Forum Discussion

abshirey's avatar
abshirey
Microsoft Employee
6 years ago

OAuth2 Data Connector with PKCE

Hi, I'm trying to implement a custom OAuth2 data connector with PKCE to call a rest api, so I do not have to use confidential client secrets in the report. However, I can't get the authorization to v...
Need Help
abshirey's avatar
abshirey
Microsoft Employee
6 years ago

Hi neil_varnas_IP 

 

As far as I know, there isn't a sha_256 method in the M language. If you wanted to use this code_challenge_method, maybe you could generate the code_challenge with a Python script in Power BI, set the output as a env variables and reference them in the connector? This is a random suggestion, I haven't researched if this is possible.

 

I used the plain code_challenge method and created the code_verifier and code_challenge in the StartLogin method by concatenating two guids together: Text.NewGuid() + Text.NewGuid(). I got this idea from the GitHub post: https://github.com/microsoft/DataConnectors/issues/280#issuecomment-589651327 . It also shows how to pass it in as an optional fourth parameter to the TokenMethod so you can still use the refresh method. 

 

Hope that helps! If you decide to use the plain method with guids and have any implementation issues, let me know

neil_varnas_IP's avatar
neil_varnas_IP
Advocate I
6 years ago

Hi abshirey ,

 

Thanks for your quick response. That link was a massive help to get the verification code passed around. Re S256 hashing, I keep it a plain code just now, hopefully, in the future we'll get some additional helper functions to get it the value hashed and make it more secure. 
Thanks