You might see that the Dropbox Community team have been busy working on some major updates to the Community itself! So, here is some info on what’s changed, what’s staying the same and what you can expect from the Dropbox Community overall.
Forum Discussion
Qt OAuth get refresh token
Hi, I try to get my refresh token after going throw the basic authentification flow with PKCE. Here my code : connect(m_auth, &QAbstractOAuth2::authorizationCallbackReceived,[=](const QVariant...
Please note that when calling /oauth2/token, you should not include an access token. The /oauth2/token endpoint can be used to exchange an authorization code for an access token and optional refresh token, or to use a refresh token to get a new access token. It does not itself expect or accept an access token as input. When calling /oauth2/token, the "Authorization" header is a way to supply the app key and secret, as an alternative to the client_id and client_secret parameters. You can find more information in the documentation for /oauth2/token, as well as this blog post which contains a useful example.
You should only set the redirect_uri parameter on /oauth2/token if you used a redirect_uri on /oauth2/authorize when retrieving the authorization code, and if so, it must exactly match that redirect_uri value.
sarahModulo wrote:...
... QNetworkReply *reply = m_auth->post("https://api.dropboxapi.com/oauth2/token",parameters);
...
I got this error :
"{\"error\": \"invalid_request\", \"error_description\": \"Can't use \\\"Authorization\\\" header and \\\"client_secret\\\" arg together.\"}"
Hi sarahModulo,
Yes, that's normal. The post method you're using implies authentication (i.e. includes 'Bearer' authentication). You are doing something the class you're using already implements. 😉 You're repeating in your code something already done! This explains the received error message. Read the documentation with bit more care.
Use the same post method to only call all regular API calls (i.e. the calls intended to use 'Bearer' authentication), not to call intended to receive any kind of token (as you are using incorrectly now).
Hope this gives direction.
About Dropbox API Support & Feedback
Find help with the Dropbox API from other developers.
