@tahjdbx, As seems you're totally out of topic. 🤷
The issue is not that some prompt that invites for authorization comes up! The complain is about fact that is needed a link without redirect and a way to avoid 'attachment' directive in the header - something that seems missing for no redirect links while available for redirect links only. I still don't understand why at all such thing would be need, but it's matter of different topic.
Dropbox decides alone what type of directive to set on non redirect link. While for an image, for instance, is a header like:
content-disposition: inline; filename=...
... but for XML file it looks like:
content-disposition: attachment; filename=...
... and there is no way this to be changed (as far as I know) for such types of links. That's it.
Maybe the solution would be both 'attachment' and 'inline' to be dropped completely from such types of links (only filename to stay) or parameters 'raw' and 'dl' to keep matter (not to be ignored, as they are now).
Hope this clarifies the matter of issue. 😉
