We are aware of the issue with the badge emails resending to everyone, we apologise for the inconvenience - learn more here.

Forum Discussion

pritesh12's avatar
pritesh12
Helpful | Level 5
2 years ago

About DropBox Developer API Access Token

Hello Developers! I am new to Dropbox API and I am facing issues with Access Tokens. I am building a MERN application where I have to store the access token in environmental variables. Here as Access Token is short-lived, I must refresh it each time I work with it. Is there any other way that those Access Tokens can be accessible for much longer? 

Thanks for helping in advance!


  • pritesh12 wrote:
    ... I have to do it by hand each time🥲

    "Have to"??? Why? 🤔 Is there something that prevent using refresh token in your scenario? If you use official SDK refreshing is done automatically, so you don't need to change much in your code. 😉 If you use your own implementation, depending of your design skills (if you have organized you credentials dynamically), may be easy to add automatic refresh too (similar as done in Dropbox SDKs).

  • DB-Des's avatar
    DB-Des
    Icon for Dropbox Engineer rankDropbox Engineer

    Hi,

     

    Dropbox is no longer offering the option for creating new long-lived access tokens. Dropbox is now issuing short-lived access tokens (and optional refresh tokens) instead of long-lived access tokens. You can find more information on this migration here.

    Apps can still get long-term access by requesting "offline" access though, in which case the app receives a "refresh token" that can be used to retrieve new short-lived access tokens as needed, without further manual user intervention. You can find more information in the OAuth Guide and authorization documentation. There's a basic outline of processing this flow in this blog post which may serve as a useful example.


  • pritesh12 wrote:

    ... Here as Access Token is short-lived, I must refresh it each time I work with it. ...


    Hi pritesh12,

    You must refresh it each time and there is no other way. Do you use refresh token for this purpose or do it by hand?

      • Здравко's avatar
        Здравко
        Legendary | Level 20

        pritesh12 wrote:
        ... I have to do it by hand each time🥲

        "Have to"??? Why? 🤔 Is there something that prevent using refresh token in your scenario? If you use official SDK refreshing is done automatically, so you don't need to change much in your code. 😉 If you use your own implementation, depending of your design skills (if you have organized you credentials dynamically), may be easy to add automatic refresh too (similar as done in Dropbox SDKs).

    • Здравко's avatar
      Здравко
      Legendary | Level 20

      Adawntoremember wrote:
      Any information would be awesome

      Adawntoremember, Yes, fully agree. 😉 Some information about what exactly you're doing and what confuses you would be nice. Where you're struggling and some code snippet together with unexpected output representing eventual issue you met with would be useful too. Mask any private information like tokens, for instance.