Child Item

Api error access denied

hi everyone, am trying to use the new API of Dropbox, but I am having some difficulties. I did however create an app console on personal free dropbox ACC, and I got the needed information (Appkey, App Secret,...) in order to generate auth2, and I downloaded the example located in (dropbox-sdk-dotnet\examples\simpleTest\) on GitHub.

I only change the following but it keeps giving error "Acees denied":

private const string ApiKey = @xxxxxxxx;

private const string LoopbackHost = "https://www.dropbox.com/oauth2/";

please explain to me if the link I have used is correct, and is there any other info that I need to provide??

thank you in advance

Find more posts tagged with

Developers

Comments

Здравко

@admsho wrote:
...
I only change the following but it keeps giving error "Acees denied":
...
private const string LoopbackHost = "https://www.dropbox.com/oauth2/";
please explain to me if the link I have used is correct, and is there any other info that I need to provide??
...

Hi @admsho,

Hmm... 🤔 Are you the domain "www.dropbox.com" admin and can you (your script actually) set a hook there to handle your loopback call? I seriously doubt it's so! If you don't have access to and not able to register web hook on the domain, that's where your "Access denied" comes from. 😁 Don't try to do something on a place you don't have access to; for sure will meet access denied or something like.

Why are you going to change the preset Loopback host there? 🧐 For user applications it's the best choice - your script usually has access to the local machine. 😉 Only on some server script a change may be needed (only change URI to owned domain would work though - a domain your script can control).

Don't forget to set the actual app ID/key on your source too (not just "xxxxx" - just a placeholder by itself).

One more thing: Consider usage of refresh token too (offline access request). Only such authorization type would give you long term access if you're planning to use your script for longer than few hours (4 hours more precisely).

Good luck.

admsho

hi, Thank you for your feedback,

am still not sure what should be the loop URL, but I put it back as it is original shape , and I placed my App key instead of the "xxxxxxx", so I have the code header like that:

private const string ApiKey = @xxxxxxxxxxx;

private const string LoopbackHost = "http://127.0.0.1:52475/";

private readonly Uri RedirectUri = new Uri(LoopbackHost + "AUTHORIZE");

// URL to receive access token from JS.
private readonly Uri JSRedirectUri = new Uri(LoopbackHost + "TOKEN");//

but I get the following we page result:

I'm not sure what do I miss, especially that I don't know where should I place the "App Secret"

please explain with more details if it is possible

Здравко

@admsho wrote:
...
private const string LoopbackHost = "http://127.0.0.1:52475/";
...
but I get the following we page result:
...

Hi again @admsho,

The result you got shows that your LoopbackHost value isn't registered In the OAuth2 RedirectURIs list of your application. Something mandatory and noted in documentation but skipped by you (something noted in the error message itself). Register your LoopbackHost value there and that error message will gone.

@admsho wrote:
..., especially that I don't know where should I place the "App Secret"
...

With this very basic authentication way, you're using (used in the example), you don't need the "App Secret" actually. It would be needed only when/if you use authentication with code in non PKCE flow (PKCE uses dynamic secret and doesn't need App Secret or least it's not mandatory there). The flow used isn't recommended in production cause some security weaknesses. The best supported case is PKCE authentication flow, with access type set to offline (refresh token usage), something I advised you to move to.

Hope this sheds additional light.

Edit: Opp... My mistake. You should register RedirectUri value instead of LoopbackHost (i.e. http://127.0.0.1:52475/authorize ) - the actual passed value.

Greg-DB

@admsho As Здравко noted, you need to register the redirect URI(s) for your app. You can do so via the "OAuth 2" "Redirect URIs" section of the app's page on the App Console.

admsho

hi, Thank you for your patience, It works and it asked me to allow access to my business ACC, but then it shows that. do I need to have a public IP??

admsho

all my firewalls are off,

Здравко

@admsho, Seems you have changed more things than you have declared. 🙂 Where those address comes from?

Actually does your code handles that address or you're skipping it? 😉

admsho

I replacesd "XXXXX" with the key, i think I must use som other URL rather than my localhost?

Здравко

@admsho wrote:
...
I replacesd "XXXXX" with the key, i think I must use som other URL rather than my localhost?

No,no... It's not your issue. The localhost is working. Are you handling this request in your 'HandleJSRedirect' and what are you returning there? 🧐

admsho

this code :

shows this , after I add the link at app console as shown at the post previously:

then when I continue and allow it, it shows :

Здравко

Ok, the above shows that your localhost is working. So, again, do you get proper result from the mentioned function? 🤔 Take in mind that the example code (part that you haven't shown) doesn't return back to the browser anything if you haven't changed it somehow! 🙂

admsho

I have used the same code in github:

dropbox-sdk-dotnet/Program.cs at master · dropbox/dropbox-sdk-dotnet (github.com)

I only changed my Appkey.

and I add the (LoopbackHost="http://127.0.0.1:52475/") URI in the app console to correspond with the one at the code.

I want to be able to use API in a windows application in the future for multiple users (am using a Business License)

I believe the code must stay as is with the localhost URL, but what all other configurations I need to do in the console:

(* will localhost will be used at the final stage when it is ready for publishing or will I need to change it?

and the app console:

my concern what the following fields should be on the final shape:

Redirect URIs
Chooser / Saver / Embedder domains
Webhooks
Extension

but I keep getting the following exceptional error:

System.AggregateException
HResult=0x80131500
Message=One or more errors occurred.
Source=SimpleTest
StackTrace:
at SimpleTest.Program.Main(String[] args) in C:\Users\admsh\OneDrive\Desktop\dropbox-sdk-dotnet-master\dropbox-sdk-dotnet-master\dropbox-sdk-dotnet\Examples\SimpleTest\Program.cs:line 56

This exception was originally thrown at this call stack:
[External Code]

Inner Exception 1:
HttpRequestException: An error occurred while sending the request.

Inner Exception 2:
WebException: The request was aborted: Could not create SSL/TLS secure channel.

Здравко

@admsho wrote:
...
(* will localhost will be used at the final stage when it is ready for publishing or will I need to change it?
...

Whatever is the public domain name of particular machine (if any), localhost domain (and the corresponding IP) is always available and the same. That's why it's convenient is such cases and you wouldn't need to change anything.

@admsho wrote:
...
my concern what the following fields should be on the final shape:
Redirect URIs
Chooser / Saver / Embedder domains
Webhooks
Extension
...

For local applications only 1) matters; all others are ignored.

@admsho wrote:
...
WebException: The request was aborted: Could not create SSL/TLS secure channel.

Dropbox servers related to API interfaces support TLSv1.2 only! Check in your environment is the same connection encryption enabled or not. Make sure it is!

admsho

where should I check the TSL and fix it ?

Здравко

For Windows you can start here: https://learn.microsoft.com/en-us/mem/configmgr/core/plan-design/security/enable-tls-1-2

Take in mind that your build environment may need additional "tuning"; read the related documentation.

Good luck.