You might see that the Dropbox Community team have been busy working on some major updates to the Community itself! So, here is some info on what’s changed, what’s staying the same and what you can expect from the Dropbox Community overall.
Forum Discussion
Refreshing short live tokens without Consumer Key and Consumer Secrect
Dear all,
we are updating our code in order to support refresh token. We need backgroud renewal of the token.
We are using the JAVA version of the API.
It seems that in order to update the token (to refresh the short lived token) it is mandatory to store in the code the following secret information (Consumer Key and Consumer Secrect):
ApiKey and ApiSecret
DbxRequestConfig requests ApiKey and ApiSecret in order to refresh the token.
https://dropbox.github.io/dropbox-sdk-java/api-docs/v3.1.x/com/dropbox/core/oauth/DbxCredential.html
Is there another solution that avoids to write the Consumer Key and Consumer Secrect within the code?
Thanks to all
Yes, you can use the "PKCE" flow to process "offline" access without having the app secret. You can find an example of running this with the Java SDK here:
- Greg-DB
Dropbox Staff
Yes, you can use the "PKCE" flow to process "offline" access without having the app secret. You can find an example of running this with the Java SDK here:
We solved following your suggestion, thanks!
About Dropbox API Support & Feedback
Find help with the Dropbox API from other developers.
