API

🚀 Calling all developers! 🚀We’re excited to offer free in-person registration for 2024 BoxWorks – our biggest event of the year. 🎉Join us to dive into cutting-edge tech, network with industry experts, and explore how you can build amazing solutions with Box.👉 Register for free using this link: https://boxworks.box.com/boxworks?utm_source=GTM&utm_medium=GTM&utm_theme=BoxWorks&id=701UL0000091ee9YAA&utm_content=33BW24OlMal&coupon_code=BW24AlNov💡 Don’t miss out – spots are filling up fast! See you there!

Hi Team,I am working on creating Box Wrapper Service that will be using Box SDK for various tasks like Create Folder, Assign permissions, memberships, etc. We are planning to use Box File Request for Upload and Box Preview(in modal popup) to Preview and Download files.I need deployment suggestion on whether to keep the Box wrapper service as Azure App Service vs Azure Function. What are the pros and cons on one vs other? What should be the conclusion.

We are using Box to integrate file retrieval for clients. When searching for these files we are only provided with a folder name. We are using the api.box.com/2.0/folders/ endpoint passing in the parent folder Id. We are iterating over several pages to find the target folder name. When deployed to a production environment, we are noticing that we are unable to find the Folder through API. When testing locally we find the folder every time.We are investigating why this could happen and were hoping to get some insight from Box Support to see how things are moving on your end. Thank you 

I have access to both the Box API and MS Graph API to make edits to both systems however I am not sure if an API exists to change the Box Tab configuration to map a new channel to a specific box folder. Does anything how if endpoints exist for this functionality? 

I am trying to use box API( box upload file reference) in servicenow. This code below succeeds in uploading but the uploaded content is corrupted and unreadable.// Create a new RESTMessageV2 objectvar r = new sn_ws.RESTMessageV2();r.setEndpoint('https://upload.box.com/api/2.0/files/content');r.setHttpMethod('POST');// Set the authorization headerr.setRequestHeader('Authorization', 'Bearer <dev auth code>');// Define the boundary stringvar boundary = '----WebKitFormBoundary7MA4YWxkTrZu0gW';// Set the Content-Type header with the boundaryr.setRequestHeader('Content-Type', 'multipart/form-data; boundary=' + boundary);// Define the attributes part of the multipart bodyvar attributes = '--' + boundary + '\r\n' + 'Content-Disposition: form-data; name="attributes"\r\n\r\n' + '{"name": "schedule1.txt", "parent": {"id": "0"}}\r\n';// Define the file part of the multipart bodyvar file = '--' + boundary + '\r\n' + 'Content-Disposition: form-data; name="file"; filename="schedu

I configured a raspberry pi 4 to be a cellular modem using the SixFab cellular modem kit The kit includes a SixFabBase Hat, LTE modem, antennas and a Sixfab core. I am using a in house sim card. The pi runs a python code to find the RSSI, RSRQ & SINR values every 5 minutes using Cron. Then another code to upload the text file to box every day. The issue I am facing here is that is that the JWTAuth is not working for me. Apparently, it doesn’t recognize my folder. It says it is it uploading the files to the root folder but I don’t see the file there as well. The codes are given below.Modem Signal Loggerimport subprocessimport timefrom datetime import datetimedef get_modem_signal_info(): try: # Run the AT command using atcom and capture the output result = subprocess.run(['/home/genwave/.local/bin/atcom', '-p', '/dev/ttyUSB2', 'AT+QENG="servingcell"'], capture_output=True, text=True) output = result.stdout.strip() return o

I tried to call API to create a Folder in user account but getting not authenticated with req id : 016d6612bbfea666f33a2c21999014df4I am coadmin and also app is authenticated as I can fetch all usersI am getting 403 and code is forbidden

i am facing issue to get authentication using oauth .when i tested from postman it is getting 404 error. Please help to create app and to access folder in Box from postman

Hi, I’m looking for a way to get all shared links in an enterprise using the API. All the answers I found on this topic are 1+ year old, and just wanted to confirm, is there still no ability to get all shared links in an enterprise in the Box API?And if so, could I be provided a bit more context on this workaround that I saw on an old thread:  “If you're using the SDK, you could always crawl through the entire set of users in the enterprise and check every file or folder they own for a shared link”How would we crawl the folder of another user, when the root folder just has id 0? And what kind of permissions would this require? 

I have a single download API “https://api.box.com/2.0/files/:file_id/content”  with this i can able to download only single file only. But i want to download multiple file separately using single download API. I dont to want “ZIP Download method” Because i want separate files(Eg: Sample1.pdf, Sample2.pdf, Sample3.pdf...). Can any one say How to implement this as a solution. Thanks in advance.  

I’m building an automation that triggers a folder creation in Box, then using that new folder I’d like to send the file_request url of that folder to a customer so they could upload documents to that folder. Each automation will have it’s own separate folder. The problem is I can’t seem to find a way to retrieve that file_request url for users to upload their files to unless I manually go into the console and copy it. Is there another way to automate this process? It seems silly that we can query the shared_link for a folder, but not the file_request. Any help would be appreciated. Thanks 

While using the Box App on my Ipad files will not open immediately. The loading icon appears and continues to run for several minutes and file never opens. Has anyone had this issue and if so what did you do to resolve it.

For our API integration when calling this endpoint GET `/files/{file_id}` the return value for modified_by occasionally returns empty strings for the “name” and “login” fields. Example: { "type": "file", "id": "<file_id>", "name": "Outline.doc", "parent": {"type": "folder", "id": "<folder_id>", "name": "My Documents"}, "extension": "doc", "size": 20480, "sha1": "<hash>", "item_status": "active", "owned_by": {"type": "user", "id": "<user_id_1>", "name": "<name>", "login": "<email>"}, "created_by": {"type": "user", "id": "<user_id_2>", "name": "", "login": ""}, "modified_by": {"type": "user", "id": "<user_id_2>", "name": "", "login": ""},}when following up on this call and querying the user_id with GET `/users/{user_id}` the API is returning a 404 not found status.What is this mystery user? Am I doing something wrong in my calls that might be causing this? The call is correctly using the `as-user` header whe

Your SSO connection had errors during set up. In order to help troubleshoot your connection, please submit a case to Box User Services here.

We have successfully enabled the GCM scope on our Custom App through Box Customer Success. However, we would like some clarification regarding the authorization process for our customers. Specifically, when a customer authorizes access through our app, will the GCM permission scope automatically be enabled for their Box services?Or will we need to involve Box Support for any additional intervention to ensure that the GCM scope is active for the customer's account?

When I use the Quick Shorcut to create an Content Search API call on Box it works just fine. However, my end goal is to use that same API call to bring the JSON into a Neo4j graph database. When I alternate making the call first in Postman and then in Neo4j, using the same authorization token, the Postman call continues to work and the Neo4j call always fails on authorization with the same token. How can I fix this?

When I use Postman to execute a content search such as:https://api.box.com/2.0/search?type=folder&fields=id, name, owned_by, parent&query=A&limit=10Only some fields are displayed. When I remove one field another field which wasn’t previously returned shows up. Are there limits or constraints on the fields parameter? Also, can you specifiy fields at the next level down such as parent.id?

I'm trying to find the best way to list all items in Box that exist under the root folder and have been updated after a specific date. I've looked into a couple of API endpoints, however:1. `/search`   - It seems to require a query string or metadata template.2. `/metadata_queries/execute_read`   - It seems to require setting up a metadata template.My goal is to query items based solely on their update date, without relying on any metadata. Is there a straightforward way to achieve this using the Box API?

I have an application running out of my Oracle based IdM system that updates group membership.  This process broke down due to the process using an OAUTH2 based authentication.  I have create a new app that uses different auth, and now we can read all the groups and group members.  However, when we try to add a group member, we get:403 - access_denied_insufficient_permissions - Access denied - insufficient permissionThis is from an Oracle PL/SQL app, using the APEX_WEB_SERVICE.MAKE_REST_REQUEST function.  The same one that we used to get the list of groups and have been using for 10 years to create users and groups.  The app gets a token (if needed - tracks the expiration date in the database), and makes the request. It also logs the token, url and request body.  If I copy and paste these values into Postman and POST it, it works fine - same token, same URL, same body. I expect I am missing (or including) some header or cookie, or some other magic, and the API which causes the failure.

 I have a question regarding rate limiting for license-based APIs. If, for example, a custom app developer is on the Individual (free) plan, user A of the custom app is on the Enterprise plan, and user B is on the Business plan, would the API call limits be as follows?User A: 100,000 API calls per month because they are on the Enterprise planUser B: 50,000 API calls per month because they are on the Business plan Reference information regarding API limits: https://www.box.com/pricing

I have one folder which has a blue icon. I made a fresh one and it's yellow.The blue one works for API -- I am able to upload files to it.How do I change the yellow one to be the same? Seems the blue one was shared with my API user, but I don't know how to do that again -- it was a long time we did that one.We have only one actual user on this platform.Thank you.

 Description: I created a new OAuth 2.0 app in Box with the exact same scope and permissions as a previously functioning app. However, when I try to download files using the new app, I receive the error: "access_denied_insufficient_permissions". The previous app worked perfectly with no issues.Steps to Reproduce:Created a new OAuth 2.0 app in Box with the same scope and permissions as the original app. User grants permissions to the app. Attempt to download a file via API call.Expected Behavior: Files should download successfully, just like they did with the original app.Actual Behavior:Download attempts fail. The following error is returned: "access_denied_insufficient_permissions".Additional Information:The permissions and scope for the new app are identical to the old app, which is still working correctly. The issue began after switching to the new app. I have verified that the OAuth tokens are correct and have the appropriate permissions.Please advise on how to resolve this issue a

◆BackgroundWe provide a service that displays a list of folders in Box and uploads files specified by the customer. We received an inquiry from a customer regarding the following issue:On 8/21, 8/26, and 8/29, the service was temporarily unavailable due to an error. It was restored over time and became usable again. What could be the cause of this?◆Our Investigation ResultsUpon investigating our application logs, all incidents were due to the following error:HTTP Status: 403Response: "error":{"code":"AccessDenied","debugMessage":"{\"error\":\"service_blocked\",\"error_description\":\"The application is blocked by your administrator\"}"◆Executed APIPOST https://api.box.com/oauth2/tokenThe error occurred during the refresh of the access token.◆Questions1. Under what circumstances would an administrator temporarily block access?2. Are there any specific settings in the customer's Box administrator configuration that we should check?◆Additional InformationIf a Box administrator had prohibi

Hello Box Community,I'm currently working on integrating with the Box API. I'm using a free Box account and have successfully obtained an access token using the /oauth2/token endpoint with the following parameters:grant_type: client_credentials client_id: <my_client_id> client_secret: <my_client_secret>My custom app is configured with OAuth2 authentication, and the access token is returned successfully with these 3 parameters. However, when I try to use this token for most API calls, I receive a 404 Not Found error.The only API call that has worked for me so far is:GET /collaborations?status=pending For other endpoints (e.g., retrieving files, folders), I consistently get 404 errors.Has anyone faced a similar issue when using the client credentials grant type, especially with a free account? Do I need to enable specific permissions for my app or use a different authentication approach for certain endpoints? Any guidance on resolving this would be greatly appreciated!Thank y

Hello,The application is attempting to delete the exiting file’s metadata and create new metadata instance for the same file. This periodically results in WinError 10054: An existing connection was forcibly closed by the remote host. try: client.file(file_id=cloud_file.id).metadata().delete()except: passapplied_metadata = client.file(file_id=cloud_file.id).metadata().create(file['metadata'])Question is, what could be causing this error, is this a server configuration issue, API call timing, etc.