1

I am new to iOs development and I'm creating an app that uses my own dropbox account. I want my app to automatically login to my account to be able to modify & add files in my App's folder. The documentation says that i should call: [[DBSession sharedSession]linkFromController:viewController]; to be able to login. But i dont want to show the login prompt to user's because i only want it to login to my Dropbox account automatically. Is there any way i could achieve login in the background without also violating the dropbox api standards. Im using the Core API by the way. Please help me.

2 Answers 2

3

The Dropbox API was designed with the intention that each user would link their own Dropbox account, in order to interact with their own files. However, it is technically possible to connect to just one account. The SDKs don't offer explicit support for it and we don't recommend doing so, for various technical and security reasons.

However if you did want to go this route, instead of kicking off the authorization flow, you would manually use an existing access token for your app. (Just be careful not to revoke it, e.g. via https://www.dropbox.com/account/security .) In the iOS Core SDK you'd need to use:

- (void)updateAccessToken:(NSString *)token accessTokenSecret:(NSString *)secret forUserId:(NSString *)userId;

Again though, this isn't a good idea. Since this would be a client-side app, any malicious user of your app could extract the access token and use it to bypass any access restrictions your app attempted to enforce. For example, they could access content they shouldn't or add or replace content with a malicious payload that other users would access.

17
  • How could i implement this method? im sorry but im really new to iOs :(
    – MetaSnarf
    Commented Jan 9, 2015 at 3:59
  • if you could provide simple steps please...really need it :(
    – MetaSnarf
    Commented Jan 9, 2015 at 10:23
  • I don't have any sample code for this handy (since it's very much not recommended) but the basic process would be to get an OAuth 1 access token key and secret for your own account manually once, and then call this method (on DBSession) and supply that access token key, secret, and your account user ID (an integer) once when initializing the app.
    – Greg
    Commented Jan 9, 2015 at 15:19
  • this is my code right now ` DBSession *dbSession =[[DBSession alloc]initWithAppKey:APP_KEY appSecret:APP_SECRET root:kDBRootAppFolder]; [DBSession setSharedSession:dbSession ]; [dbSession updateAccessToken:APP_ACCESS_TOKEN accessTokenSecret:APP_SECRET forUserId:@"<dropbox email>"];` am i following this right?
    – MetaSnarf
    Commented Jan 12, 2015 at 2:49
  • 1
    Sure, but the access token would need to exist client-side eventually (i.e., after being downloaded from the server). If you have a secure form of auth in the app where you can verify the user is trusted first, that's certainly better, but it doesn't prevent a malicious entity from extracting the access token locally if they do pass that check.
    – Greg
    Commented May 26, 2015 at 22:04
3

Sorry, I couldn't follow the accepted answer and Greg seems very reluctant to provide example code since Dropbox doesn't recommend using a secret key in this way. For anyone who needs a quick solution to (for example) uploading zip files into a single dropbox account WITHOUT using what I consider the rather opaque dropbox iOS SDK API, the following works (DropboxOAuthKey is the secret key that you press the button to generate in the app console):

NSURLSessionConfiguration *sessionConfiguration = [NSURLSessionConfiguration defaultSessionConfiguration];
sessionConfiguration.HTTPAdditionalHeaders = @{
                                                       @"Authorization" : [NSString stringWithFormat:@"Bearer %@", DropboxOAuthKey],
                                                       @"Content-Type"  : @"application/zip"
                                                       };

NSURLSession *defaultSession = [NSURLSession sessionWithConfiguration: sessionConfiguration delegate: self delegateQueue: [NSOperationQueue mainQueue]];
self.request = [[NSMutableURLRequest alloc] initWithURL:[NSURL URLWithString:[NSString stringWithFormat:@"https://api-content.dropbox.com/1/files_put/auto/%@?overwrite=false",fileName]]];
[self.request setCachePolicy:NSURLRequestReloadIgnoringLocalCacheData];
NSData *data = [[NSFileManager defaultManager] contentsAtPath:zippedPath];
[self.request setHTTPMethod:@"PUT"];
[self.request setHTTPBody:data];
[self.request setTimeoutInterval:1000];

NSURLSessionDataTask *doDataTask = [defaultSession dataTaskWithRequest:self.request completionHandler:^(NSData *data, NSURLResponse *response, NSError *error) {
            if (!error){
                NSLog(@"WORKED!!!!");
            } else {
                NSLog(@"ERROR: %@", error);
            }
        }];

[doDataTask resume];
1
  • 1
    Thanks for posting this! Just for reference in case anyone gets confused, this sample uses OAuth 2, whereas the SDK and thereby my answer deal with OAuth 1.
    – Greg
    Commented May 26, 2015 at 22:05

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.