Need to see if your shared folder is taking up space on your dropbox 👨💻? Find out how to check here.
Forum Discussion
Missing query parameter 'state'
I use Dropbox Core API to work with Dropbox. And I impement recently hwioauthbundle in Symfony for a fast authentication. Before this all function upload,download,list files work well. But I have this error :
/dropbox-auth-finish: bad request: Missing query parameter 'state'
It seems that the $_GET array doesn't contain state value, but I try to set this parameter with some values but it didn't work. And now I don't know what do. In the HTTP Response there isn't state parametrer.
If you know something, answer here.
list($accessToken,$userId, $urlState) = $this->webAuth->finish($_GET);
$this->dbxClient = new dbx\Client($accessToken, "PHP-Example/1.0");
Thank you
4 Replies
Replies have been turned off for this discussion
- Rich
Super User II
Moved to the API forum.
- Greg-DB
Dropbox Community Moderator
[Cross-linking for reference: https://stackoverflow.com/questions/30106962/dropbox-bad-request-missing-query-parameter-state ]
The
WebAuth.finishmethod checks thestatevalue included on the redirect to yourredirect_uriwhen the user is sent back to your app by Dropbox during the OAuth 2 app authorization flow. (This protects against CSRF attacks.) This error indicates that your$_GETarray doesn't includestate.To track down where the issue is, I'd check a few things to see where the
statevalue is lost:- does the full URL for /dropbox-auth-finish when the user is redirected back to your app have the
stateparameter? - does the app authorization URL your app sends the user to (which should start with https://www.dropbox.com/1/oauth2/authorize) have the
stateparameter?
- does the full URL for /dropbox-auth-finish when the user is redirected back to your app have the
I tried to insert a "state" parameter in the authorizaion_url like the Core API Document said.
But I don't know what's the value to pass.
The response said that it's "dropbox-auth-finish: CSRF mismatch: Expected" but I'm using a fixed authorization_url .
There is a way to eceed this parameter???Thank you
Sorry for the delay
:)- Greg-DB
The
statevalue is generated by the PHP SDK for you, and is passed through the OAuth app authorization flow. You shouldn't have to set it yourself. I'm not familiar with hwioauthbundle, but it's possible it's consuming it before you can get to it. Can you post the details I asked for in my last reply? Can you post the relevant code?Also, what do you mean when you say you're "using a fixed authorization_url"? The authorization URL should be generated (e.g., using
WebAuth.start) when the user wants to link to your app.
About Dropbox API Support & Feedback
Find help with the Dropbox API from other developers.
