Non-public Dropbox folder

[Brian Quistorff]

I've gotten browsepass to work from the public folder of Dropbox using the "Public Link" (available from the right-click menu on the Dropbox website). However, I can't seem to get it to work from a non-public folder (even though I'm signed into Dropbox). It appears like the html file doesn't load some dependencies similar to trying to view the file in the Public folder w/o using the "Public Link". Is this my error or is this not possible yet? It should be possible eventually as 1password allows reading the database online when it's in a non-public folder). Thanks!

[Nam Nguyen]

@brian_quistorff I believe it is related to CORS. I do not use Dropbox, but my guess is that the two links (the app link, and the KDBX file link) are on two different subdomains. When you open the app from the public domain, it might not be able to access the KDBX file from the non-public domain.

Could you try to open the app from the non-public link?

[Brian Quistorff]

I should have clarified, the two scenarios I had tried were (a) everything (KDBX file and browsepass) in public folder, and (b) everything in non-public folder. Does that answer your question? Thanks.

[Nam Nguyen]

I looked into Dropbox and found out that:

1. Non-public web host is not supported. All the materials I found mention that you do need to place the files in your Public folder.

2. It is possible to host BrowsePass in your public folder, and access your private KDBX file. The trick is you need to find out the direct link to your KDBX file, not its landing page. When you get the link via Share button, that is the link to the landing page. Changing dl=0 to dl=1 in that link will send you to a redirector. The resource that it redirects you to is the direct link. The direct link should have the domain dl.dropboxusercontent.com.

Long story short, please use public folder ;). Having support for Dropbox files (similar to Google Drive) in BrowsePass would be very nice, but I don't use Dropbox myself so I'm afraid it would just rot if I added such code.

Code contributions are very welcomed, though.

[Brian Quistorff]

I wasn't able to replicate the ability of 1password to dynamically load data/scripts (in a non-public folder loading other files in the same subtree). Even renaming the 1password folder breaks this web app. I think Dropbox provides special treatment to 1password.