We are aware of the issue with the badge emails resending to everyone, we apologise for the inconvenience - learn more here.

Forum Discussion

Daniel G.70's avatar
Daniel G.70
Explorer | Level 4
2 years ago

Long time registered app not allowing Oauth authentication.

Anyone know why all of a sudden a dropbox registered app that's been working fine for years would suddenly show {"error": "invalid_scope", "error_description": "Non-scoped apps cannot specify token...
  • Greg-DB's avatar
    2 years ago

    [Cross-linking for reference: https://stackoverflow.com/questions/75738278/non-scoped-apps-cannot-specify-token-scopes-when-using-dropbox-api-oauth ]

     

    From your description, it sounds like you have a legacy non-scoped app from before we switched to registering new apps as scoped apps.

     

    We recently fixed a bug where the API would allow non-scoped apps to specify scopes using the 'scope' parameter when calling /oauth2/token with 'grant_type=refresh_token'. Scopes don't apply to non-scoped apps so this is supposed to be rejected with the error you're seeing.

     

    To correct this, you should either:

    1. not provide the 'scope' parameter when calling /oauth2/token for the non-scoped app, or
    2. migrate your non-scoped app to use scopes, which you can do using the "Permissions" tab of the app's page on the App Console.

    Option b would be preferred. You can find more information on the migration here.