title: Can the app permission/verification be bypassed for Dropbox API?
body: <p>I really hope this isn't a stupid question. I'm in the same boat this person is/was I believe: <a href="https://stackoverflow.com/questions/26412786/uploading-files-to-dropbox-bypassing-authorization-page">uploading files to Dropbox, bypassing authorization page?</a></p>
  
  <p>However, I'll explain in more detail. </p>
  
  <p>I've built a custom asp.net file upload control that supports server side storage and AWS S3, and I want to add Dropbox. </p>
  
  <p>From the api documentation: <a href="https://www.dropbox.com/developers/core/docs" rel="nofollow noreferrer">https://www.dropbox.com/developers/core/docs</a></p>
  
  <p>It appears that I have to first generate a token, verify the app, and then call <a href="https://www.dropbox.com/1/oauth/authorize" rel="nofollow noreferrer">https://www.dropbox.com/1/oauth/authorize</a> along with the token.</p>
  
  <p>The problem is I want end-users to be able to install the control, add their app/secret key to the control settings, and it's ready to go when the page loads. </p>
  
  <p>So I'm not wanting to use the api for every John Doe to grant permission and upload files to and from their own dropbox.</p>
  
  <p>Hope I'm making sense...  Here's some code:</p>
  
  <pre><code>        Dim appKey As String = "myappkey"
          Dim appSecret As String = "mysecretkey"
          Dim uri As Uri = New Uri("https://api.dropbox.com/1/oauth/request_token")
  
          Dim oAuth As OAuthBase = New OAuthBase()
          Dim nonce As String = oAuth.GenerateNonce()
          Dim timeStamp As String = oAuth.GenerateTimeStamp()
          Dim parameters As String = String.Empty
          Dim normalizedUrl As String = String.Empty
          Dim signature As String = oAuth.GenerateSignature(uri, appKey, appSecret, String.Empty, String.Empty, "GET", timeStamp, nonce, OAuthBase.SignatureTypes.HMACSHA1, _
                                                            normalizedUrl, parameters)
  
          signature = HttpUtility.UrlEncode(signature)
  
          Dim requestUri As StringBuilder = New StringBuilder(uri.ToString)
          With requestUri
              .AppendFormat("?oauth_consumer_key={0}&amp;", appKey)
              .AppendFormat("oauth_nonce={0}&amp;", nonce)
              .AppendFormat("oauth_timestamp={0}&amp;", timeStamp)
              .AppendFormat("oauth_signature_method={0}&amp;", "HMAC-SHA1")
              .AppendFormat("oauth_version={0}&amp;", "1.0")
              .AppendFormat("oauth_signature={0}", signature)
          End With
  
          Dim request As HttpWebRequest = WebRequest.Create(New Uri(requestUri.ToString()))
          request.Method = WebRequestMethods.Http.Get
  
          Dim response As HttpWebResponse = request.GetResponse()
          Dim queryString = New StreamReader(response.GetResponseStream()).ReadToEnd()
          Dim parts = queryString.Split("&amp;"c)
          Dim token = parts(1).Substring(parts(1).IndexOf("="c) + 1)
          Dim tokenSecret = parts(0).Substring(parts(0).IndexOf("="c) + 1)
  
          Dim queryString2 As String = String.Format("oauth_token={0}", token)
  
  ' the below code is what I want to bypass, as in verifying the app permissions by loading a Dropbox verification page.
  
  Dim authorizeUrl As String = "https://www.dropbox.com/1/oauth/authorize?" + queryString2
  </code></pre>
  
  <p>Maybe I missed something elementary here, or possibly an online example. </p>
  
  <p>So again, visitors to my website would be able to use this file uploader, like lets say they're uploading a profile picture for their profile page... It's my dropbox account for the website. Hope this makes sense.</p>
  
  <p>Any guidance is appreciated.</p>
  
  <p>Thank you.</p>