Empty uid in second leg of oauth for "Team member file access" app

[Info V.1]

When a member authenticates for a business app of type "Team member file access", then in the second leg of oauth the uid is empty:

Example:

{
"access_token": "8H9QotNcSyAAAAAAAABUbI0E-amnsmasnjsd...",
"token_type": "bearer",
"team_id": "dbtid:AACyGZWrUW...yzXtNuwYtLsVjoE",
"uid": ""
}

Any idea why cant this be the uid of the user who authenticates?

Thanks,

Manish

[Greg-DB]

Dropbox for Business API apps are linked to Dropbox for Business teams, and not individual users/admins on teams. This can only be done by an admin, but the API doesn't currently return information about which admin specifically authorized it. I'm sending this along as a feature request though.

[Info V.1]

Thanks gregory.

Is there any other way to find out who authenticates?

[Greg-DB]

No, there's no workaround, beyond having the app ask the admin for their ID/email.

[Greg-DB · Accepted solution]

The Dropbox API now offers a way to determine which admin authorized a particular access token:

https://www.dropbox.com/developers/documentation/http/teams#team-token-get_authenticated_admin

If you're using an official SDK, there will also be corresponding method for this endpoint.