Category: oauth

Server-to-Server Authorization Using Mutual TLS

Leveraging a token-based architecture for API access is becoming much more popular, as it should. However, not all tokens are

Introducing Scoped Apps We recently launched several permissions enhancements. You can read about them in the OAuth Guide or in

Introducing Scoped Apps We recently launched several permissions enhancements. You can read about them in the OAuth Guide or in

Open source, open core, and open standard all involve some kind of intellectual property that is at least partially distributed

Introduction Hi folks! If you’ve spent some time in our HTTP reference documentation, then you know that the Dropbox API

Securing your APIs with OAuth proves that you have adopted a mature security model for your service. However, setting up

OAuth 2.0 is the golden standard for securing access to APIs. With four well-defined authorization flows or grant types included

Overview We’re excited to announce several new features when authorizing apps with the Dropbox API. We use OAuth 2.0 for

User sessions are a core part of your auth infrastructure and can be vulnerable to attacks. Read this before using