You should get back a response that looks something like this - your scopes will of course be based on what you've setup for your – Dropbox ¶ class dropbox.dropbox_client.

curl -d code= -d grant_type=authorization_code -u : I'd recommend just doing this from console as you'll only need to do it once for the purpose of grabbing a Refresh Token. Once you've obtained your Access Code, you're going to make your first request to obtain an Access Token. Note: you must include a token_access_type URL parameter, with a value of offline, otherwise a refresh token wont be included in your initial access request. You'll be brought to the Dropbox website to authorize your app, after which you'll be presented with the access code. To do that, first obtain an Access Code by visiting the URL noted below. This is the appropriate flow per the Dropbox team as described in their oAuth Guide and by a Dropbox dev in this community thread. You should use this Refresh Token to fetch fresh Access Tokens (which are short-lived) as needed. Dropbox Refresh Tokens are long-lived, and do not expire unless explicitly revoked. You'll want to obtain a Refresh Token and store that securely as an environment variable on your server. Refresh Token - this is a long-lived token that allows you to fetch a fresh Access Token.Access Token - this is short-lived token that provides access to Dropbox API endpoints.

Access Code - this is a one-time code that represents user-granted app access.It's important to understand three types of codes you'll encounter:

This GIST generally describes how to authenticate requests to Dropbox API v2, for anyone working on a server-side PHP Dropbox implementation. Effective September 2021, Dropbox will be deprecating long-lived access tokens.

Dropbox api status