Answered

3rd Party call API in Power App Portal

(0) Share

Report

Posted on by mubaco22

hi,

I have 3rd party payment service, when my customer purchase order in 3rd party payment service successful then 3rd party payment service must call api to update order record in my portal app

I have research and found Portals Web API

https://docs.microsoft.com/en-us/powerapps/maker/portals/web-api-overview

But it seem to be used only inside Power Apps portals pages

Could you suggest me the best approach for this please?

Thanks

Categories:

Power Apps portals

I have the same question (0)

All responses (2)

Answers (1)

Verified answer

oliver.rodrigues 9,368 Most Valuable Professional on at

Like (2)

Report

Hi, like you mentioned, the Portals Web API has the purpose of performing operations against the CDS/Dataverse. It doesn't really have anything to do about 3rd party integrations.

Power Apps Portals provides capability to add custom JS, so basically you can add any JS to perform anything, including calling a 3rd party API. When talking about payments, you really need to focus on security, you don't want users to inspect your page and have access to your client key/etc.

There are a few options to achieve your requirement. I like having the Portals calling an Azure function, this will add more security and stability for the integration. Take a look at this article that might help: https://medium.com/microsoft-power-platform-tips-tricks/payments-in-powerapps-portal-part-1-2-8ac068821848

Was this reply helpful? Yes No
Fubar 8,352 Super User 2025 Season 2 on at

Like (0)

Report

I haven't looked into it too indepth (I keep putting off implementing a payment gateway), but believe you may be able to make the method suggested in the link provided by @OliverRodrigues more secure (and verify the call is being made by which Portal user) by adapting it to also make use of the Portals Implicit Grant Flow functionality https://docs.microsoft.com/en-us/powerapps/maker/portals/oauth-implicit-grant-flow
In the other article the author says he does something that is not ideal with regard to the Azure function, and I think you can remedy that by making use of the implicit grant flow functionality

Was this reply helpful? Yes No