We are aware of the issue with the badge emails resending to everyone, we apologise for the inconvenience - learn more here.
Forum Discussion
Authorization code flow <AUTHORIZATION_CODE> expiration of offline token access type
Hi!
I want to get long live connection from an application to Dropbox App folder.
The recommended OAuth authorization in that case is authorization code flow with offline token access type.
After initial authorization application get <AUTHORIZATION_CODE>, <ACCESS_TOKEN> and <REFRESH_TOKEN>.
Is the <AUTHORIZATION_CODE>/<REFRESH_TOKEN> expires and how long for *offline* token access type?
Whether using "offline" access or not, "authorization codes" can each only be used once, and are only valid for a short period of time. Apps should use authorization codes once immediately upon receiving them.
"Refresh tokens" do not expire by default, and can be stored and re-used repeatedly for further API calls without the user present. Refresh tokens can be revoked on demand though.
- Greg-DB
Dropbox Staff
Whether using "offline" access or not, "authorization codes" can each only be used once, and are only valid for a short period of time. Apps should use authorization codes once immediately upon receiving them.
"Refresh tokens" do not expire by default, and can be stored and re-used repeatedly for further API calls without the user present. Refresh tokens can be revoked on demand though.
About Discuss Dropbox Developer & API
Make connections with other developers
