Calling azure function from a javascript to get SAS token can breach security?

See more:

Azure

Hi All,

I have a Azure function similar to Node.js Azure Function for generating SAS tokens to get SAS Token.

Now i have a application where i need to show Azure Blob document using SAS Token in a iframe. Now i want to use the azure function to get the SAS Token in a javascript function as i have to show in the document in pop screen in iframe, my question is as per below:

1. How to call the azure function form my javascript. Even if i call the azure function using node.js i have to pass the function app url and function/admin key which i guess is a security breach as these can be sniffed from browser . Can anybody suggest how to acheive the requirement keeping the security intact.

What I have tried:

I have tried calling azure function with key