<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Implicit Grant Returns Access Denied unless localhost in Dropbox API Support &amp; Feedback</title>
    <link>https://www.dropboxforum.com/t5/Dropbox-API-Support-Feedback/Implicit-Grant-Returns-Access-Denied-unless-localhost/m-p/219236#M11557</link>
    <description>Thanks for following up. I'm glad you got this sorted out already.&lt;BR /&gt;&lt;BR /&gt;And for reference, yes, in certain cases Dropbox will automatically redirect you through the OAuth flow if you've already authorized the app. It won't do so if you're using a localhost redirect URI. The information sent to the redirect URI don't change based on that though. If you want, you can disable that automatic redirect behavior using force_reapprove=true:&lt;BR /&gt;&lt;BR /&gt;&lt;A href="https://www.dropbox.com/developers/documentation/http/documentation#oauth2-authorize" target="_blank"&gt;https://www.dropbox.com/developers/documentation/http/documentation#oauth2-authorize&lt;/A&gt;</description>
    <pubDate>Wed, 03 May 2017 19:32:05 GMT</pubDate>
    <dc:creator>Greg-DB</dc:creator>
    <dc:date>2017-05-03T19:32:05Z</dc:date>
    <item>
      <title>Implicit Grant Returns Access Denied unless localhost</title>
      <link>https://www.dropboxforum.com/t5/Dropbox-API-Support-Feedback/Implicit-Grant-Returns-Access-Denied-unless-localhost/m-p/219081#M11541</link>
      <description>&lt;P&gt;Background page: &lt;A href="https://blogs.dropbox.com/developers/2013/07/using-oauth-2-0-with-the-core-api/" target="_blank"&gt;https://blogs.dropbox.com/developers/2013/07/using-oauth-2-0-with-the-core-api/&lt;/A&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;So I'm trying to use the implicit grant method of login as I have always done before. However, for some reason whenever I change the redirect url from:&amp;nbsp;'http://localhost:3000/loginredirect/'&lt;/P&gt;
&lt;P&gt;to my actual cloudfront url, it stops working.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;To be more specific this url when used with the cloudfront url:&amp;nbsp;&lt;/P&gt;
&lt;TABLE border="0" cellspacing="0" cellpadding="0"&gt;
&lt;TBODY&gt;
&lt;TR&gt;
&lt;TD class="code"&gt;
&lt;DIV class="container"&gt;
&lt;DIV class="line number1 index0 alt2"&gt;&lt;CODE class="plain plain"&gt;&lt;A href="https://www.dropbox.com/1/oauth2/authorize?client_id=&amp;lt;app" target="_blank"&gt;https://www.dropbox.com/1/oauth2/authorize?client_id=&amp;lt;app&lt;/A&gt; key&amp;gt;&amp;amp;response_type=token&amp;amp;redirect_uri=&amp;lt;redirect URI&amp;gt;&amp;amp;state=&amp;lt;CSRF token&amp;gt;&lt;/CODE&gt;&lt;/DIV&gt;
&lt;/DIV&gt;
&lt;/TD&gt;
&lt;/TR&gt;
&lt;/TBODY&gt;
&lt;/TABLE&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Does not show me the Dropbox window asking me to grant access to my app, instead it shows me:&lt;/P&gt;
&lt;P&gt;&lt;SPAN class="html-tag"&gt;&amp;lt;Code&amp;gt;&lt;/SPAN&gt;&lt;SPAN class="text"&gt;AccessDenied&lt;/SPAN&gt;&lt;SPAN class="html-tag"&gt;&amp;lt;/Code&amp;gt;&lt;/SPAN&gt;&lt;/P&gt;
&lt;DIV class="line"&gt;&lt;SPAN class="html-tag"&gt;&amp;lt;Message&amp;gt;&lt;/SPAN&gt;&lt;SPAN class="text"&gt;Access Denied&lt;/SPAN&gt;&lt;SPAN class="html-tag"&gt;&amp;lt;/Message&amp;gt;&lt;/SPAN&gt;&lt;/DIV&gt;
&lt;DIV class="line"&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;DIV class="line"&gt;&lt;SPAN class="html-tag"&gt;Also the loginredirect url for both localhost and cloudfront url is set on the app settings side. Not sure what's wrong, it's worked just fine before...&lt;/SPAN&gt;&lt;/DIV&gt;
&lt;DIV class="line"&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;DIV class="line"&gt;&lt;SPAN class="html-tag"&gt;If you have any tips on what might be happening, it'd be greatly appreciated! Thank you for your time!&lt;/SPAN&gt;&lt;/DIV&gt;</description>
      <pubDate>Wed, 29 May 2019 09:23:03 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Dropbox-API-Support-Feedback/Implicit-Grant-Returns-Access-Denied-unless-localhost/m-p/219081#M11541</guid>
      <dc:creator>cloudlife</dc:creator>
      <dc:date>2019-05-29T09:23:03Z</dc:date>
    </item>
    <item>
      <title>Re: Implicit Grant Returns Access Denied unless localhost</title>
      <link>https://www.dropboxforum.com/t5/Dropbox-API-Support-Feedback/Implicit-Grant-Returns-Access-Denied-unless-localhost/m-p/219224#M11551</link>
      <description>What's the URL of the page where you see the 'AccessDenied' output? That doesn't look like the format for an error from Dropbox. Is it your redirect URI itself? If so, I'm afraid I can't offer much help, as that would be an issue with your page, so you'd have to investigate what's happening there to cause that error.</description>
      <pubDate>Wed, 03 May 2017 17:53:31 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Dropbox-API-Support-Feedback/Implicit-Grant-Returns-Access-Denied-unless-localhost/m-p/219224#M11551</guid>
      <dc:creator>Greg-DB</dc:creator>
      <dc:date>2017-05-03T17:53:31Z</dc:date>
    </item>
    <item>
      <title>Re: Implicit Grant Returns Access Denied unless localhost</title>
      <link>https://www.dropboxforum.com/t5/Dropbox-API-Support-Feedback/Implicit-Grant-Returns-Access-Denied-unless-localhost/m-p/219234#M11556</link>
      <description>&lt;P&gt;The access denied url is on my cloudfront loginredirect url. However, there's also a difference in the way it works from Dropbox's side too.&lt;BR /&gt;&lt;BR /&gt;When I'm using the implicit grant from localhost, I actually get a Dropbox page-Request for access to app folder every time I log in. However, when I use the cloudfront redirect url, it skips this page completely going straight to a access denied page.&lt;BR /&gt;&lt;BR /&gt;I don't see why there was a difference in behavior from Dropbox as well.&lt;BR /&gt;&lt;BR /&gt;In addition, I never defined this access denied page. It's also spitting out a RequestId and HostId.&lt;BR /&gt;&lt;BR /&gt;-----------------------&lt;BR /&gt;SOLVED: It was an issue with the routing of the loginredirect page and the way it's managed by AWS, since it's a single page application. (To further elaborate just in case someone else runs into the same problem, essentially all urls need to point back to the index.html page. Due to limitations on the implicit grant and running a single page application)&lt;BR /&gt;&lt;BR /&gt;The difference in Dropbox behavior persists even now that it's working. So apparently localhost and real redirect urls are treated differently.&lt;BR /&gt;&lt;BR /&gt;Thanks for trying to help!&lt;/P&gt;</description>
      <pubDate>Wed, 03 May 2017 19:22:54 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Dropbox-API-Support-Feedback/Implicit-Grant-Returns-Access-Denied-unless-localhost/m-p/219234#M11556</guid>
      <dc:creator>cloudlife</dc:creator>
      <dc:date>2017-05-03T19:22:54Z</dc:date>
    </item>
    <item>
      <title>Re: Implicit Grant Returns Access Denied unless localhost</title>
      <link>https://www.dropboxforum.com/t5/Dropbox-API-Support-Feedback/Implicit-Grant-Returns-Access-Denied-unless-localhost/m-p/219236#M11557</link>
      <description>Thanks for following up. I'm glad you got this sorted out already.&lt;BR /&gt;&lt;BR /&gt;And for reference, yes, in certain cases Dropbox will automatically redirect you through the OAuth flow if you've already authorized the app. It won't do so if you're using a localhost redirect URI. The information sent to the redirect URI don't change based on that though. If you want, you can disable that automatic redirect behavior using force_reapprove=true:&lt;BR /&gt;&lt;BR /&gt;&lt;A href="https://www.dropbox.com/developers/documentation/http/documentation#oauth2-authorize" target="_blank"&gt;https://www.dropbox.com/developers/documentation/http/documentation#oauth2-authorize&lt;/A&gt;</description>
      <pubDate>Wed, 03 May 2017 19:32:05 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Dropbox-API-Support-Feedback/Implicit-Grant-Returns-Access-Denied-unless-localhost/m-p/219236#M11557</guid>
      <dc:creator>Greg-DB</dc:creator>
      <dc:date>2017-05-03T19:32:05Z</dc:date>
    </item>
  </channel>
</rss>

