Application token key

[guymayor]

Is it possible to get a token key only with APP_KEY and APP_SECRET without redirect_uri the authorizing URL that needes the user to open the URL in a new tab and copy-paste the code?

If not, can I assume that this code will never be expired?

[Здравко]

---

@guymayor wrote:

Is it possible to get a token key only with APP_KEY and APP_SECRET without redirect_uri the authorizing URL that needes the user to open the URL in a new tab and copy-paste the code?

...

---

Hi @guymayor,

APP_KEY and APP_SECRET represent the application identity, not to the user one! What kind of data, your application will get access to, if not directed to particular user?! That's what token key is for - linking your application instance to particular user profile/account. Of course, user should agree.

---

@guymayor wrote:

...

If not, can I assume that this code will never be expired?

---

If not deactivated in some way (either Dropbox, you or the user) - Yes. Otherwise - no.

Hope this helps.

[guymayor]

---

---

Hi @guymayor,

APP_KEY and APP_SECRET represent the application identity, not to the user one! What kind of data, your application will get access to, if not directed to particular user?! That's what token key is for - linking your application instance to particular user profile/account. Of course, user should agree.

---

---

Hey @Здравко Thanks for your answer, 

This is a dropbox for business application so I want the application to perform actions with admin permissions. do I have to link the application to a specific user?

I even want to see only the team_folders and not the personal ones if it's possible

[Здравко]

As mentioned in API documentation:

---

For endpoints that accept performing actions on behalf of a team administrator using the Dropbox-API-Select-Admin header, files may be referenced using a namespace-relative path (e.g. "ns:123456/cupcake.png"). In this case, the namespace ID, "123456", would be the shared_folder_id or team_folder_id of the shared folder or the team folder containing the file or folder, and the path, "/cupcake.png", would be the logical path to the content relative to its shared folder or team folder container.

---

For more information take a look on Dropbox Business API documentation.

[guymayor]

Yes, I saw this on the API, the question is if the admin id that is set in Dropbox-API-Select-Admin header must be linked to the token key?

[Здравко]

I'm not sure what you really ask. Dropbox authorization is based on token keys, so such key is something mandatory.

[guymayor]

I'll rephrase the question,

Is it possible to use API methods that support Dropbox-API-Select-Admin header as authentication like files-upload with a token key that being generated only by app_ket and app_secert (without user approval)

[Здравко]

Read more carefully files-upload info, you have referred above. Is there any info about using this API point without token (what info will be accessed in such case)?!  Read again, more carefully, my first post in this thread.

[guymayor]

I'm not sying access without a token, I just want to get a token without a user approval

[guymayor]

I'm not sying access without a token, I just want to get a token without a user approval