cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Update: Find information on Dropbox support during COVID-19 here
Close

Discuss Dropbox Developer & API

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Highlighted

Dropbox Extensions opens to all developers!

Dropboxer
Dropboxer

Dropbox Extensions are now open to all developers! It's a feature that can be added to your new or existing apps with Full Dropbox access, and is compatible with Dropbox API v2 and OAuth 2.0 flow. You can read more about Extensions in our developer blog or the Extensions Guide.

We'd love to hear how you're thinking about leveraging Extensions, or any other features you'd like to see in Extensions. Please post your comments and questions below and we look forward to hearing from you .

1 Reply 1
Highlighted

Re: Dropbox Extensions opens to all developers!

Explorer | Level 3

This is great news.

 

However looks like there is a bug that needs fixing.

 

Scenario:

- Consider a Personal App with "Full Dropbox" permission (since thats only where its available as type of writing this) - will call it MyShare

1. User A oauth the app, we got user token - good so far

2. User A goes to DB and select a file from ROOT/FILE.txt and clicks share with MyShare - good so far

3. User A is taken to EXTENSIONURL?file_id... - very good so far

4. "MyShare App" looks up file_id and OOPS, it doesn't have access - very bad

5. Upon investigating it turns out that the "Full Dropbox" scope only has access to "User A's files and folders'

 

Problem

- As an extension I would like for it to work on any file, regardless of it being outsitde "my folder" or my files

-- It would defeat the purpose if extenion works only my files

- Right now I can select other users file, click on share - and it fails as the API doesn't have the ability to download it.

- The user doesn't have access to the folders outside his own folder and it fails with:

{
  "error_summary": "path/not_found/",
  "error": {
    ".tag": "path",
    "path": {
      ".tag": "not_found"
    }
  }
}

- Further more when you make the api call to: https://api.dropboxapi.com/2/files/list_folder, you are chrooted to user's folder and dont have visibility outside. This doesn't seem competable with extensions.

 

Hope this helps and looking forward to a fix/update on this.

 

Thanks

 

Polls
Do you know how to organize your files and folders?
We have created a guide on folder best practice, so you can get organized now check it out here.

Work Smarter with Dropbox

The way we work is changing. Share and discover new ways to work smarter with Dropbox in our community.

Sound good? Let's get started.
Who's talking

Top contributors to this post

What do Dropbox user levels mean?
Need more support?