Your workflow is unique 👨💻 - tell us how you use Dropbox here.
Forum Discussion
Hidding app_key and app_secret inside a possible desktop app
I have build a desktop app that will be distributed to any user who likes to use it. How do I use the core api (with python) to hide the both keys assigned by Dropbox for the app I made?
Seems to ...
Greg-DB
Dropbox Community Moderator
Dropbox Community ModeratorThis is an issue inherent to using OAuth 1 with a client-side app. If you're using OAuth 1, this is unavoidable. You can try to obfuscate the keys to make it difficult, but you can't make it impossible to extract them. If they are extracted, this doesn't itself enable access to user data though, it would just let someone else impersonate your app.
With OAuth 2, you can use the "token" a.k.a. "implicit" flow, which doesn't require the use of the secret anyway:
About Dropbox API Support and Feedback
Get help with the Dropbox API from fellow developers and experts.
