Registering a Dropbox App

Complete steps mentioned below to register a dropbox app.

Log in to Dropbox.
Go to Dropbox App Console and click Create app.
1. Choose an API: Most applications will use "Dropbox API".
2. Choose Access Type: Select "Full Dropbox" for complete access.
3. Name Your App and click Create app: Enter a name that will be visible to users.
Go to the Settings tab and find app key and secret above the OAuth 2 section.
- We need to set proper permissions for Dropbox app. Below you can find a list of required permissions:
  - For Scanning:
    - Files and Folders > files.metadata.read, files.content.read
    - Collaboration > sharing.read
    - Team Data > team_data.member
    - Members > members.read, groups.read
  - For remediations
    - Collaboration > sharing.write
    - Files and Folders > files.content.write
  - For Tagging:
    - Files and Folders > files.content.write, files.metadata.write
Go to the Permissions tab of the newly created App and set the following:
1. Account Info: account_info.read
2. Files and Folders: files.metadata.write, files.metadata.read, files.content.write, files.content.read
3. Collaboration: sharing.read, sharing.write
4. Team: team_info.read
5. Team Data: team_data.member, team_data.content.write, team_data.content.read, files.team_metadata.write, files.team_metadata.read, files.permanent_delete
6. Members: members.read, groups.read
Once permissions are set click Save button located on the black snackbar at the bottom of the window.
Go back to Settings tab and scroll to Redirect URIs section. Add the redirect URI for your DSPM instance, then click Add.
In the DSPM Dashboard, the Dropbox connection screen displays a Redirect URL field containing the correct redirect URI for your instance. Copy the URL directly from this field and register it in the Dropbox App Console - this is the recommended way to obtain the correct value.
The redirect URI uses the following format:
```
https://<tenant-url>/ui/en-US/administration/connections/dropbox/oauth
```
For example:
```
https://trial-test.abcd.com/ui/en-US/administration/connections/dropbox/oauth
```
Important:
The redirect URI must match your runtime domain. The domain in the redirect URI must exactly match the domain shown in your browser's address bar when the OAuth flow is initiated. To ensure this, copy the full URL directly from the browser address bar while starting the Dropbox authorization flow, and register that value in the Dropbox App Console. If your session runs under a shared environment domain (for example, prodenv.app.abcd.com) rather than your dedicated tenant domain, you must register the shared-environment URL instead:
```
https://prodenv.app.abcd.com/ui/en-US/administration/connections/dropbox/oauth
```
A mismatch between the registered redirect URI and the actual runtime domain will cause the authentication flow to fail.
Note: The redirect URI you register here must also be present in the Dropbox application's list of allowed redirect URIs (Dropbox App Console) for authentication to succeed.