3rd Party call API in Power App Portal

[mubaco22]

hi,

I have 3rd party payment service,  when my customer purchase order in 3rd party payment service successful then 3rd party payment service must call api to update order record in my portal app 

I have research and found Portals Web API 

https://docs.microsoft.com/en-us/powerapps/maker/portals/web-api-overview

But it seem to be used only inside Power Apps portals pages 

Could you suggest me the best approach for this please?

Thanks

[OliverRodrigues · Accepted solution]

Hi, like you mentioned, the Portals Web API has the purpose of performing operations against the CDS/Dataverse. It doesn't really have anything to do about 3rd party integrations.

Power Apps Portals provides capability to add custom JS, so basically you can add any JS to perform anything, including calling a 3rd party API. When talking about payments, you really need to focus on security, you don't want users to inspect your page and have access to your client key/etc.

There are a few options to achieve your requirement. I like having the Portals calling an Azure function, this will add more security and stability for the integration. Take a look at this article that might help: https://medium.com/microsoft-power-platform-tips-tricks/payments-in-powerapps-portal-part-1-2-8ac068...

[Fubar]

I haven't looked into it too indepth (I keep putting off implementing a payment gateway), but believe you may be able to make the method suggested in the link provided by @OliverRodrigues more secure (and verify the call is being made by which Portal user) by adapting it to also make use of the Portals Implicit Grant Flow functionality https://docs.microsoft.com/en-us/powerapps/maker/portals/oauth-implicit-grant-flow

In the other article the author says he does something that is not ideal with regard to the Azure function, and I think you can remedy that by making use of the implicit grant flow functionality