How to login to dropbox account from inside UWP app?

Thank you so much for your answer!

As far as I understand, please correct me if I'm wrong, here Google says that it is discontinuing support for authentication using Web View. - " we will no longer allow OAuth requests to Google in embedded browsers known as “web-views”.

Next, they recommend "using the device browser for OAuth requests instead of an embedded web-view".

But how it connected with Web Authentication Broker?

As I understand that is absolutely different mechanisms. 

Web-view is an embeddable browser and "apps are able to inspect and modify content in a web-view".

Web Authentication Broker is a system API that Windows uses instead of a web-view to prevent user passwords theft by men-in-the-middle.

I see that Google trusts Web Authentication Broker because that's what they use to connect to Google Drive or Google Mail to applications for Windows.

Vasilinka I can't speak to Google's own definitions or usage, but for the purposes of Dropbox's OAuth app authorization flow, WebAuthenticationBroker is considered a kind of webview and is not supported.

Now I understand. Thank you!

That is mean that it is not a Google requirement but an independent Dropbox decision. I see no reason to think that System API is a kind of Web-view and, I will be glad if you tell me exactly why you think so.

Anyway, today we have such a situation: Our application has tens of thousands of users connecting their Dropbox account.
They can, of course, use an installed browser for authorization. Many people dislike this because they think it is a more dangerous way to enter data than as the browser becomes an intermediary in this process. To those who write to us, we answer that this is not our bug, but your decision. However, this is not obvious to most.

Users see that when they login to GoogleDrive, OneDrive, Yandex Disk, etc all of these cloud services use Web Authentication Broker and only while connecting to Dropbox tries to open the browser in a new window. As a result,  they regularly write to us about "the bug" 😒.

May I send them a link to this forum for they understood what really going on?

Vasilinka Thanks for the additional feedback. I can't offer much more insight on the specifics of what went in to determining policies, but you can find the documentation for this here. And yes, this thread is publicly available here.

Thank you for the answer!

---

Greg-DB wrote:

... I can't offer much more insight on the specifics of what went in to determining policies, but you can find the documentation for this here.

---

I have seen this documentation before and there is not a single mention of the fact that Web Authentication Broker is prohibited to use (and this obviously could not be, because Google themselves support it) or that it is the same as Web View. 

Please share with me the contact of a person in Dropbox who can explain: Why do you think Web Authentication Broker is a Web View? I consider it necessary to escalate this issue since the interests of a fairly large number of users suffer. Only we have tens of thousands of them, and there are many applications similar to ours.

Vasilinka I cannot disclose Dropbox employee contact information. I've sent your feedback and comments along to the team, and I'll follow up here if/when I have anything else to share.

Hi, Greg

---

Greg-DB wrote:

I've sent your feedback and comments along to the team.

Did you get any response from the team?

Vasilinka We've received the feedback, but at this time we don't have any plans to change the policy. Thanks!