We have a need to connect to some external APIs from SharePoint. I've seen some online articles about calling APIs that are secured with Azure AD, however, in my case I have no control or influence over the APIs, how they are set up, or how they are secured.
Is there a known, secure solution for calling external APIs that you have no control over, from SharePoint, without exposing credentials (by calling on the front end)?
I was speculating whether we could in Azure set up a function that calls the API so that SharePoint only ever has to call that function. The API credentials could be kept securely in Azure in that case?
Any thoughts, ideas, or previous experiences would be massively appreciated.