Accept" => "application/json"
                    ],
                    'form_params' => [
                        'resource'      => 'https://analysis.windows.net/powerbi/api',
                        'client_id'     => $clientIdAzure,
                        'client_secret' => $clientSecretAzure,
                        'grant_type'    => 'password',
                        'username'      => $userPowerBI,
                        'password'      => $passPowerBI,
                        'scope'         => 'openid',
                    ]
                ]
            );

            $body = json_decode($response->getBody()->getContents(), true);
            //GET THE TOKEN
            $token = $body['access_token'];

It's work but, i don't know if this is right way to get the token, because at Azure Portal show me many logins each time that token Generated..

i'm lookin for this API: https://api.powerbi.com/v1.0/myorg/GenerateToken but i don't know use this.

Wich is the right way to generate the Token?

[v-shex-msft · Accepted solution]

HI @marcio_fornari,

I think these should more relate to your website design, power bi embedded token has its own expiration time. (stored in expiration field)  Embed Token - Generate Token#embedtoken 

You did not need to invoke generate token API every time you access these contents. BTW, your functions also triggered if web page refreshed or other functions which include multiple threads processing.

I'd like to suggest you create a function to invoke get token api and save token string and expiration date time to session. It should contain if statement to check the session if the token exists or expired to generate a new token or return current token.

Regards,

Xiaoxin Sheng

[marcio_fornari]

Hi @v-shex-msft, it's a good ideia save the Token and the Expiration time.

Thank you.