We're making changes to the Community, so you may have received some notifications - thanks for your patience and welcome back. Learn more here.
Forum Discussion
Getting refreshed access token from Generated access tokem
Hi,
I have an iOS objective c application connected with dropbox SDK.
We are using generated access token to access apps folder from my BD account.
client = [[DBUserClient alloc] initWithAccessToken:@"sl.BThRWss....."];
But this Generated access token expires after sometime. What is the possible solution so that it doesnt expire or get a refreshed access token.
Note that we need to use the generated access token approach other than oAuth flow.
Can you provide any code sample in Objective c to get this refreshed token or how we can achieve this?
Thanks,
SneYellow46 wrote:...
Note that we need to use the generated access token approach other than oAuth flow.
...
Hi SneYellow46,
You can't use generated access token for long term access. All access tokens are short lived (including generated). You may retrieve refresh token in separate application (so one OAuth flow has to be performed once, at least) and after that embed this token and reuse it. Such an approach is suitable for server side use only! Be careful. Usage of any long term embedded token is NOT good idea for client side application.
Hope this helps.
Hi,
Thanks for the reply Здравко .
Do you mean we have to make oAuth flow from my application once and get access token and use it later do distribute to other users to grant access?
Or how could this work in my mobile application?
SneYellow46 wrote:...
Do you mean we have to make oAuth flow from my application once and get access token and use it later do distribute to other users to grant access?
...
No, no, no... You said that you need generated access token. That was related to this - nothing more!!! I said, such a solution is suitable for server side application only (in the same context).
SneYellow46 wrote:...
Or how could this work in my mobile application?
On mobile application on every install you should perform OAuth flow and keep the refresh token (at least). Once authentication info is available you can just create a client object and use it... That's it.
