Hi folks, Some time ago we have announced version 2.0.0 of the dropbox node, which allowed to get a refresh token from Dropbox. Such a refresh token has a long life, and can be used to obtain periodically new access tokens. This was needed because Dropbox recently has changed its security policy. …

[image] BartButenaers: So when you want to request a new refresh token, you will have to get the App Key again from your Dropbox account Not a problem for me because I save all that kind of stuff in my password manager Does the OAuth stuff need to be in the frontend? All the security stuff …

[image] Buckskin: Does the OAuth stuff need to be in the frontend? Yes you need to call the authentication flow from your node's config screen, and then Dropbox will show a few pages where you need to confirm that this Node-RED node is allowed to access your Dropbox folders. The communicatio…

[image] BartButenaers: I think I know enough for now, to continue the development. Although one more question. If I add a third-party code snippet to a semi-core node like this, does anybody know which licence it should have? For example found another sha256 implementation here , which has a…

IANAL but I think either MIT or Apache2 should be fine, as long as attributed correctly.

[image] dceejay: IANAL Oh my apologies. My mistake! By looking at your profile picture I was so certain you were one :joy: [image] BartButenaers: I think I know enough for now, to continue the development. I got something working, both with and without SSL (towards Node-RED) …

BTW I have to be honest. Have been searching like a maniac the last two evenings, why Dropbox kept complaining about "invalid code identifier". There was tiny difference between my code challenge calculation and how Dropbox calculates it. Dropbox calculates the challenge again and it must be exa…

what did you ask and what was the reply?

Don't ask me. I have already forgotten :joy: This was really too much detailed stuff after a hard dat at work. By typing the questions in my brain here and reading the doubts from other people, I finally came to a solution that I "think" is safe enough. I have tested it both on http and https. I…

Ah now I see. You wondered what I have asked the chatbot and not what I have asked you people here. Seems I am not awake yet :rofl: Will share it later on the day with you.

About my questions I have asked to the OpenAi chatbot: Owkay, the problem was that in an unsecure context (i.e. I was in the config screen of a flow editor that was connected to Node-RED via plain HTTP) the Web Crypto API has no digest function to calculate a SHA256 hash. Had already tried some ot…

Node-RED

Node-RED Forum

Input needed for a fix in the dropbox node (refresh tokens)

Developing Nodes

BartButenaers 6 January 2023 22:06 39

The pull request has been submitted.
Announcement started in another discussion:

Topic		Replies	Views
:tada: Refresh tokens in node-red-node-dropbox (Now published as v2.0.0) Feature Requests	46	2318	24 November 2022
[ANNOUNCEMENT] Dropbox node versie 2.1.0 (beta) - refresh token refactored Developing Nodes	41	1092	6 April 2023
node-RED Backup Flow Share Your Projects	33	6543	12 July 2022
:arrow_right: Need volunteer to help fix node-red-node-dropbox General	3	400	15 July 2022
How do you securely give credentials to a stand-alone Function node? General security , function-node	61	1085	8 December 2025

Copyright OpenJS Foundation and Node-RED contributors. All rights reserved. The OpenJS Foundation has registered trademarks and uses trademarks. For a list of trademarks of the OpenJS Foundation, please see our Trademark Policy and Trademark List. Trademarks and logos not indicated on the list of OpenJS Foundation trademarks are trademarks™ or registered® trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.

Input needed for a fix in the dropbox node (refresh tokens)

Related topics