<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic DropBox API - token is short lived, why? in Discuss Dropbox Developer &amp; API</title>
    <link>https://www.dropboxforum.com/t5/Discuss-Dropbox-Developer-API/DropBox-API-token-is-short-lived-why/m-p/676900#M3309</link>
    <description>&lt;P&gt;I'm trying to set up access to DropBox for some "enterprisey" tasks (we have a shared DropBox workspace where I work).&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I've registered an OAuth2 app and went through&amp;nbsp;&lt;A href="https://www.dropbox.com/oauth2/authorize" target="_blank" rel="noopener"&gt;https://www.dropbox.com/oauth2/authorize&lt;/A&gt;&amp;nbsp;to get an authorization code and then used POST to&amp;nbsp;&lt;A href="https://api.dropbox.com/oauth2/token" target="_blank" rel="noopener"&gt;https://api.dropbox.com/oauth2/token &lt;/A&gt;to exchange the code for a token.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Question:&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;The access token starts with "sl." which as I understand means is a short-lived token. There is an "&lt;SPAN class=""&gt;expires_in: 14400" stanza which is 4 hours.&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;How can I get a non-expiring, permanent token?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;My app is in "Development" status - is that why? I was not planning to apply for Production status because the "app's" only purpose is to get an access token, but if that's why, then I will have to.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Any recommendations?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Fri, 14 Apr 2023 20:50:53 GMT</pubDate>
    <dc:creator>KostyaVasilyev</dc:creator>
    <dc:date>2023-04-14T20:50:53Z</dc:date>
    <item>
      <title>DropBox API - token is short lived, why?</title>
      <link>https://www.dropboxforum.com/t5/Discuss-Dropbox-Developer-API/DropBox-API-token-is-short-lived-why/m-p/676900#M3309</link>
      <description>&lt;P&gt;I'm trying to set up access to DropBox for some "enterprisey" tasks (we have a shared DropBox workspace where I work).&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I've registered an OAuth2 app and went through&amp;nbsp;&lt;A href="https://www.dropbox.com/oauth2/authorize" target="_blank" rel="noopener"&gt;https://www.dropbox.com/oauth2/authorize&lt;/A&gt;&amp;nbsp;to get an authorization code and then used POST to&amp;nbsp;&lt;A href="https://api.dropbox.com/oauth2/token" target="_blank" rel="noopener"&gt;https://api.dropbox.com/oauth2/token &lt;/A&gt;to exchange the code for a token.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Question:&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;The access token starts with "sl." which as I understand means is a short-lived token. There is an "&lt;SPAN class=""&gt;expires_in: 14400" stanza which is 4 hours.&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;How can I get a non-expiring, permanent token?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;My app is in "Development" status - is that why? I was not planning to apply for Production status because the "app's" only purpose is to get an access token, but if that's why, then I will have to.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Any recommendations?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Fri, 14 Apr 2023 20:50:53 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Discuss-Dropbox-Developer-API/DropBox-API-token-is-short-lived-why/m-p/676900#M3309</guid>
      <dc:creator>KostyaVasilyev</dc:creator>
      <dc:date>2023-04-14T20:50:53Z</dc:date>
    </item>
    <item>
      <title>Re: DropBox API - token is short lived, why?</title>
      <link>https://www.dropboxforum.com/t5/Discuss-Dropbox-Developer-API/DropBox-API-token-is-short-lived-why/m-p/676909#M3311</link>
      <description>&lt;P&gt;Dropbox is no longer offering the option for creating new long-lived access tokens. Dropbox is now issuing short-lived access tokens (and optional refresh tokens) instead of long-lived access tokens. You can find &lt;A href="https://dropbox.tech/developers/migrating-app-permissions-and-access-tokens#updating-access-token-type" target="_blank" rel="noopener noreferrer"&gt;more information on this migration here&lt;/A&gt;. This applies whether the app is in development or production status.&lt;BR /&gt;&lt;BR /&gt;Apps can still get long-term access by requesting "offline" access though, in which case the app receives a "refresh token" that can be used to retrieve new short-lived access tokens as needed, without further manual user intervention. You can find more information in the &lt;A href="https://developers.dropbox.com/oauth-guide" target="_blank" rel="noopener noreferrer"&gt;OAuth Guide&lt;/A&gt; and &lt;A href="https://www.dropbox.com/developers/documentation/http/documentation#authorization" target="_blank" rel="noopener noreferrer"&gt;authorization documentation&lt;/A&gt;. There's a basic outline of processing this flow in &lt;A href="https://dropbox.tech/developers/using-oauth-2-0-with-offline-access" target="_blank" rel="noopener noreferrer"&gt;this blog post&lt;/A&gt; which may serve as a useful example.&lt;/P&gt;</description>
      <pubDate>Fri, 14 Apr 2023 21:09:08 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Discuss-Dropbox-Developer-API/DropBox-API-token-is-short-lived-why/m-p/676909#M3311</guid>
      <dc:creator>Greg-DB</dc:creator>
      <dc:date>2023-04-14T21:09:08Z</dc:date>
    </item>
    <item>
      <title>Re: DropBox API - token is short lived, why?</title>
      <link>https://www.dropboxforum.com/t5/Discuss-Dropbox-Developer-API/DropBox-API-token-is-short-lived-why/m-p/676923#M3313</link>
      <description>&lt;P&gt;Thank you Greg.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Just tried adding&amp;nbsp;token_access_type=offline to the authorization request and indeed got a refresh token.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I have used OAuth2 before so know what to do next.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Cheers!&lt;/P&gt;</description>
      <pubDate>Fri, 14 Apr 2023 22:29:00 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Discuss-Dropbox-Developer-API/DropBox-API-token-is-short-lived-why/m-p/676923#M3313</guid>
      <dc:creator>KostyaVasilyev</dc:creator>
      <dc:date>2023-04-14T22:29:00Z</dc:date>
    </item>
  </channel>
</rss>

