No. I don't want access_token to be embedded into the dom or webpage.
It's a server variable, I don't want to use the postMessage as it cannot retrieve access_token from server.
If there is a way to use get/post request from server to load the reports?