Tag Info

New answers tagged


In your case, there really is no avoiding policing the API use yourself. Since the API is assigned to (you) the developer you will need to host some sort of server to provide access control to dropboxes API. Read Drop Boxe's terms of service carefully.


Giving the desktop client the keys to the kingdom is by definition a violation of CWE-602: Client-side enforcement of server-side security. Any piece of software running on an attacker's machine cannot be trusted. There needs to be an intermediary API, a web service that you control, and provides the ability to enforce user-based access control to a ...


Yes, Apple iOS and Mac OS X have an internal Keychain with Api access, have a look at Apple Dev doc

Top 50 recent answers are included