Child Item

Hardcode authentication/api to a single Dropbox account?

Hello - new to the Dropbox API and wondering if it's possible to hardcode the Dropbox account that an app using the API would authenticate/connect to?

In other words - when a user takes some action in my app - I want to save the file output of that action to MY Dropbox account, not ask them to authenticate into their account.

Let me know if that doesn't make sense!

Thanks,

Brendan

Find more posts tagged with

API

Abuse

Comments

Jason C.

I would recommend you to have a server to automatically upload files to your dropbox, rather than hard-coding your keys and keys in your app which could potentially allow people to upload whatever they want (malware, executables) and how much they want.

If you really want hard code your keys, you can try using the OAuth API https://www.dropbox.com/developers/core/docs to generate a key, and then hardcode that key for requests in your app.

Greg-DB

The API was designed with the intention that each user would link their own Dropbox account, in order to interact with their own files. However, it is technically possible to connect to just one account. The SDKs don't offer explicit support for it and we don't recommend doing so, for various technical and security reasons.

However if you did want to go this route, instead of kicking off the authorization flow, you would manually use an existing access token for your app. (Just be careful not to revoke it, e.g. via https://www.dropbox.com/account/security .)

Brendan C.

@Jason yep, that makes sense, but doing everything client side for this app since I'm being lazy and trying to build a prototype.

@Greg K - got it yeah, kinda figured that, so would need to get a valid token and then hardcode that into the flow... I understand the risks there of course...

I'm basically trying to use dropbox as a file server that can receive a new file then spit out a dl link that can be shared, kind of a janky use case.