We’re Still Here to Help (Even Over the Holidays!) - find out more here.
Forum Discussion
Esikhoob
3 years agoHelpful | Level 5
What function in .NET SDK is for /oauth2/token
Hi
In our Website, written with ASP.NET and C#, we want to use .NET API in offline access manner. So I think we need to get access token by using refresh token. I read the documentation and find ou...
Greg-DB
Dropbox Community Moderator
3 years agoEsikhoob As it is best not to leak your app secret to users, you can instead use the "PKCE" app authorization flow with the JavaScript SDK itself. The PKCE flow is intended for client-side applications and does not require the use of the app secret. You can find an example of using it with the JavaScript SDK here.
Esikhoob
3 years agoHelpful | Level 5
Thanks all for these helping answers.
Greg-DBI read PKCE documentation, but I don`t understand the purpose of eliminating app secret, since others also can call the API without it.
- Greg-DB3 years ago
Dropbox Community Moderator
Esikhoob PKCE is a feature of the OAuth 2 specification. For more information on it, in addition to our own OAuth Guide and authorization documentation, you may be interested in reading the OAuth 2 PKCE specification and resources.
About Dropbox API Support & Feedback
Find help with the Dropbox API from other developers.
The Dropbox Community team is active from Monday to Friday. We try to respond to you as soon as we can, usually within 2 hours.
If you need more help you can view your support options (expected response time for an email or ticket is 24 hours), or contact us on X, Facebook or Instagram.
For more info on available support options for your Dropbox plan, see this article.
If you found the answer to your question in this Community thread, please 'like' the post to say thanks and to let us know it was useful!