Dropbox Javascript SDK + Auth0 access token gives invalid_access_token error

Question

Oh my, let me begin:

What I have working:

* Auth0 application created and connected to dropbox. The 'Try' option successfully gives me access to my app folder on a user's dropbox account. Great

* I have setup my Dropbox App on my dropbox developer site and it worked previously to create folders, upload files, and read from folders.

I changed my app from using a single access code (mine generated from my developer website), to authenticate users using Auth0.

The image below fails (using the Auth0 accessToken returned to create a new Dropbox client using the Dropbox Javascript SDK)

Using the accessToken returned from Auth0 after successfully authenticating a user and after the user grants my app access to their dropbox site, using the Auth0 accessToken

*  to create a new instance of the Dropbox client (Dropbox SDK for Javascript) works
* to call filesCreateFolderV2() or any other api methods fail with an 'invalid_access_token' error

Please helppppppp.

Greg-DB · Accepted Answer

We can't offer help with Auth0 itself, but we'll be happy to help with the Dropbox side of things.

An OAuth 2 access token for the Dropbox API should work the same way regardless of exactly where/how you get it (e.g., from the app's info page on Dropbox App Console, or from the actual Dropbox OAuth app authorization page), as long as it is in fact an access token received from Dropbox, and it hasn't been revoked.

Can you print out and inspect the "this.auth.accessToken" value to see what it is? (Don't post it here if it does look like an access token though.)

For instance, make sure that the Dropbox OAuth app authorization flow completed successfully and the resulting access token string was saved in that variable.

I see that you are setting "responseType" to "token id_token", but if that is the value used for the Dropbox /oauth2/authorize page, that should just be "token". Likewise, the Dropbox /oauth2/authorize page doesn't currently take "scope" or "domain" parameters.