We are aware of the issue with the badge emails resending to everyone, we apologise for the inconvenience - learn more here.
Forum Discussion
(Beginner) API to create file requests
Good afternoon, I am working on a project that uses Qualtrics (a web-based survey/forms) platform to create Dropbox file requests to allow the user to securely upload files to go along with their f...
Good Morning Здравко - Some questions to make sure that I am understanding the post that you provided a link to.
1) Regarding the refresh_token: does that change or is that something that I can store as a constant in my workflow for this project?
2) While I was able to run the commands in a terminal window, I need to convert the refresh token statement "curl https://api.dropbox.com/oauth2/token -d grant_type=refresh_token -d refresh_token=<REF_TOKEN_HERE> -u <AppKey>:<AppSecret> " into something that can be used by the Qualtrics Web Service (format shown in original post)
I had tried to run this and it did not work. Suggestions?
DB-Des
Dropbox Engineer
Dropbox EngineerHi GaryH_BAR01,
To add to @Здравко's suggestion: Apps can get long-term access by requesting "offline" access, this can be achieved by adding "token_access_type=offline" to the authorization URL. Keep in mind that there will need to be user interaction the first time the app is being authorized. A "refresh token" is returned in the response object, this "refresh token" can be used to retrieve new short-lived access tokens as needed, without further manual user intervention.
To answer your first question, yes, the "refresh token" can be securely stored for later use; it can be re-used and doesn't expire automatically (though it can be revoked on demand).
I hope this information provides more clarity!
--
[Cross-linking for reference: https://stackoverflow.com/questions/79020302/dropbox-filerequest-api-handling-token-issues-working-with-qualtrics-webserv ]
DB-Des the next issue that I am having is how to format the command for the refresh token as the POST request (via the Form image that I submitted) since I cannot run a cURL command directly in the external platform.
curl https://api.dropbox.com/oauth2/token -d grant_type=refresh_token -d refresh_token=${e://Field/DBX_AUTH_REFRESH_TOKEN} -u ${e://Field/DBX_AUTH_APP_KEY}:${e://Field/DBX_AUTH_APP_SECRET}The connector prompt that Qualtrics is providing to access the external APIs
Asks for a URL ( which I am assuming is https://api.dropbox.com/oauth2/token)
Using the "POST" Method I am able to set Query Parameters, Body Parameters (either in application/json or application/x-www-form-urlencoded format) and Custom Headers.
I attempted to set the body parameters using application/json format
grant_type : refresh_token
refresh_token : {the Refresh Token issued by DBX}
user: {AppKey}:{AppSecret}
However the response I got was an error from DBX "The request parameters do not match any of the supported authorization flows. Please refer to the API documentation for the correct parameters."
I suspect that I am putting the values from the cURL statement in the wrong boxes could you please advise?
- DB-Des
Hi GaryH_BAR01,
The /oauth2/token endpoint only accepts application/x-www-form-urlencoded format.
Additionally, based on the screenshot provided, there is a field being added with "user" as a parameter, which is not a parameter recognized by /oauth2/token — most likely why you are receiving that error.
When using Basic Auth (AppKey:AppSecret), the corresponding cURL request would look like this:
curl https://api.dropbox.com/oauth2/token \ -d grant_type=refresh_token \ -d refresh_token=DBX_AUTH_REFRESH_TOKEN \ -u AppKey:AppSecret
About Dropbox API Support & Feedback
Find help with the Dropbox API from other developers.
