Does anyone have the same problem?

We use dropin.js implementation of v2 API. Recently, Google Chrome started printing to the error console they will be phasing out support for third-party cookies. In our app, only two services are still using these, and one is Dropbox.

I was wondering if someone is aware if Dropbox is going to deal with it in the (close) future, to avoid service disruption when Chrome will finally implement the block.

Thanks

https://developer.chrome.com/docs/privacy-sandbox/third-party-cookie-phase-out/

Any help please

I created an app on Dropbox api  to used the PHPBB Dropbox extention  and after i set it up on my phpbb broad  it shows  dropbox fail to upload  

and give this in the error  log  

Dropbox returned the error
» {"error_summary": "invalid_access_token/.", "error": {".tag": "invalid_access_token"}}

any suggestions on how to fix that 

Application Affected
Claude AI > Dropbox via mcp.dropbox.com

Question or Issue
Does the hosted MCP server at mcp.dropbox.com expose any file write tools (upload, create, delete)? If not, is that on the roadmap?

I have 'files.content.write' checked under individual scopes but my connector can only seem to read and not save files.

Im trying to copy files from individual folder to a team folder by using https://api.dropboxapi.com/2/files/copy_v2

However, im receiving error from_lookup/not_found/. I tried to include Dropbox-Api-Select-Admin but i didnt work.

I also try to copy files within team folder but it doesnt work. Can anyone help me with this issue?

Upon checking the status of the API requests using /files/save_url/check_job_status, the failed IDs return the "download_failed" response. I know there is a 5 minute limit on file transfers using /files/save_url, however all these failed IDs are returning their failure response only a few seconds after initiating the API request.

It may be worth mentioning that the API requests to /files/save_url are occurring all together. I don't believe the URLs are being rate-limited on the S3-compatible storage side, as it is tested with multiple environments, including self-hosted storage without such restrictions.

Done some googling, found some users with the same issue, but unable to find anything that resolves the issue.

Some example failed job IDs:

nJekCKfZPnwAAAAAAAAAAQ
aPQH1k_ei7cAAAAAAAAAAQ

Is there a way to resolve this issue?

I need some help

until now i have been using >NET SDK Version 6.37.

and we are experiencing a problem downloading large files 30GB and higher.

so I tried to implement chunk download, but SDK does not support it .

so I did it using the API.

but my problem is that when we use the SDK we do not Need to refresh token.

and when we use api after some time I am getting 401 .

so I implemented a refresh token method, and refreshed the token , but still after sending the request again with the new token I got I am still getting the 401.

I tried to get the token from the Dropbox Client but it is not there

also regarding the refresh token , is this token always stays the same ?

can some one help?

adding some code snipped.

public async Task<string> RefreshAccessTokenAsync(string expiredAccessToken,BaseRequest baserRequest,bool isBusinessClient, CancellationToken token)

{

using (var http = new HttpClient())

{

var request = new HttpRequestMessage(HttpMethod.Post, "https://api.dropboxapi.com/oauth2/token");

var content = new FormUrlEncodedContent(new Dictionary<string, string>

{

{ "grant_type", "refresh_token" },

{ "refresh_token", baserRequest.RefreshToken },

{ "client_id", isBusinessClient ?ClientIdBusiness : ClientId },

{ "client_secret", isBusinessClient ? ClientSecretBusiness : ClientSecret }

});

request.Content = content;

using (var response = await http.SendAsync(request, token))

{

response.EnsureSuccessStatusCode();

var json = await response.Content.ReadAsStringAsync();

dynamic result = Newtonsoft.Json.JsonConvert.DeserializeObject(json);

string newAccessToken = result.access_token;

if (string.IsNullOrEmpty(newAccessToken))

throw new Exception("Dropbox token refresh failed: access_token not returned.");

return newAccessToken;

}

}

}

private async Task DownloadFileInChunksHttpAsync(

string accessToken,

string dropboxPath,

string localPath,

long fileSize,

string asMember,

string rootNamespaceId,

CancellationToken token,

BaseRequest baseRequest,

bool isBusinessClient) // <-- tells refresh which client to use

{

DropboxTeamClient client;

const int bufferSize = 1024 * 1024; // 1MB

const long chunkSize = 50L * 1024 * 1024; // 50MB

using (var fileStream = new FileStream(localPath, FileMode.Create, FileAccess.Write, FileShare.None))

using (var http = new HttpClient())

{

string currentAccessToken = accessToken;

long offset = 0;

while (offset < fileSize)

{

long end = Math.Min(offset + chunkSize - 1, fileSize - 1);

bool retriedAfterRefresh = false;

RetryChunk:

var request = new HttpRequestMessage(HttpMethod.Post, "https://content.dropboxapi.com/2/files/download");

// Authorization

request.Headers.Authorization =

new System.Net.Http.Headers.AuthenticationHeaderValue("Bearer", currentAccessToken);

// Dropbox-API-Arg (JSON-encoded)

var arg = new { path = dropboxPath };

string jsonArg = Newtonsoft.Json.JsonConvert.SerializeObject(arg);

request.Headers.Add("Dropbox-API-Arg", jsonArg);

// Range header for chunking

request.Headers.Range = new System.Net.Http.Headers.RangeHeaderValue(offset, end);

// Act as team member (Business)

if (!string.IsNullOrEmpty(asMember))

request.Headers.Add("Dropbox-API-Select-User", asMember);

// Apply PathRoot (WithPathRoot) for Business only

if (!string.IsNullOrEmpty(rootNamespaceId))

{

var pathRoot = new Dictionary<string, object>

{

{ ".tag", "root" },

{ "root", rootNamespaceId }

};

string jsonPathRoot = Newtonsoft.Json.JsonConvert.SerializeObject(pathRoot);

request.Headers.Add("Dropbox-API-Path-Root", jsonPathRoot);

}

using (var response = await http.SendAsync(request, HttpCompletionOption.ResponseHeadersRead, token))

{

// 🔐 Handle expired token (401)

if (response.StatusCode == System.Net.HttpStatusCode.Unauthorized)

{

if (retriedAfterRefresh)

{

var err = await response.Content.ReadAsStringAsync();

throw new HttpRequestException(

$"Dropbox download failed after token refresh (401). Body: {err}");

}

// Refresh token based on client type (Personal vs Business)

currentAccessToken = await RefreshAccessTokenAsync(currentAccessToken, baseRequest, isBusinessClient, token).ConfigureAwait(false);

retriedAfterRefresh = true;

goto RetryChunk;

}

// ❌ Other errors

if (!response.IsSuccessStatusCode)

{

var err = await response.Content.ReadAsStringAsync();

throw new HttpRequestException(

$"Dropbox download failed: {(int)response.StatusCode} {response.ReasonPhrase}. Body: {err}");

}

// ✅ Success

using (var stream = await response.Content.ReadAsStreamAsync())

{

fileStream.Seek(offset, SeekOrigin.Begin);

await stream.CopyToAsync(fileStream, bufferSize, token);

}

}

offset = end + 1;

}

}

}

public async Task<DownloadFileResponse> DownloadFileAsync(DownloadFileRequest request)

{

DropboxTeamClient client;

var connectionId = GetDropboxTeamClient(request, out client);

////logsfodebug(request, "DownloadFileAsync");

var account = await client.AsMember(request.AsMember).Users.GetCurrentAccountAsync();

var spaceclient = client.AsMember(request.AsMember).WithPathRoot(new PathRoot.Root(account.RootInfo.RootNamespaceId));

bool newTeam = CheckIfUserIsUpdatedTeam(account);

string tempFilename;

if (request.ExportAs != null)

{

// ===== EXPORT: REVERTED TO OLD SDK CODE (AS REQUESTED) =====

tempFilename = await Retries.PerformWithRetriesAsync(

async () =>

{

var path = request.FilePath.Replace('\\', '/');

var fileInfo = await spaceclient.Files.GetMetadataAsync(path)

.ConfigureAwait(false);

if (fileInfo.IsDeleted)

throw new CannotDownloadFileException(string.Format("File was Deleted. - {0}", path));

long? size = request.Size ?? (long)fileInfo.AsFile.Size;

using (var safeTemporaryFileProvider =

new SafeTemporaryFileProvider(() => PathExtensions.GetTempFileName(request.ContextId)))

{

using (var tokenSource = new CancellationTokenSource(TimeoutHelper.FromSize(size)))

{

// OLD SDK EXPORT CODE (unchanged)

using (var downloadResponse = await spaceclient.Files

.ExportAsync(new ExportArg(request.FilePath, null))

.WithCancellation(tokenSource.Token).ConfigureAwait(false))

{

using (var fileStream = new FileStream(safeTemporaryFileProvider.TempFilename,

FileMode.Create))

{

var downloadStream =

await downloadResponse.GetContentAsStreamAsync()

.WithCancellation(tokenSource.Token)

.ConfigureAwait(false);

await downloadStream.CopyToAsync(fileStream, 4096, tokenSource.Token)

.WithCancellation(tokenSource.Token)

.ConfigureAwait(false);

return safeTemporaryFileProvider.TempFilename;

}

}

}

}

},

ShouldRetryWithDelay).ConfigureAwait(false);

}

else

{

if (newTeam)

{

// ===== BUSINESS / TEAM: NEW HTTP CHUNKED DOWNLOAD =====

tempFilename = await Retries.PerformWithRetriesAsync(

async () =>

{

var path = request.FilePath.Replace('\\', '/');

var fileInfo = await spaceclient.Files.GetMetadataAsync(path).ConfigureAwait(false);

if (fileInfo.IsDeleted)

throw new CannotDownloadFileException(string.Format("File was Deleted. - {0}", path));

long? size = request.Size ?? (long)fileInfo.AsFile.Size;

using (var safeTemporaryFileProvider = new SafeTemporaryFileProvider(() => PathExtensions.GetTempFileName(request.ContextId)))

{

using (var tokenSource = new CancellationTokenSource(TimeoutHelper.FromSize(size)))

{

await DownloadFileInChunksHttpAsync(

request.AccessToken,

path,

safeTemporaryFileProvider.TempFilename,

size ?? 0,

request.AsMember,

account.RootInfo.RootNamespaceId,

tokenSource.Token,

request,

true); // <-- Business client

return safeTemporaryFileProvider.TempFilename;

}

}

},

ShouldRetryWithDelay).ConfigureAwait(false);

}

else

{

// ===== PERSONAL: NEW HTTP CHUNKED DOWNLOAD =====

tempFilename = await Retries.PerformWithRetriesAsync(

async () =>

{

var path = request.FilePath.Replace('\\', '/');

var fileInfo = await client.AsMember(request.AsMember).Files.GetMetadataAsync(path).ConfigureAwait(false);

if (fileInfo.IsDeleted)

throw new CannotDownloadFileException(string.Format("File was Deleted. - {0}", path));

long? size = request.Size ?? (long)fileInfo.AsFile.Size;

using (var safeTemporaryFileProvider = new SafeTemporaryFileProvider(() => PathExtensions.GetTempFileName(request.ContextId)))

{

using (var tokenSource = new CancellationTokenSource(TimeoutHelper.FromSize(size)))

{

await DownloadFileInChunksHttpAsync(

request.AccessToken,

path,

safeTemporaryFileProvider.TempFilename,

size ?? 0,

request.AsMember,

null,

tokenSource.Token,

request,

false); // <-- Personal client

return safeTemporaryFileProvider.TempFilename;

}

}

},

ShouldRetryWithDelay).ConfigureAwait(false);

}

}

var response = new DownloadFileResponse

{

LocalPath = tempFilename

};

return UpdateTokens(response, request, client, connectionId);

}

However, the media info is not being returned. This means that I have to send individual 
https://api.dropboxapi.com/2/files/get_metadata
{ "path": "/Otter+Moon/EmmaWolf_OtterandMoon-1.jpg", "include_media_info": true } for each file in that directory.
Why? Why is the media  info not being returned on the initial request?

:Error= com.dropbox.core.NetworkIOException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

We are trying to narrow down why is error is occurring and if you need any additional info about our config please let me know.

The API isn't working on Solid Explore or Root Explorer.  

I login successfully but the apps won't pick up the account.  Was working until this morning.

Android 16.

I know team folders are a concept in a Standard plan, because I can create them. However, my understanding is that to use the API to send files to them specifically, I need to make use of team folder namespace Ids in my headers. And from what I can tell, there are several API endpoints to retrieve the namespace ID of a given folder, such as team/team_folder/get_info and files/get_metadata. However, while I can hit these endpoints, they do not retrieve any information about folder namepace Ids, and I think what I am now reading is that that information simply isn't available unless you are operating under a Business or Enterprise license.

Is this conclusion accurate? Is there a way to retrieve / use team folder namespace Ids under a Standard license, to sync files to specific team folders? If so, how? 

Thanks in advance for your help, and sorry again if this information is already available and I'm just missing it.

I am reviewing the recent root certificate changes described here:https://dropbox.tech/developers/api-server-certificate-changes

We do not use an official Dropbox SDK, so we will not be directly affected by the root certificate change itself.

However, I would like to confirm that the updated root and intermediate CA certificates are present in our trusted CA store.

Could you please provide the names of the Certificate Authorities (CAs) for the following?

- The new root certificate(s)

- The updated intermediate certificate(s)

This will help us verify trust chain presence in our environment.

Thank you in advance.

Best regards,

After creating the file transfer task, I did not get a status other than "in_progress". I checked for 10 minutes, the result is the same.

https://api.dropboxapi.com/2/files/save_url

Headers:

Dropbox-API-Path-Root:{".tag":"root","root":"***11017011"}
Content-Type:application/json

Body:

{

"path": "/TrueCare24/Getting started.pdf",

"url": "https://cdn.filestackcontent.com/4HanfOIvSVW4gHeOUbm9"

}

Response:

{

".tag": "async_job_id",

"async_job_id": "SPaPOLIucOYAAAAAAAAAAQ"

}

https://api.dropboxapi.com/2/files/save_url/check_job_status

Headers:

Dropbox-API-Path-Root:{".tag":"root","root":"***11017011"}
Content-Type:application/json

Body:

{

"async_job_id": "SPaPOLIucOYAAAAAAAAAAQ"

}

Response:

{

".tag": "in_progress"

}

There are no problems with other files. I have transferred many thousands of files and everything is ok.

TrueCare24 is Team Folder

We connected our SIEM to Dropbox with webhook, we sent test message and we received it in the SIEM solution.

But the issue is that we don't see any loges bides test message. We want to receive audit logs and security logs.

Please can anyone advice what should we do in this case we want to continue with webhook but i am not sure what is the issue that we are not receiving any logs.

Thank you ).  

Should I assume that it's required to perform my desired task for files_search_v2 as well? And if so, how can I proceed with upgrading to Business? I would like to only pay the minimum needed to get access to file content querying with the API.

We use /oauth2/authorize (code flow) with redirect_uri to a localhost port.  The auth flow still works great in these "routine" cases when Dropbox's authorization webpage appears:

• User was not previously signed in to Dropbox, so signs in, then clicks Allow or Cancel.
• User was previously signed in to Dropbox, so clicks Allow or Cancel.

Our problem is that it no longer works in this one case:

• User was previously signed in to Dropbox, but signs out, then signs in again (as the same or different user) in the same window.  Instead of the Allow/Cancel prompt, the user is redirected to www.dropbox.com/home.  (It's as if the sign-out causes the server to forget that it's still running an auth flow for our client.)

I have put breakpoints in our localhost port listener, and can verify that no error is returned; it's left waiting for an error or auth code.  I mention this because that was the cause of the earlier forum user's problem (a booboo in their listener).

In case you're able to inspect server logs, our app's Dropbox key is enrtqx0um3pxntl.

Thanks!

When a huge file (300GiB+) is uploaded using the upload_session API an "Error 500 Internal Server Error" is received when the last part is uploaded (/upload_session/append with close set).

I retry the request but an Error 500 raises again and again. Sometimes, after more than 1 hour retrying the file uploads successfully.

I am using session_type sequential. The same code for smaller files (10GiB) works perfectly.

Are you aware of the problem? Is there any workaround?

Thank you

'2/team/members/get_info' leads to 'This token is not associated with a team" error_type:USER_AUTH_NOT_ALLOWED'

I am running out of workaround and tests, what am I missing? How do I use my Team account to authorize a 'team' token/app so that I can act on behalf of my team members?

...you own one or more active Dropbox API apps using a version of an official Dropbox SDK with an outdated certificate trust store...

However when reading the blog post, it states for the .net sdk

• .NET SDK v7.0.0 or greater
  • Note that apps using older versions of the .NET SDK are only affected if they call DropboxCertHelper.InitializeCertPinning().

I don't use DropboxCertHelper.InitializeCertPinning(), so I want to clarify that my app will be OK, and I don't have to rush out a change before January?

Thanks

I'm using the Search API files/search_v2 and wanted to search for deleted files. The documentation claims that `file_status` can be used to restrict the search to the given file status. I'm doing a simple search as below, but I don't get the expected results:

{
  "options": {
    "file_status": "deleted"
  },
  "query": "deleted_file"
}

I've tried all kinds of combinations, but I'm still not getting correct results. Has anyone been able to make this work, or am I doing something wrong?

Am I doing something wrong or is there a way to fix this?

I would like to upgrade dropbox-core-sdk from version 4.0.1 to 7.0.0. Currently, I'm using Java JDK 8. According to the Dropbox documentation, this SDK appears to be compatible with JDK 8. However, version 7.0.0 has a dependency on jakarta.servlet-api 6.0.0, which is based on JDK 11.

I'm a bit confused: can I update the code without upgrading my JDK, or is it necessary to switch to Java 11?

Alternatively, is it possible to compile the code using JDK 11 but still run it on JDK 8?

I have tried to find how to approach this but can't seem to get a clear answer.

Our situation: Shared dropbox directory with 5 members. These members should have access to the outputs from some automation tools. (Github actions produces .exe which gets uploaded to dropbox for all members to enyoy). 

Now i would like for my automation tool to only have access to the /AutomationOutputs/ directory as the rest of the drive is filled with important data which we do not want to lose.

I could program my automations in a way where they never thread out of the AutomationOutputs/ directory, but I would prefer to limit the scope for the tool itself so that could never happen.

What would be the suggested approach for this situation?

With kind regards,

Joppe

I also want to be able to enter a subfolder, as I understand it, for this I need to insert the path to the subfolder in path: "/ someFolder". But how can I get this path?