Hi xxxx,	
We released an update to our authorization model—you’ll want to review your app’s (alltests) permission settings, and may need to update your code for refresh tokens. 	
Action Required: Token and Permission Updates
The Dropbox API now supports OAuth scopes, PKCE, refresh tokens, and short-lived access tokens. We’re asking developers to review their app’s permission settings and ensure their apps support short-lived access tokens. Apps that require background access will need to update to use refresh tokens, which is made easier by using our updated SDKs.
Starting September 30th, 2021, the Dropbox OAuth flow will no longer return long-lived access tokens. It will instead return short-lived access tokens, and optionally return refresh tokens. Please be sure to review, test, and move to the new permission model before then.
For detailed instructions, please see: - Dropbox OAuth Guide - Blog post — Now Available: OAuth Scopes and Enhanced Permissions - Blog post — Migrating App Permissions and Access Tokens	
Platform Updates
As you review these changes, be sure to check out the latest additions to the Dropbox platform released this year. These don’t require action, but they may enrich your application and increase the value for your users. Some of these include, but aren't limited to:	
•	Extensions — These enable your users to launch your app from the Dropbox website.	
	
•	Embedder — This new component allows you to easily render rich Dropbox previews on your web site.	
	
•	Paper — Dropbox Paper docs are now accessible through the file APIs, rather than separate calls.	
	
•	Developer Guides — These new guides are the best resource for learning all the Dropbox API has to offer.	

Our recently revamped Dropbox Developer Blog is the best place to find developer feature announcements, tutorials, and resources. If you have any questions, visit our developer forum or submit a ticket.	
Thanks!
- Dropbox Platform Team