You might see that the Dropbox Community team have been busy working on some major updates to the Community itself! So, here is some info on what’s changed, what’s staying the same and what you can expect from the Dropbox Community overall.
Forum Discussion
OAuth 2.0 for native apps
Hi, How a native app (a desktop application) can implement and use the Authorization flow without having to know/use the app's secret? Quoting from here: "The current industry best practice is to ...
Yes, for client-side apps, you should use the "implicit" a.k.a. "token" flow. This is the version of the Dropbox OAuth app authorization flow that does not require use of the app secret.
The DbxWebAuth class in the official Dropbox API v2 Java SDK is only built for web apps though, and does not support the implicit flow. I'll pass this along as a feature request, but I can't promise if or when that might be implemented though.
There is a special flow built for Android though, in case you're running on Android. Otherwise, you'll need to implement the implicit flow directly.
Greg-DB
Dropbox Staff
Dropbox StaffYes, for client-side apps, you should use the "implicit" a.k.a. "token" flow. This is the version of the Dropbox OAuth app authorization flow that does not require use of the app secret.
The DbxWebAuth class in the official Dropbox API v2 Java SDK is only built for web apps though, and does not support the implicit flow. I'll pass this along as a feature request, but I can't promise if or when that might be implemented though.
There is a special flow built for Android though, in case you're running on Android. Otherwise, you'll need to implement the implicit flow directly.
About Dropbox API Support & Feedback
Find help with the Dropbox API from other developers.
