Dropbox

List, upload and download files in a user's Dropbox.

Files & Storage
OAuth 2.0
Works on Free plan
Bundled in Kirak
Maintained by Kirak

How to use it

This profile ships with Kirak. Add "integrations" to modules in kirak.json, then name the profile as below. There is nothing to download, and a copy in your project's integrations/ folder is an error.

Environment variables

Variable	Holds
`KIRAK_INTEGRATION_DROPBOX_CLIENT_SECRET`	The OAuth client secret from the vendor's console. Secret: keep it out of kirak.json and out of source control.
`KIRAK_AUTH_ENCRYPTION_KEYS`	Encrypts stored tokens. Shared by every integration; the module refuses to start without it.

The names follow the integration's name in kirak.json (dropbox here). Name it something else, such as dropbox_sales, and the variables change to match.

Redirect URL

Register this as the redirect (callback) URL in the vendor's console, with your app's address in place of <your-app> (the base_url in kirak.json):

https://<your-app>/integrations/dropbox/callback

How to get your keys

Open the Dropbox App Console and choose Create app.
Pick Scoped access and the kind of access (one folder or the full Dropbox).
On the Permissions tab, tick the scopes your app needs and submit.
On the Settings tab, add https://<your-app>/integrations/dropbox/callback under Redirect URIs.
Copy the App key (the client ID) and the App secret (the client secret).
Put the client ID in kirak.json as integrations.providers.dropbox.client_id, and the client secret in the environment as KIRAK_INTEGRATION_DROPBOX_CLIENT_SECRET. Never put the secret in kirak.json.

The vendor's own guide · Instructions out of date? ·Suggest an edit

kirak.json

Scopes files.metadata.read View file and folder names files.content.read Read file contents files.content.write Create and change files

{
  "integrations": {
    "providers": {
      "dropbox": {
        "type": "oauth2",
        "profile": "dropbox",
        "client_id": "your-client-id"
      }
    }
  }
}

Merged into the profile: scope replaces the profile's default scopes.

Good to know

Offline access is requested with token_access_type=offline, which returns a refresh token.
Dropbox API calls are RPC-style: most take a POST with a JSON body, and the content endpoints live on another host (content.dropboxapi.com), which this profile does not allow yet.
Not verified against the vendor docs in this session: check the facts before release.

Help improve this profile

Report a problem ·Suggest an edit to profile.json ·Add a profile ·Vendor docs the profile was checked against

Product names and logos are trademarks of their respective owners. Their use does not imply endorsement. To ask for this icon to be removed, email trademark@kirak.io.