Hello,
I am using an API as data source for PBI. The API uses POST method to authenticate with username and password in the body of the initial request, which retrieves a JWT token. The JWT token is then used in the header of subsequent API calls to get data (again using POST).
I see an issue with how these credetials are handled as they seem to appear in plain text in the custom query code. This has to be so because in order to perform POST requests the data source authentication has to be set to Anonymous and the username and password are stored in the code. Same goes for the token. For the token this is not such a big issue because it expires relatively shortly but the initial username and password to authenticate to the API are static.
Could you recomend any solutions on how to better handle these credentials with the custom query code?
Here is an example of the initial authentication code that has to contain the username and password information.
let
//URLs
urlApi = "https://api2.eu.prismacloud.io",
pathToken = "/login",
//Get JSON Web Token via API
optionsToken = [#"Content-Type"="application/json; charset=UTF-8"],
bodyToken = "{""username"":""username_value"",""password"":""password_value""}",
responseToken = Web.Contents(urlApi & pathToken,[Headers = optionsToken,Content = Text.ToBinary(bodyToken)]),
//Get Access Token and Token Type
responseJson = Json.Document(responseToken),
// name of the token property
accessToken = responseJson[token]
in
accessToken
