Dropbox App Setup

This guide walks through creating Dropbox app credentials to connect Dropbox as a storage backend for BAP.

Prerequisites

• A Dropbox account
• Access to Dropbox Developer Console

Step 1: Create a Dropbox App

1. Go to the Dropbox App Console
2. Click "Create app"
3. Select the following options:

Setting	Value
Choose way to access your files	Scoped access
Choose type of access	App folder (recommended) or Full Dropbox

4. Click "Create"

Step 2: Configure App Settings

1. On the app page, go to the Settings tab
2. Under "OAuth 2", find "Redirect URIs"
3. Add your redirect URI:

Environment	Redirect URI
Development	http://localhost:8080/api/storages/oauth/callback
Production	https://yourdomain.com/api/storages/oauth/callback

4. Click "Add"

Step 3: Get App Credentials

1. Scroll to the "OAuth 2" section
2. Find your App key (shown near the top)
3. Click "Show" under App secret to reveal your secret
4. Copy and save both values — you'll need them for BAP

Step 4: Configure Permissions

1. Go to the Permissions tab
2. Enable the following permissions:

Permission	Description
files.content.write	Upload files to Dropbox
files.content.read	Download files from Dropbox
files.metadata.read	Read file metadata

3. Click "Submit" to save permissions
4. If prompted, confirm the permissions

Step 5: Generate Access Token (Alternative)

For testing, you can also generate a temporary access token:

1. In the Settings tab, scroll to "OAuth 2"
2. Click "Generate access token"
3. Copy the token (note: this expires, use OAuth for production)

Important URLs

These are the values you'll need for BAP:

Value	Where to Find
App Key	Settings → OAuth 2 → App key
App Secret	Settings → OAuth 2 → App secret (click "Show")
Redirect URI	Settings → OAuth 2 → Redirect URIs

Troubleshooting

"Invalid app key" error

• Verify you're using the App key, not the App secret
• Check that the app is created and saved

"Invalid redirect URI" error

• The redirect URI in BAP must match exactly what's in Dropbox
• Must include https:// for production
• Check for typos or extra characters

"App folder not found" error

• For "App folder" type apps, the folder is created automatically on first OAuth
• Make sure you've completed the OAuth flow at least once

Permissions denied

• Verify all required permissions are enabled on the Permissions tab
• Click "Submit" after changing permissions

Security Notes

• Keep your App Secret secret — don't commit it to version control
• Use OAuth 2 flow — access tokens expire; OAuth tokens refresh automatically
• Limit permissions — only request what you need

Full Dropbox vs App Folder

Type	Access	Use Case
App folder	Only /Apps/YourAppName/	Recommended — more secure
Full Dropbox	Entire Dropbox	Access to all files (less secure)

For BAP, App folder is recommended — it limits access to just the BAP folder.

Next Steps

• Return to Connecting Storage to complete the setup
• Add your App Key and App Secret in the BAP dashboard