We are aware of the issue with the badge emails resending to everyone, we apologise for the inconvenience - learn more here. 

Forum Discussion

depotsy's avatar
depotsy
Explorer | Level 3
6 months ago

Dropbox OAuth authentication confirmation pages

Hi!

 

Every time users authenticate to my website via the OAuth Dropbox, they receive two confirmation pages: "Before connecting this app..." and "The web app would like to:"

 

Is this how it should be or am I doing something wrong? Is it possible to make these warnings appear only the first time during registration?

 

I used Node.js, Express and passport module.

  • That's the expected behavior for apps in development status. Apps in production status do not get that first confirmation. If your app needs production status, refer to the information here on how to request that.

     

    The second confirmation is expected for apps in both development and production status. Note that the app authorization flow only needs to be done once per account though. You can request long-term access if needed. Refer to the OAuth Guide, authorization documentation, and this blog post for more information. Also, in some (but not all) cases where the user has already authorized the app and redirect URI is used, they may be automatically redirected through the second confirmation.

  • Greg-DB's avatar
    Greg-DB
    Icon for Dropbox Staff rankDropbox Staff

    That's the expected behavior for apps in development status. Apps in production status do not get that first confirmation. If your app needs production status, refer to the information here on how to request that.

     

    The second confirmation is expected for apps in both development and production status. Note that the app authorization flow only needs to be done once per account though. You can request long-term access if needed. Refer to the OAuth Guide, authorization documentation, and this blog post for more information. Also, in some (but not all) cases where the user has already authorized the app and redirect URI is used, they may be automatically redirected through the second confirmation.