cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Are you an educator? Well we want to hear from you, so check out some tools we think might help you out here!

Dropbox API Support & Feedback

Find help with the Dropbox API from other developers.

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

How to revoke an access token? (Other answers suggest security page, but doesn't appear there)

How to revoke an access token? (Other answers suggest security page, but doesn't appear there)

Chris K.21
Helpful | Level 7

Hi, 

 

I realise this question has been asked before, but it seems the answers always refer to the account/security page. 

 

I have generated (manually through the web UI) multiple access tokens during testing, and all seem valid. I have probably also generated some and not actually noted them down anywhere. 

 

How do I:

 a) list access tokens

 b) remove/revoke unneeded access tokens

 

I have looked here: www.dropbox.com/account/security and I can see my app listed, but there is no mention of access tokens. I do not want to remove the entire app, just some of the access tokens for it. 

 

Cheers, 

 

Chris 

7 Replies 7

Re: How to revoke an access token? (Other answers suggest security page, but doesn't appear there)

Luffy
Experienced Collaborator | Level 11
Hi Chris,

Have you tried going through this one https://www.dropbox.com/developers/support ?

Here's the part that interests you I think!

App access tokens effectively don't expire, but users can manually revoke tokens by going into My apps. In the case of apps with app folder access, if the user deletes the app folder, your app's access token will no longer be valid.
You should only process the authorization once, and save the access token for all future calls for that user. If an existing access token is invalid, (in which cases calls will return 401), you should prompt the user to re-authorize your app.

I hope this helps Chris !

Enjoy the rest of your weekend!

Re: How to revoke an access token? (Other answers suggest security page, but doesn't appear there)

Chris K.21
Helpful | Level 7

That does seem like one possible solution, and I do appreciate you taking the time to answer. 

 

As the folder already contains data, I don't want to delete it to revoke tokens. I was hoping there was a simple way to list and delete/revoke generated tokens. 

 

Again, thank you for taking the time to answer

Re: How to revoke an access token? (Other answers suggest security page, but doesn't appear there)

Luffy
Experienced Collaborator | Level 11
Sorry this does not work for you Chris.

You could probably backup the whole folder and try restoring after the deletion? ( ok, I know this probably wouldn't work, but I cannot seem to find any other workaround for what you are trying to achieve.

If you manage to finally find a way , please be so kind and post it here so all users know for future references.

Thanks Chris!

Re: How to revoke an access token? (Other answers suggest security page, but doesn't appear there)

Chris K.21
Helpful | Level 7

Thanks Luffy. 

 

I have just posted a similar question to Stackoverflow, so I might be able to get some traction over there. If I do get an answer, I will be sure to report back here. 

 

Cheers

 

Chris 

Re: How to revoke an access token? (Other answers suggest security page, but doesn't appear there)

Luffy
Experienced Collaborator | Level 11
Thanks in advance Chris!

Cheers!

Luffy

Re: How to revoke an access token? (Other answers suggest security page, but doesn't appear there)

Greg-DB
Dropboxer

[Cross-linking for reference: https://stackoverflow.com/questions/43705630/how-do-i-revoke-generated-access-tokens-for-dropbox-app... ]

 

a) The Dropbox web site/API don't offer a way to list individual access tokens.

 

b) There are several ways to revoke access tokens.

  • The user can revoke all access tokens for an app via the account security page by clicking the 'x' at the right of the app's row. This will revoke all access tokens for that app-user pair though, and doesn't offer a way to revoke specific/individual ones.
  • If the app uses the "app folder" permission, the user can delete the app folder itself, which will cause any further API calls for that app-user pair to fail.
  • The app can revoke individual access tokens using the /2/auth/token/revoke API endpoint. That will revoke only the individual access token used to make the call itself. You can use it multiple times to revoke any/all access tokens you have.

Re: How to revoke an access token? (Other answers suggest security page, but doesn't appear there)

Chris K.21
Helpful | Level 7

Thanks Greg, although not ideal as mentioned, I don't want to delete the folder as it already contains files. For now though I will work with this as the solution. 

Cheers

Poll
We love to learn from the educators who use Dropbox. Whether you teach kids, teens, adults or a combination of all three, we want to know what apps and integrations you use with Dropbox to help with teaching. Which of the ones below is your favorite, or most used tool?
Who's talking

Top contributors to this post

  • User avatar
    Chris K.21 Helpful | Level 7
  • User avatar
    Greg-DB Dropboxer
  • User avatar
    Luffy Experienced Collaborator | Level 11
What do Dropbox user levels mean?
Need more support?