Greg-DB Dropbox Community Moderator

I've confirmed with the team that this switch back to DigiCert High Assurance EV Root CA is not permanent. As our current certificates expire, we will be moving away from using EV certificates. Please update your trust store as mentioned, and do so by August. (The current certificate using DigiCert High Assurance EV Root…

Thanks for the detailed writeup! I can't make any promises myself as to if/when we might work on this, but I'm bringing this up with the team.

I see, thanks! That's helpful context. 

The Dropbox API servers at api.dropboxapi.com are currently responding and working for me in my testing now. Can you share more information about the issue you're seeing? The steps to reproduce the issue, including the relevant code snippets, would be helpful.

@"ccle-operations" If you are unable to migrate your app's code by the retirement date, please feel free to open an API ticket here and include the app key(s) for your app(s) and let us know how long of an extension you would need. I can't make any promises myself, but the team will review the request to see if we can…

Thanks for the detailed writeup! That's very helpful. I'll ask the team to update the implementation to treat an empty scope parameter the same way as a missing scope parameter.

Thanks for the additional information and feedback. Also, when you say you "do not control their application access", do you mean that they each register their own Dropbox API app and that you do not know the relevant app key for each one? I ask because any extensions would be granted by app key, so that would complicate…

The API doesn't offer a way to convert long-lived access tokens to refresh tokens. Creating new long-lived access tokens is now considered deprecated, but we don't currently have a plan to disable existing long-lived access tokens. (If that changes, we will of course announce that ahead of time.) That being the case, you…

@"Thomas_" Thanks for following up. It sounds like there may still be some accounts seeing a long latency with this functionality. Could you open an API ticket here with the affected account ID(s) so we can check on them? Thanks in advance! 

Can you try again and let me know if you're still seeing the issue? Thanks in advance! 

We've switched content.dropboxapi.com back to using DigiCert High Assurance EV Root CA. Please let us know if you're still seeing any issues. @"4mooreben" Yes, that's correct, this switch should not be considered permanent. We recommend updating the trust store, to trust both roots if possible. I'll ask the team for some…

@"KennelLink" Thanks for the feedback! I'll emphasize the urgency of this with the team.

We are working on switching this back now. I'll follow up here once that's done.

Thanks for following up. I don't have any other news or planned changes to share. Dropbox will announce any other changes if/when they are planned. We don't have a public roadmap for the API, but I'll pass this along as a feature request as well. I can't promise if or when that might be implemented though. Also, I checked…

@"4mooreben" Thanks for the additional information! This has been raised with team internally. I'll follow up here once I have any news on this from them. I've redacted your email address for the sake of privacy, but for reference, you can always open an API ticket privately here if you need.

1. No, enabling an additional scope on your app on the App Console does not affect existing users. It just lets your app use that scope in the future. That is, it will be included in the default set of scopes that your app requests if the app doesn't specify particular scopes during the app authorization flow (and allows…

I'll be happy to help with any issues you're having with the Dropbox API, but I'll need some more information. Can you please share the code you're running and the full text of the error you're getting? Thanks in advance! 

Thanks for writing this up. The content.dropboxapi.com servers are now being served with a certificate using DigiCert Global Root CA. I'll ask the team to see if we can switch that back to DigiCert High Assurance EV Root CA (or support both), but I can't guarantee if/when that would be done. I'll follow up here with any…

Thanks for the additional information! We have reproduced this bug on /2/files/list_folder/longpoll and are investigating. I'll follow up here once I have an update on this.

Thanks for the report. We'll look into it.

The SDK will do most of the work for you, so I recommend following the SDK examples. You can find the examples of using the authorization flow in the latest version of the Java SDK here. Or if you're building an Android app, there's an example for Android here.

When you register a webhook URI, Dropbox will send the webhook notifications (both the verification request and the notifications requests) to the server identified by the URI you supply. In your case, you supplied a site on 'webhook.site', so those requests are sent to the servers at 'webhook.site', which are maintained…

No, unfortunately Dropbox doesn't offer a way to get a URL to edit Office docs online like this via the Dropbox API, e.g., using Microsoft Office Online, but I'll pass this along as a feature request. I can't promise if or when that might be implemented though. 

It looks like you're attempting to use the file/folder ID for the shared folder as the shared folder ID. Note that file/folder IDs (commonly labeled 'id') are different than shared folder IDs (commonly labeled 'shared_folder_id'). You can get the shared folder ID for a shared folder from a number of places on the API, such…

When uploading files to Dropbox, you should upload the raw data itself, without any additional encoding. It appears you're uploading the data with base64 encoding in this case though, and so the uploaded data has that additional encoding. You should perform the upload without that base64 encoding. Here's an example of…

This is technically possible, but there are a few complicating factors: * The only way to update client_modified is to perform an upload of the file with client_modified set. * If you upload the same exact file data to an existing file, Dropbox won't consider this a change (since the file data didn't change) and so won't…

Thanks for sharing this detailed feedback! We appreciate you taking the time to write this up. I'll send this along to the team.

If you've updated your app's code to use scopes, you should also migrate your app to be a scoped app. You can do so via the app's page on the App Console. (This won't prevent users of old versions of your app from getting access tokens. Dropbox will just grant the default scopes you have set for your app in this case.) You…

The official Dropbox API v2 JavaScript SDK unfortunately doesn't have a way to specify a proxy. It is open source though, so you could fork and modify it as needed. For instance, it looks like isomorphic-fetch allows you to supply a proxy via an 'agent' option. You may want to try modifying the SDK to allow you to set that…

Are you using the official Dropbox API v2 JavaScript SDK? That doesn't offer an option for specifying a proxy unfortunately, but I'll pass this along as a feature request. I can't promise if or when that might be implemented though. If you're not using that SDK and are instead using some other library or client, you may be…