Revoke and reissue token ....... keeping the Token server side.

[mjoyner1]

Hi fellow Dropboxer,

Unfortunately, our app needs to let the client have the Bearer token for a COR's direct content upload. I was wondering if it was possible to periodically revoke and get a new token without the OAuth dance. That way, there would be a TTL on the bearer and we don't need to worry about the client having the Bearer if we renew the Bearer every 24 hours.

[Greg-DB · Accepted solution]

Unfortunately, the Dropbox API doesn't offer a way to do that, but I'll be sure to pass this along as a feature request.

[Greg-DB]

The Dropbox API now offers the ability to get a temporary upload link so that you can have clients upload to an account without an access token for the account. You can find more information in this blog post:

https://blogs.dropbox.com/developers/2019/01/new-file-upload-link-api/

[Greg-DB]

The Dropbox API now offers short-lived access tokens and refresh tokens. You can find more information here: https://dropbox.tech/developers/migrating-app-permissions-and-access-tokens