Greg-DB Dropbox Community Moderator

Yes, it's safe to post your client ID as long as you don't mind exposing your app name. Client IDs aren't considered secret values. Anyway, this behavior is expected in some cases. That is, if the user has already authorized the app to access their account, Dropbox may automatically redirect the user to the redirect URI…

It sounds like you're using the iOS Core SDK, for Dropbox API v1. Dropbox API v1 is deprecated and being retired in a few months. You should migrate to API v2 whenever you can. I recommend using the official API v2 Objective-C SDK. This is technically possible with the iOS Core SDK as well though. You can store an existing…

Based on the error you shared, it seems you're passing in some JavaScript object instead of a string for the access token. I can't offer help with passport-dropbox-oauth2 itself, as it's made by a third party, but can you share the code snippet(s) where you supply the access token?

Are you using the official API v2 Objective-C SDK? If so, you can construct a DBUserClient on the fly using an existing access token using the DBUserClient.initWithAccessToken constructor. If you want to have the SDK store the access token for you, you can use DBOAuthManager.storeAccessToken. Note that access tokens are…

When you use one of the Dropbox iOS SDKs, the access tokens are automatically stored for your app in the Keychain. You can clear these stored tokens using DBOAuthManager's clearStoredAccessToken or clearStoredAccessTokens methods: - Objective-C SDK:…

That's correct, when using the OAuth 2 'token' flow, such as in client-side apps like on iOS, the app secret is not necessary.

For reference, which app permissions do these apps use?

You can do this using either type of app. For a normal (not Business) Dropbox API app, the app gets connected to individual user accounts. When you connect a user account, the app gets an access token for that particular account. Using that token, both /2/files/list_folder and /2/files/create_folder will operate on that…

I can't offer any insight on using Angular or Express, but based on the error output, which cites XMLHttpRequest, it seems like your setup is trying to make an ajax call to /authorize, instead of sending the user there directly in their browser. The /authorize page is a web page the user needs to interact with directly,…

Thanks for the feedback!

Hi Anusha, to add a group to a shared or team folder, you should use the /2/sharing/add_folder_member endpoint: https://www.dropbox.com/developers/documentation/http/documentation#sharing-add_folder_member (Click through AddMember and MemberSelector to see more information on specifying the group via a group ID.)

Thanks for the report! I believe this is a known issue with the Java SDK release right now. The team is looking into it, and I'll follow up here once I have an update for you.

It sounds like you already have the right idea, in that you should store upload session ID and resume the upload from where you left off. I don't recommend relying on the session ID having "AAAA" though, as that's not guaranteed. You should store it in some format you can rely on, and use whatever session ID string the API…

Hi Bruce, can you share the code/HTML that's not working for you? Thanks in advance!

È possibile utilizzare l'/2/sharing/create_shared_link_with_settings endpoint per ottenere un link condiviso per una cartella. È anche possibile impostare una politica di controllo di accesso specifico: https://www.dropbox.com/developers/documentation/http/documentation#sharing-create_shared_link_with_settings --- Si prega…

I can't offer any insight on the Excel side of things, but you can use the Dropbox API to programmatically access file data in a connected account, using /2/files/download: https://www.dropbox.com/developers/documentation/http/documentation#files-download (There are also corresponding methods in the SDKs, if you're using…

I'll be happy to help with any issues you're having with the Dropbox developer platform, but I'll need some more information. Can you clarify exactly what you're trying to do? For example, is there some code you're already using that isn't working as expected? If so, please share: - the name and version of the platform and…

Hi Elizabeth, per the migration guide, when API v1 is retired in June 2017, any further API v1 calls will fail with a 400 error with the body: {"error": "v1_retired"} That is similar to other errors, and would be translated into error types in the SDKs. Exactly what would happen in your app would depend on the error…

Thanks for pointing that out. I'll ask the team to update that. The new /oauth2/token endpoint is here: https://api.dropboxapi.com/oauth2/token You can use this route for OAuth 2 for both API v1 and API v2.

The Dropbox API OAuth 2 implementation does not use refresh tokens. (Can you link to the part of the documentation that was confusing? We can look into clarifying it.) Dropbox API OAuth 2 access tokens don't expire, but can be revoked at any time by the user or app. Note that "authorization codes" are different, and do…

No, the Dropbox API doesn't offer a way to make an upload-only access token, but I'll be sure to pass this along as a feature request. Dropbox Business also doesn't offer a way to restrict the types of files you can upload.

I don't have an update on this unfortunately.

To revoke a shared link, you can use the /2/sharing/revoke_shared_link: https://www.dropbox.com/developers/documentation/http/documentation#sharing-revoke_shared_link Depending on your exact goal, you can also do other things like modify the policy on existing links, using /2/sharing/modify_shared_link_settings:…

We highly recommend setting up TLS on your web app for the sake of security, but if you don't have that set up, but for reference, it is technically possible to still use the OAuth flow without it. You would use the "code" flow but omit the 'redirect_uri' parameter. The user would then need to manually copy/paste the…

Thanks for the post! I'm not aware of any plans to add PDF support to /2/files/get_preview right now, but I'm sending this along as a feature request.

That's referring to the desktop client, which uses a different mechanism not available in the Dropbox API.

If you already have an OAuth 2 access token for the user, you don't need to call /2/auth/token/from_oauth1. If there is an OAuth 1 access token you want to upgrade though, the issue is that the /2/auth/token/from_oauth1 endpoint uses "app auth", so you shouldn't supply an OAuth 2 access token. That is, this line should be…

We're not currently set up to provide phone/Skype support but I'm happy to help on the forum. Anyway, you supplied this /authorize URL:…

Hi Mark, per the migration guide, when API v1 is retired in June 2017, any further API v1 calls will fail with a 400 error with the body: {"error": "v1_retired"} That is similar to other errors, and would be translated into error types in the SDKs. We can't promise from our side what various third party apps would do…

Thanks for the report! While it did happen to work previously (at least under a certain file size), the Saver didn't officially support data: URIs. It looks like this did stop working, so we'll look into it. I can't promise a fix though, as it wasn't considered officially supported. If we don't get a fix for this, I'll ask…