Non expiring token kept on changing

Thank you for your explanations. I integrated the authorization into our GUI and submitted the APP for production due to around 45,000 users of our plugin. How long does this test normally take? I currently have many users with problems and the support effort is currently very high. I hope that the app will be released for production soon so that users can use it normally again. The app is called: Backup-DropCloud Thanks in advance.

simatec1976 That should be processed within a few business days. If you need help with a production request you can always open a ticket via https://www.dropbox.com/developers/contact .

Greg-DB 

My request was denied because the app name doesn't match the plugin name.

Unfortunately, this name is already taken and I can't do anything about it

simatec1976 I just checked on this, and it looks like you already have an open support ticket for that, so they'll follow up with you there soon.

Greg-DB 

thx for your support.
Yes, I opened a ticket or replied to the rejection by email.
Unfortunately, the app can only be checked if you install the iot system iobroker.

That means there is no website or access to test it.
The whole thing is integrated in the plugin backitup for the iobroker.

Greg-DB 

I've come a long way now.

However, I'm hanging on refresh_token with PKCE.

How can I do a refresh with the VERIFICATION_CODE.

I didn't want to work with client_secret.

with client_secret the example looks like this:

curl https://api.dropbox.com/oauth2/token \
    -d grant_type=refresh_token \
    -d refresh_token=<REFRESH_TOKEN> \
    -u <APP_KEY>:<APP_SECRET>

Is there also a way to refresh_token with the VERIFICATION_CODE instead of the client_secret?

I really don't want the client_secet in the Source code

Hey simatec1976 

To use the /oauth2/token with a refresh token that was retrieved via the PKCE flow to get a new short-lived access token without using the app secret would look like this:

curl https://api.dropbox.com/oauth2/token \
    -d refresh_token=<REFRESH_TOKEN> \
    -d grant_type=refresh_token \
    -d client_id=<APP_KEY>