We are aware of the issue with the badge emails resending to everyone, we apologise for the inconvenience - learn more here.
Forum Discussion
Invalid OAuth token handling
I'm writing directly against the v2 HTTP API and while testing our login and error handling, I found some unexpected results. If I take a valid OAuth token and corrupt it (change the first character...
- Thanks for the feedback! The 400 error here with the plain text error message is more meant for the developer during development of the app. Generally, your app should be written such that a malformed access token like that wouldn't be able to make it into your released app, but you can catch the 400 and display the error to the user if you want.
Yes, the 400 response does say that the OAuth2 access token is malformed, but that only helps if someone looks at a log. In code I can detect 401 errors or from_oauth1's 409 "invalid_oauth1_token_info" error, clear the access token, and automatically ask the user to re-authenticate, but if it's just a generic 400 there's no way for me to do that.
Greg-DB
Dropbox Staff
Dropbox StaffThanks for the feedback! The 400 error here with the plain text error message is more meant for the developer during development of the app. Generally, your app should be written such that a malformed access token like that wouldn't be able to make it into your released app, but you can catch the 400 and display the error to the user if you want.
About Dropbox API Support & Feedback
Find help with the Dropbox API from other developers.
