We’re Still Here to Help (Even Over the Holidays!) - find out more here.
Forum Discussion
RGDev
7 years agoExplorer | Level 3
Access Token for Dropbox Business App
I'm going to develop an applcation for Dropbox for Business team. E.g. this will be a desktop application that searching content across all accounts in organization. And I slightly confused about OA...
- 7 years ago
Yes, for "Dropbox Business API" apps, the access tokens enable access to the entire team (and in particular, Dropbox Business API apps with the "team member file access" permission can operate on specific members, using DropboxTeamClient.AsMember).
For "Dropbox API" apps, the access tokens enable access only to the individual account.
This works the same way regardless of how the access token was retrieved (i.e., OAuth flow vs. "Generate" button).
RGDev
7 years agoExplorer | Level 3
Thank you for quick answer.
But, it looks like the Access token that was generated by clicking "Generate" button give me access also to all Dropbox accounts in the team.
At least, DropboxTeamClient.AsMember method allows me to perform user's endpoints methods.
Greg-DB
Dropbox Community Moderator
7 years agoYes, for "Dropbox Business API" apps, the access tokens enable access to the entire team (and in particular, Dropbox Business API apps with the "team member file access" permission can operate on specific members, using DropboxTeamClient.AsMember).
For "Dropbox API" apps, the access tokens enable access only to the individual account.
This works the same way regardless of how the access token was retrieved (i.e., OAuth flow vs. "Generate" button).
- RGDev7 years agoExplorer | Level 3
In other words, are there no differences in ways how Access token for Dropbox Businness API App was received (OAuth flow or "Generate" button) from the viewpoint of security and common production approaches?
- Greg-DB7 years ago
Dropbox Community Moderator
That's correct.
Again though, note that the "Generate" button can only be used to get an access token for your own account/team. If you are building your app for use by other teams, you do need to implement the OAuth flow in your app. Also, you should never share your own access token with others.
- RGDev7 years agoExplorer | Level 3
Got it, thank you !
About Dropbox API Support & Feedback
Find help with the Dropbox API from other developers.
The Dropbox Community team is active from Monday to Friday. We try to respond to you as soon as we can, usually within 2 hours.
If you need more help you can view your support options (expected response time for an email or ticket is 24 hours), or contact us on X, Facebook or Instagram.
For more info on available support options for your Dropbox plan, see this article.
If you found the answer to your question in this Community thread, please 'like' the post to say thanks and to let us know it was useful!