Dropbox

Overview

Connect your users to Dropbox for cloud file storage, file sharing, and document collaboration.

Property	Value
Provider ID	dropbox
Category	Storage
PKCE	Supported
Token refresh	Automatic
Redirect URI	Shown in Developer Portal

Step 1: Create a Dropbox OAuth App

Go to the Dropbox App Console

Navigate to dropbox.com/developers/apps and sign in.

Create a new app

Click Create app, choose Scoped access, select Full Dropbox or App folder, and enter a name.

Configure the redirect URI

Under the Settings tab, add the Alter callback URL from the Developer Portal to Redirect URIs.

Get credentials

Copy the App key (Client ID) and App secret (Client Secret).

Warning

Never share the application secret publicly. Store it securely and only enter it in the Alter Vault Developer Portal.

Step 2: Add to Alter Vault

Open the Developer Portal

Go to portal.alterauth.com and navigate to the application.

Add Dropbox provider

Go to OAuth Providers > Add Provider > Dropbox.

Enter credentials

• Client ID: Paste your Dropbox App key
• Client Secret: Paste your Dropbox App secret

Select scopes

Choose the scopes the application needs.

Save

Click Save. The provider is now active.

Available Scopes

Scope	Description
account_info.read	Read basic account information
files.metadata.read	Read file and folder metadata
files.metadata.write	Modify file and folder metadata
files.content.read	Download and read file contents
files.content.write	Upload and modify file contents
sharing.read	Read sharing settings and shared folders
sharing.write	Manage sharing settings and shared folders

Notes

• Dropbox uses short-lived access tokens with refresh tokens. Alter Vault handles automatic token refresh.
• The files.content.read and files.content.write scopes must be enabled in the application’s Permissions tab in the Dropbox App Console.
• See the Dropbox API documentation for more details.

Policy-cataloged operations

Alter policy rules can target these attested operations and families for operation-level and parameter-aware controls.

Operation ID	Families	Method	Provider path
files/copy_v2	write	POST	/2/files/copy_v2
files/create_folder_v2	write	POST	/2/files/create_folder_v2
files/delete_v2	delete	POST	/2/files/delete_v2
files/download	read	POST	/2/files/download
files/get_metadata	read	POST	/2/files/get_metadata
files/get_temporary_link	read	POST	/2/files/get_temporary_link
files/list_folder	read	POST	/2/files/list_folder
files/list_folder_continue	read	POST	/2/files/list_folder/continue
files/move_v2	write	POST	/2/files/move_v2
files/search_v2	read	POST	/2/files/search_v2
files/upload	write	POST	/2/files/upload
sharing/create_shared_link_with_settings	admin	POST	/2/sharing/create_shared_link_with_settings
sharing/list_shared_links	read	POST	/2/sharing/list_shared_links
users/get_current_account	read	POST	/2/users/get_current_account
users/get_space_usage	read	POST	/2/users/get_space_usage