Child Item

Access Code format/configuration

evepony

Hi everyone !

Anyone knows the difference between formats of access codes?

Something like this :

PSx_xx_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

and

Xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx_x

I don't know if it's relationated with the expiration of tokens.

I hope you can help me please 🙂

Find more posts tagged with

API

Abuse

Comments

Greg-DB

The Dropbox API authorization functionality includes a number of different types of values, including authorization codes, access tokens, and refresh tokens. You can find the documentation for all of that here. Each of those are only specified as "String" without a more specific format guaranteed, so make sure you're not programming assumptions about the formats into your app's code.

For the 'access_token' value in particular, the access token's expiration information is included in the 'expires_in' field, per the documentation.

evepony

I've noticed about a difference in access codes:

I have two Dropbox accounts, I created an app and I followed the auth flow for each account .

Account 1:

in this account all my access codes inits with PS:

Account 2:

In this account all my access codes doesn´t has a format like the first one:PSx_xx_

I want to know what is the difference because this situation it repeats when I share an app and I request the access from another account the access code doesn't has the PS format.

Greg-DB

These values may encode information about the relevant account, so you may notice patterns like this, but your app should not expect or rely on any particular format or pattern. Your app should only use the authorization code as supplied.

You should not attempt to decode or otherwise extract information from the authorization code itself. The format does not indicate the lifetime of the authorization code. Regardless of which account it came from, an authorization code can only be used once, and only for a short period of time.