i can still create a dropboxclient instance even with completely random strings as "accessToken"

[tsiros]

i can still create a dropboxclient instance even with completely random strings as "accessToken"

why?

[Greg-DB · Accepted solution]

When making a local DropboxClient object, the string you supply as an access token isn't validated against the API. That is only done when you actually make API call. If you want to check if an access token is still valid, you can make an API call, such as get_current_account.