We have embedded Dropbox onto our website in an iframe: [Removed as per Community Guidelines]We produce a Dropbox read only share link to include in the embed code. For some folders we get a share link containing /scl/fo/ which leads to a registration splash screen whenever a website visitor clicks a file in the embedder. However we want to start a download instead of a registration... The strange thing is that other folders for which we produce a read only share link contain /sh/ . When you click on a file in the embedder with this link in the code, the download starts without a registration splash screen. Now, I've read that a link containing /scl/fo/ is an edit link. Why do some folders produce a link containing /scl/fo/ and others /sh/ while we explicitly ask for a read only share link? We run a Dropbox Advanced plan.

Thanks for the report! While the Embedder isn't part of what we call the "API", it is a developer tool so I've moved it to the Developers section. Anyway, this is a known issue with using this type of link in the Embedder. We're looking into it and I'll follow up here once I have an update.

Hi jpimbema, thanks for messaging the Community! Just for clarification, are you using any of the Dropbox API when embedding Dropbox onto your site? This will help me to assist further!

jpimbema wrote:...Now, I've read that a link containing /scl/fo/ is an edit link. Why do some folders produce a link containing /scl/fo/ and others /sh/ while we explicitly ask for a read only share link?...Hi jpimbema,There are 2 folder link formats (one is being in depreciation /sh/ and other - the successor /scl/fo/). By now the two formats are in use (the old one is not dropped automatically, but all new links are in new format). That doesn't mean the particular link is "can edit" type, but could be. That's something you have control on and can check.In folder share settings is a dropdown menu where you can select from "can view" or "can edit" as well as see what's selected now (the same is for file share settings as well). You can change your default settings from your account sharing settings. See on section "What people can do" and change to appropriate if needed. 😉 The last is valid for both on site created link and API created links. While using API, in the API itself is no control what type of link to be produced - not yet at least. For API you may control your link types only by using default setting in your account (i.e. by hand). Let's hope this will change in future.Hope this helps.

Yes, starts with this code: <script type="text/javascript" src="https://www.dropbox.com/static/api/2/dropins.js"

jpimbema, Is that, you posted, used only for Dropbox Embedder or for other things too (like Dropbox Chooser)?

Clicking files in embedded Dropbox leads to registration screen instead of direct download

Greg-DB
Dropbox Staff
8 months ago
Thanks for the report! While the Embedder isn't part of what we call the "API", it is a developer tool so I've moved it to the Developers section.

Anyway, this is a known issue with using this type of link in the Embedder. We're looking into it and I'll follow up here once I have an update.
- Здравко
  Legendary | Level 20
  8 months ago
  Greg-DB, Let me add something here. Yes, there was issue related to Dropbox Embedder itself ("was" because the current one is different and fully covers/blurs the previous, so no very clear - the issue me and you discussed above is now invisible). The current issue is Dropbox core issue! This issue affects everything. It's easy to reproduce - just create some shared link (to either file or folder) and after open it in web browser in incognito mode try download the content of a file (directly or indirectly pointed there). What is going on? This is neither API, Embedder, or any other developer tool issue. Even more: for Dropbox shared link to folder, try navigate inside (again in browser, but the same is reproducible in API and Embedder) and copy link to something inside (either file or folder). What does happen when you close the current browser and try open the link, just copied, in new window (again in incognito mode)? Does it open the desired target? 🤷 or not exactly 🙋....
  As seems, somebody has created new mess/bug. Why when is something going to be roll out, it's not tested carefully enough in advance?! 🤦 Such a hurrying up leads to issues... I believe most user don't meet this still, but soon the complains will rain.
  - Greg-DB
    Dropbox Staff
    8 months ago
    Здравко Thanks for the note. Just to make sure I'm reproducing the same thing you are, can you clarify what happens in your testing when you say "try download the content of a file (directly or indirectly pointed there). What is going on?"? What result do you get?
    
    For reference, when I try that currently, I get an option to either "Log in or sign up" or "Or continue with download only", and that "Or continue with download only" option does successfully download the file for me. (And for comparison, when clicking on a file in the Embedder I instead get the registration screen, without the option to download the file, as described in the original post here.)
Jay
Dropbox Staff
8 months ago
Hi jpimbema, thanks for messaging the Community!

Just for clarification, are you using any of the Dropbox API when embedding Dropbox onto your site?

This will help me to assist further!
- jpimbema
  Explorer | Level 4
  8 months ago
  Yes, starts with this code:
  
  <script type="text/javascript" src="https://www.dropbox.com/static/api/2/dropins.js"
  - Здравко
    Legendary | Level 20
    8 months ago
    jpimbema, Is that, you posted, used only for Dropbox Embedder or for other things too (like Dropbox Chooser)?
Здравко
Legendary | Level 20
8 months ago
jpimbema wrote:
...
Now, I've read that a link containing /scl/fo/ is an edit link. Why do some folders produce a link containing /scl/fo/ and others /sh/ while we explicitly ask for a read only share link?
...
Hi jpimbema,
There are 2 folder link formats (one is being in depreciation /sh/ and other - the successor /scl/fo/). By now the two formats are in use (the old one is not dropped automatically, but all new links are in new format). That doesn't mean the particular link is "can edit" type, but could be. That's something you have control on and can check.
In folder share settings is a dropdown menu where you can select from "can view" or "can edit" as well as see what's selected now (the same is for file share settings as well). You can change your default settings from your account sharing settings. See on section "What people can do" and change to appropriate if needed. 😉 The last is valid for both on site created link and API created links. While using API, in the API itself is no control what type of link to be produced - not yet at least. For API you may control your link types only by using default setting in your account (i.e. by hand). Let's hope this will change in future.
Hope this helps.