Child Item

API App on PHPBB dropbox upload extention

I created an app on Dropbox api to used the PHPBB Dropbox extention and after i set it up on my phpbb broad it shows dropbox fail to upload

and give this in the error log

Dropbox returned the error
» {"error_summary": "invalid_access_token/.", "error": {".tag": "invalid_access_token"}}

any suggestions on how to fix that

Find more posts tagged with

API

Developers

Comments

DB-Des

Hi @lmckin51

The "invalid access token" error means that the token your app is sending to Dropbox to authenticate requests is not valid. In practice, this usually happens when:

The user revoked the app's access.
The token has been expired or replaced (for example, after using refresh tokens).
The app is accidentally sending a wrong or malformed token (e.g., truncated, copied incorrectly, or from a different environment).

To resolve this, the user typically needs to reconnect/re-authorize your app so that you obtain a fresh, valid access token, and then make sure your integration is using that new token for all API calls.

That said, if you are still experiencing issues, we can certainly look into this further for you. Please share more details, such as:

The API app name
The steps to reproduce the issue
Relevant code snippet(s), but don't include any access or refresh token(s)

lmckin51

Thanks for your reply

on my dropbox app name phpbbbkq

then on this page

https://www.dropbox.com/developers/apps/info/00jwmxcktk3xqkb and i set the permissions also and on the email part permission i don't know if i need use the profile or openid or email on the connect permission

i copy the apps key and private app key then generate the Token access and copy then add to my phpbb forum Page for that PHPBB drop box extension here is a screen shot picture and i blackout my app keys and the token in the image below

any help would be appreciated as i'm new to this dropbox api app

jochemla

Hi there,

Just stumbled on this thread following login flow disruption on keplergl cloud-provider as commented out in this issue-tracker that happened between last Friday and yesterday.

Keplergl is a WebGIS map editor, which you can connect to a dropbox custom app to load and export map configs and datasets. This login flow disruption just happened last week, with no upgrade on our side on either the keplergl webapp code, dependencies, nor reverse proxy, hence probably a different way from dropbox itself to handle such requests.

The API app name: App folder name : KeplerGL-App on [removed per the Dropbox Community Guidelines]
The steps to reproduce the issue : Go to keplergl demo click Load from Storage tab, click login to dropbox, enter credentials, and see you don't have access to your dropbox to load or save keplergl maps, you're just redirected to the main app entrypoint in the modal.
Relevant code snippet(s), source of the dropbox cloud provider

Nothing mentioned in the available changelogs (official, dropbox-sdk-js). Looks like the modal popup window with dropbox auth does not redirect to the original page which solicited this popup with the auth token, hence the prevention from completing authentication on keplergl demo app. Could you confirm what changed between last Friday and yesterday?

EDIT: just saw the community forum is going stale next week from march 30 to april 7, feel free to comment on the github thread if the dropbox core team or community moderators have interesting updates next week.

lmckin51

I change the folder to from phpbbk from personal account

Phpbb Backup5 on [removed per the Dropbox Community Guidelines] account

and change the app key to the app key for that account and same with the app secret key and then generate a new Token and then apply them to my phpbb forum

DB-Des

@lmckin51

Thanks for the additional details and screenshot.

At the moment, it's a bit hard to pinpoint the cause of the "invalid_access_token" error since we don't have visibility into the specific request that's failing. We also don't have insight into how phpBB is handling the token internally, so we may be limited in how much we can diagnose on that side.

A couple of things to check:

If possible, please share the exact API endpoint being called, along with the request/response (or logs) showing the error. That will help us determine whether the token itself is being rejected or if something else is going on.
Keep in mind, access tokens are not long-lived. They can expire, so it would be helpful to know if the token works initially and then starts failing after some time. If that's the case, you may need to generate a new token periodically.

As far as your question regarding the 'profile', 'email', and 'openid' scopes, you don't need those scopes for standard Dropbox API access. Those are only required if you're specifically using OpenID Connect features: https://developers.dropbox.com/oidc-guide.

If you can share more details about the failing request and when the error occurs, we can take a closer look.

DB-Des

Hi @jochemla

I tried going through the provided flow on my end and was able to authorize the app without any issues. It looks like the problem is actually occurring when your app calls the /2/users/get_current_account endpoint. An "invalid_access_token" error at that stage may explain the redirect you're seeing back to the app entry point.

This usually indicates that the access token being used is either invalid, expired, or not being passed correctly with the request. It may be worth double-checking how the token is being stored and sent after the authorization step.

Since the Dropbox Community forums will be going on read-only mode in the next coming days, please go ahead and submit a developer support request here (with any additional details):
https://www.dropbox.com/developers/contact

So that we can continue assisting you with this matter.

lmckin51

ok thanks

for test i set the back up to run few mins after enter the token before the token expired

and i change some of the permissions on the app also to see if that helps only set the permissions for the account and files and folder and uncheck all the others

also could you give me an example on how to set the refresh offline token up where it could get a new token each time it runs

Rich

lmckin51 wrote:
also could you give me an example on how to set the refresh offline token up where it could get a new token each time it runs

That's something that would normally be handled by the developers of phpBB and released as an update to their application. Are you familiar with and able to modify PHP code?

If so, this Gist would likely be a good start to understnading the process.

lmckin51

HI Rich,

I'm not familiar how to modify the php code and if i knew what PHP file to modify i might could follow that Gist site

thanks

but for time being i using the muiltcloud transfer from ftp of my phpbb directory store to google drive and it a manual process since i'm not able get the dropbox phpbb extention to work i guess those short expire token might be what cause it not to work

jochemla

Hi there,

I just retested the login flow from keplergl to dropbox, and it ended-up in the same result, redirecting to root in new window modal opened, without authenticating in the tab/window from which the auth modal was initiated. There clearly is something different handled by dropbox itself last week since the server code or the app have not been updated, could you check internally ?

I'm pasting below the redirected url, with tokens obfuscated. Note that I also tried unlogging, removed auth from all users of the app, tried multiple resets, and still end-up in the same result.

https://kepler.gl/auth#access_token=sl.u.AGaCzvO5Nrx9w...XDpIP_w&token_type=bearer&expires_in=14399&scope=account_info.read+files.content.read+files.content.write+files.metadata.read+files.metadata.write+sharing.read+sharing.write&uid=21xxxx61&account_id=dbid%3AAADWj...i0Sy9gKU&state=eyJoYW5kbGVyIjoi...yLmdsIn0%3D

If you managed to login the keplergl/demo to your dropbox directory, please get back with the indications as to what I did differently.

Best regards,