Child Item

Refresh token, where I can find an implementation example or tutorial?

Hi,

I need to update my app to support new OAuth code flow with PKCE/scopes and new short-lived tokens. For code flow with PKCE and scopes I see there is the new method "DBClientsManager.authorizeFromControllerV2:...". But, where I can find a tutorial or an example about using and refreshing short-lived tokens? I don't know which method to call, when call it and how to manage the response.

I have read:

- https://dropbox.tech/developers/now-available--scoped-apps-and-enhanced-permissions

- https://dropbox.tech/developers/migrating-app-permissions-and-access-tokens#implement-refresh-tokens

- example app DBRoulette

- this forum

but I found nothing.

Please help, thank you.

Find more posts tagged with

API

Abuse

Accepted answers

Greg-DB

If you use the SDK and implement the authorization flow as documented, i.e., using authorizeFromControllerV2, the SDK will actually automatically handle the short-lived access token and refresh token logic for you.

All comments

Samnis

Sorry,

I missed some info: I am using the official Objective-C SDK from Dropbox available here:

https://github.com/dropbox/dropbox-sdk-obj-c

Thank you

Greg-DB

Samnis

Wow, good news :-) I'll try it as soon as possible.

Greg, thank you very much for your prompt answer.

PS: maybe you should add a clarification to the documentation :-)

eweb

I have made the described changes to the DBRoulette example app. And it doesn't automatically handle the refresh token. Perhaps I am doing something wrong. But once the short lived token has expired it gives a 401 with an expired_access_token error.

Perhaps you could update the example.

Greg-DB

@eweb I'll ask the team to update the DBRoulette example. I can't promise exactly when that would be done though, so in the meantime perhaps you can share what you have so far and I can take a look at see what the issue might be.

eweb

Possibly the simplest way to do that would be to fork the repo and push up my changes. Is that gonna help you.

eweb

My fork is https://github.com/eamonn-webster/dropbox-sdk-obj-c

Greg-DB

@eweb Thanks! Looking at the comparison, I see the relevant difference is the replacement of authorizeFromController with authorizeFromControllerV2 in linkDropboxButtonPressed. That looks correct, and I don't believe you're missing anything. I'll give that a try myself and look into it.

Greg-DB

@eweb I tried this out, and it's working successfully for me. Even after the initial short-lived access token expires, the SDK automatically uses the stored refresh token to get a new short-lived access token and then uses that to successfully make further API calls, without having to report 'expired_access_token' back to the app's code.

Did you perhaps process the app authorization flow before switching from authorizeFromController to authorizeFromControllerV2 and so only had a short-lived access token stored, but not a refresh token? You can unlink the client and then re-authorize with authorizeFromControllerV2 in that case.

eweb

That is possible, I'll try it again.

eweb

I unlinked and relinked and it all worked. So I guess we can put that one down to user error. Thanks for your help.

M Anwar Bajwa

Refresh token of my new vivo device name y51s v2ò31 iD y3a2743986004 please

Greg-DB

@M Anwar Bajwa A refresh token is not something Dropbox support staff can provide for you. This process is supposed to be built in to the third party app itself. You should reach out to the developer of the third party app you're using for any help with that app.