Your workflow is unique 👨‍💻 -  tell us how you use Dropbox here.

Forum Discussion

Issac J.'s avatar
Issac J.
New member | Level 1
10 years ago

Hide asking confirmation on login

Hello, is it possible to remove the authorization popup everytime on logging in?

If once user is logged in i don't need to show the popup in next login. Is it possible?

7 Replies

Replies have been turned off for this discussion
  • Greg-DB's avatar
    Greg-DB
    Icon for Dropbox Community Moderator rankDropbox Community Moderator
    10 years ago

    Yes, your app can store and re-use the resulting access token for each user, so that it doesn't need to send the user through the OAuth app authorization flow each time. 

    Exactly how you do so depends on your platform, and the library/SDK you're using, so I recommend referring to the relevant tutorial and/or documentation.

  • Greg-DB's avatar
    Greg-DB
    Icon for Dropbox Community Moderator rankDropbox Community Moderator
    10 years ago

    The result of the OAuth 2 authorize URL you posted is an access token. When that access token (which is just a string) is returned to your app, you can store and re-use it in the future, so that you don't have to send the user to that authorize URL again. Since the access token is just a string, you can store is in whatever data persistence layer you have (i.e., your database, or the browser's local storage, etc.).

  • Issac J.'s avatar
    Issac J.
    New member | Level 1
    10 years ago

    But the access token generated will be different for different users right? I am not having a specific  login to the application for getting userid. The only authorize call is to the dropbox. If multiple users are using this application and if one particular accesstoken is stored and fetched from the storge, all the items be stored into that particular account.

  • Greg-DB's avatar
    Greg-DB
    Icon for Dropbox Community Moderator rankDropbox Community Moderator
    10 years ago

    That's correct, access tokens are user-specific. It sounds like you mean that your app doesn't have its own user model, and is relying on the Dropbox app authorization flow as authentication. First, it's worth noting that OAuth 2 is for authorization, not authentication, e.g., see these blog posts. Anyway, if you do use this for that anyway, to avoid unnecessarily putting the user through this flow, you can store the necessary data, e.g., the access token, in their cookies or local storage. If and only if you don't find that, you can send them the flow. Also, check out the documentation for the force_reapprove parameter on /oauth2/authorize. By default, Dropbox will automatically redirect the user through the flow when possible.

About Dropbox API Support and Feedback

Node avatar for Dropbox API Support and Feedback
Get help with the Dropbox API from fellow developers and experts.

The Dropbox Community team is active from Monday to Friday. We try to respond to you as soon as we can, usually within 2 hours.

If you need more help you can view your support options (expected response time for an email or ticket is 24 hours), or contact us on X, Facebook or Instagram.

For more info on available support options for your Dropbox plan, see this article.

If you found the answer to your question in this Community thread, please 'like' the post to say thanks and to let us know it was useful!