Build on the supported package contract
Use @absolutejs/esign-dropbox-sign through its supported public entry points.
@absolutejs/esign-dropbox-sign
@absolutejs/esign-dropbox-signv0.0.1betaCommerce & GrowthDropbox Sign adapter for @absolutejs/esign
#Installation
BASH
bun add @absolutejs/esign-dropbox-sign#Capabilities
Overview
Supports OAuth bearer tokens or an explicitly configured API key. OAuth tokens are distinct from the API key used to verify callback event hashes. dropboxSignOAuth provides authorization URLs, code exchange, refresh, and account discovery. The host must validate OAuth state and persist grants securely.
Configure the API app's callback URL and allowed embedded domain. App approval is required for production embedded/OAuth use. Keep testMode: true until the app is approved and live verification is complete. Test-mode requests are not production signatures.
Use the official hellosign-embedded browser client to open the returned signing URL with clientId; honor its documented domain checks and configured return flow. Do not treat a browser sign or close event as completion. Reconcile the saved request with the backend.
Show 2 more
Dropbox sends callbacks as multipart form data. Pass the exact json field to verifyWebhook. Return Hello API Event Received after processing. The HMAC covers event time/type only; always fetch the saved request again before updating agreement state. Completed-document downloads contain the audit trail; a separate audit endpoint is not offered by this adapter.
References: Embedded signing, callback verification, OAuth, field placement.
Outcomes
What you can build
Hardening checklist
Production guidance
Make every external boundary explicitPin the deployed @absolutejs/esign-dropbox-sign version, replace example or memory-backed dependencies with durable implementations, bound external calls, protect credentials, and emit enough evidence to retry or recover safely.
Follow in order
Troubleshooting path
1
Trace from the first failed boundary
Reproduce the smallest canonical @absolutejs/esign-dropbox-sign example, confirm the supported entry point and version in the API explorer, then inspect the first boundary that did not produce its documented result.
#@absolutejs/esign-dropbox-sign quick start
Partial snippet# @absolutejs/esign-dropbox-sign
TS
import { dropboxSign } from '@absolutejs/esign-dropbox-sign';
const provider = dropboxSign({
clientId: process.env.DROPBOX_SIGN_CLIENT_ID!,
accessToken: () => tokenResolver.getFreshToken(),
webhookApiKey: process.env.DROPBOX_SIGN_WEBHOOK_API_KEY!,
testMode: true,
});#Public entry points
Supported entry points declared by this package manifest.
@absolutejs/esign-dropbox-signPackage entry point declared in package.json.
#Package commands
Scripts declared by this package manifest.
bun run buildbun build src/index.ts --outdir dist --target node --external '@absolutejs/esign' && tsc --project tsconfig.build.json
bun run check:packageabsolute-changelog check
bun run testbun test ../test
bun run typechecktsc --noEmit
#API reference
Search the declarations exported by the current package type files. Expand a symbol to inspect its source-backed signature.