Store the third-party credentials server-side, and send or proxy the requests that need it through your own server (authenticated with user-specific credentials).