Hi, everyone!
Faced a similar issue:
https://www.dropboxforum.com/t5/Dropbox-API-Support-Feedback/How-can-I-get-a-list-of-the-files-in-a-public-folder-without/m-p/382376#M21303
In this topic, @Greg-DB said that this problem was added to the feature request.
So, the first question is: how is it going?
The second question concerns my solution to this problem:
I looked at traffic from your web application and used two requests from there.
First, I parsed the cache from public link responce: https://www.dropbox.com/sh/<link_key>/<secure_hash>?dl=0
Then I call this request: https://www.dropbox.com/list_shared_link_folder_entries
It works, but can I use this method and can I be sure that nothing will change in its work? If not, how can I "legally" receive the information I require without authorization?