Dropbox generate Auth Token thru java

Jagan Tirumalai, the example of the PKCE auth flow is meant to serve as a reference implementation. It's designed to help developers understand how PKCE works in practice but may not be suitable for all use cases or production environments without modification.

We recommend reviewing the code and adapting it to fit your specific needs, including automating the auth flow.

Got it. Thank you once again for being patient in answering my questions.  The method getAccessToken() worked fine as expected.

Is this part automated in pkceAuthorize.java ?  

Currently i am copying the authorizeUrl and pasting it into the web browser and copying back the authorization code and pasting it into my java application and then the application runs fine.

Hi Jagan Tirumalai,

You would need to use getter methods to retrieve the values of the respective properties. Following the example provided previously (for PKCE flow), it is returning a DbxAuthFinish object. That object contains getters for the properties that could be returned in the response — one of them being the access_token.

In this specific case, the corresponding getter method to retrieve the access token would be getAccessToken().

The following lines of code provide an example of one way the access_token could be retrieved:

// Assign the DbxAuthFinish object to a variable
DbxAuthFinish authFinish = authorize();

// Use the getAccessToken() method to retrieve the access_token and save to a variable
String accessToken = authFinish.getAccessToken();

To retrieve the refresh_token, for offline access, you would use the getRefreshToken() method.

Hi,

Thank you for your suggestion. The class PkceAuthorize.java doesn't generate or return any access_token. How do i go about using this class? 

All i need is access_token to be generated without manual intervention, so that i can automate the dropbox .  Is there such a method in java dropbox api? 

Hi Jagan Tirumalai,

Based on the Auth URL you have provided, it looks like you are following a PKCE auth flow, which would explain why the suggestion to use DbxPKCEWebAuth is being made.

If the intention is to use PKCE, we would recommend taking a look at this example instead.

Hi Greg-DB

I have tried executing with ScopeAuthorize.java in my java program. When running the script its asking me to use DbxPKCEWebAuth instead of DbxWebAuth. So i have modified the code in ScopeAuthorize.java (local version) with DbxPKCEWebAuth. After changing with DbxPKCEWebAuth i am getting the following error when validating the access code. 

Debug Stmts from ScopeAuthorize.java

Jagan Tirumalai That "access code" is also known as the "authorization code". It should not be copied into the app's settings on the App Console; it should be copied back into the app itself. For example, refer to this line in the Java SDK example code that reads the authorization code back into the app so it can then finish the authorization flow.

Thank you very much for your response. I have generated an access code from oauth2. Its asking me to enter this code into CLIENTSDATA (which is the app i created in dropbox). I don't know where to enter this Access Code in ClientsData. Given below are the screenshots of the access code from OAUTH2 and ClientsData settings/permissions.  Where do i enter this access code in ClientsData settings/permissions?

Hi Jagan Tirumalai,

Even though Dropbox issues short-lived access tokens, apps can get long-term access by requesting "offline" access, in which case the app receives a "refresh token" that can be used to retrieve new short-lived access tokens as needed, without further manual user intervention. Refresh tokens do not expire automatically and can be used repeatedly. You can find more information in the OAuth Guide and authorization documentation. There's a basic outline of processing this flow in this blog post which may serve as a useful example.

For your use case, working with refresh tokens would be easier with our official Java SDK. Helper methods accept the refresh token, and manage this update of the short-lived access token for you.

I hope you find this information helpful!