If the tab is closed and then reopened, The next user can then access my files. This is even worse if multiple users are on the same machine. If this token is not discarded, uppy/companion can still read your data even if you've logged out of Dropbox on your browser. The point of the logout is so that it discards any access token which can be used to access your account. (otherwise whats the point of having a log out button?) So it will still try to connect you with that account (only difference is that it asks for permission again), unless you logout that Dropbox account and login to a different Dropbox account. If we disconnect from the app totally on our side, you will still end up in a loop, because it attempts to connect with the Dropbox account currently logged in on your browser. I cant, I just get into a loop of logging out and then rehitting the 'connect to instagram' button within uppy.

If I was a single user and I want to connect with the same provider with two sets of credentials. The issue happens with the Instagram integration too. Removing the uppyAuthToken-XXXX cookie or companion-XXXX-auth-token in local storage does not stop authentication. It is possible to force logout by going in a separate tab to and this logs out. For example a user can log into my website, authenticate with an integration, a different user can log in and then integrate with the previous user dropbox integration :( Logging out of integrations, removes authentication to the integration.

Connect to Dropbox in the Uppy component again (still authenticated.).

Within Uppy, click the logout Dropbox integration component (Log out link at top).

Authenticate with Dropbox via the 'connect to dropbox' button.

Dropbox sign in loop