dropbox-sdk-js 9.x PKCE flow rejects `code_verifier` in web apps
Yes, the PKCE flow was broken in dropbox-sdk-js 9.x — the token exchange rejected the `code_verifier` even though the same code worked on 8.x, and multiple users hit it at the same time. Downgrading to 8.x was the confirmed workaround while it was broken. The fix shipped in v9.4.0, so update to 9.4.…