Documentation for sharing authentication with webserver

Thanks for the post. I'm not sure I fully understand your scenario, so let me know if I'm missing something.

For reference, the "app key and secret" identify a particular app. (I.e., you have one app key and secret pair for your 'BusinessApp', and a different' one for your 'PersonalApp'.)

An "access token" identifies a specific user-app pair, and enables access to that particular account, to the extent allowed by the app's permission. 

The "Generate" button is a shortcut for getting an access token for that particular app for the account that owns the app. The normal process is to use the OAuth flow to allow any arbitrary app to connect to the app. 

If you do want other users to be able to connect to your app, you should implement the OAuth flow, as shown in this example:

https://github.com/dropbox/dropbox-sdk-java/tree/master/examples/web-file-browser

You could technically implement the same OAuth flow client-side. In that case, you should get the access token (which is just a string) and pass it up to your server however you want. In any case, how you're using the access token looks right. Just make sure the access token is for the desired app and account pair.

Since you have a server app anyway though, it's recommend that you process it server-side to begin with, as in the sample above.