title: Storing API access token server-side
body: <p>I have built an app in React that uses the Dropbox API &amp; will be stored on AWS S3 &amp; CloudFront. The app accesses the Dropbox folder using a token. At the moment this token is client-side and obviously is completely accessible.</p>
  
  <p>I have tried reaching out to Dropbox, looked into cookies &amp; HTML5 web storage but can't seem to find a simple explanation.</p>
  
  <p><strong>What would be the simplest way of securing this token on the server?</strong></p>