API

Hello all, I’m trying to upload my first app on box. I’m coding in python, using JWT authorization and my company Admin has authorized the application. When I make my authorization call to box, I am returned the following error: {'error': 'invalid_client', 'error_description': 'The client credentials are invalid'} At the moment, I’ve bypassed it with a developer token, but would still like to know what is causing the issue. Please help! Here is my code:'Import two classes from the boxsdk module - Client and OAuth2'from boxsdk.client import Client 'Configure the JSON'import jsonimport osos.chdir('C:\\Users\\Kanayo\\anaconda3')config = json.load(open('219128_0poxwjnz_config.json'))'decrypt private key'from cryptography.hazmat.backends import default_backendfrom cryptography.hazmat.primitives.serialization import load_pem_private_key appAuth = config["boxAppSettings"]["appAuth"]privateKey = appAuth["privateKey"]passphrase = appAuth["passphrase"]key = load_pem_private_key(    data=privateK

We are using box sdk and we are facing issues in injecting data to our System as connector is taking a lot of time in retrieving the data from Box. We are investigating the performance issue.Need your help to check:1. Is there any API to check how many API calls are done and how many are remaining for a account? (Account having multiple users and groups) Is there any method in box sdk which we can use to log all the API calls so that we will be sure how many API calls are happening? We see there is an option of box report in console to check API calls. How is that working and is the API value shown there is per minute or total calls?  

for some reason, I can create a shared link on the site, but it is not displayed during API requests. I tried to create a shared link to the file through the api, however, I get the 403 Forbidden error. What could be wrong? Do I need any special permissions?

I found this out only through errors beginning to show up in API responses.Previously, the following token url worked for getting an access tokenhttps://www.box.com/api/oauth2/token However, that endpoint is no longer functional as of around 12pm Pacific 1/21/2025The endpoint in the current documentation however does work:https://api.box.com/oauth2/tokenJust wanted to share in case anyone else runs into this as well as Box provided 0 notification of this change

Hello Box Team! Couldn’t find this in the documentation so I figured I’d ask here! When a webhook is created, will it notify me when permissions on a file/folder has changed? 

I have been messing around a bit with metadata templates and Box API.  I found that I’m required to use the PUT method when updating a file or folder, but I cannot for the life of me figure out why I keep getting errors from the server.https://developer.box.com/guides/metadata/instances/update/#:~:text=To%20update%20the%20metadata%20to,data%20on%20the%20template%20instance.Using the link above, I have been trying to get the payload to match this exactly, but to no avail.I have tried using “PUT” to post the payload, but I receive an unsupported media type, if I wing it and put POST, it says it’s a bad request.I use POST to apply the template in question, and it works just fine, but I seem to be missing the connection between Powershell, PUT, and updating metadata via Box API.Does anyone have an example of a successful metadata update via powershell? For a folder, specifically. 

Hello I need some help finding the email address value for a file uploaded from the embed widget in the API.  I’m using Box.Sdk.Gen.  Currently if a file is uploaded from the embedded widget, I cannot see fileUploadedBy (the value is null).  Also, file.CreatedBy, and file.ModifiedBy are tracked with an ‘Anonymous User’ value.  I can see the value displayed in the folder under the column ‘Updated’ on box.com.  Can someone help me get to the field for the email address that submitted the file?

Hello.Uploading is subject to the following limits　240 file upload requests per minute, per userWhen a service account acts on behalf of an App-User in an application using JWT authentication, is this limit per service account or per App-User?A service account is trying to act on behalf of multiple App-User.I want to know if the rate limitation is per App-User or total of App-User.

Let’s say i have a subfolder  like  parent/subfolder1/subfolder2. Is there any way i can use this relative path parent/subfolder1/subfolder2 in rest api for listing items under the folder? or to download a file under a folder parent/subfolder1/subfolder2/file1 ?

Is there a way to tell if a folder/file has been deleted from the /files/{file_id} endpoint? Should I be including a specific field in the fields query param to get this data? Was looking at the example API response and it looks like there’s a field called "trashed_at" that indicated when a folder was deleted but if it hasn’t been deleted will that field be null or not even be returned?  Same for Groups/Users? 

We need to extract a full list of all folders in our Box repository for external security analysis. We thought using a query of NOT XXX might do so, but NOT seems to require a predecessor criteria, How can we use the API to return a full list of all folders even if we need to do multiple iterations?

Hello,I'm creating an user via .NET SDK (boxClient.Users.CreateUserAsync method) but user is being created with different email address. In the body request I'm setting email as <personal information-redacted> but in the result I'm getting something like "AppUser_2317968_daP2ZOIUIW@boxdeveditition.com". How I can create user with proper email address?Best regards,Damian Kochmański

I have problem about Access Token, I am trying to use Box API to upload file to box drive from other web, the problem is  access tokens expire after 60min. And my app was built for normal User who don’t know how to get Access Token.Is there a work around about it ? Or is there anyway I can make that process to be automatic ?! My company have box drive Account paid version, Can that give me unexpired token !?

Hello,I am getting this error when I try to authorize using client id and secret client id : tulqzn7d3r33gqg90mblowikphufuo84It’s app access only and also the app is authorized.

I am trying to implement a particular functionality where i am trying to retrieve the download url of a file in one of the folders using box’s api.I have created a box application with OAuth 2.0 with JSON Web Tokens (Server Authentication).below mentioned is my application’s scope:Application AccessAll UsersApplication ScopesManage groups Manage retention policies Manage signature requests Read and write all files and folders stored in Box Manage app users Enable integrations Manage enterprise properties Manage users Manage Relay Admin can make calls on behalf of users Manage webhooks v2 Generate user access tokens I am using boxsdk python to write my functions / api’s. Below is my code snippet which mentions how my client is initialized and the api where i am facing the issue “Message: Access denied - insufficient permission”.user_to_impersonate = client.user(user_id='[USER_ID]')user_client = client.as_user(user_to_impersonate)def get_download_url(): """ API endpoint to get the

Hi All,  we had a box developer sandbox created from enterprise admin user to integrate box sign service. we accidently deleted that that sandbox, we want to recover that because sandbox admin was not a enterprise user eg. myName+boxsign@companydomain.com within that sanbox/ admin user there is many important data, how can we recover that recently deleted sandbox. Any help is appreciated.

1. Data is available in reports but not via APIDespite being able to output data for events after December 13, 2024, using the BOX report feature, I am unable to retrieve the same data via the BOX API. The API consistently returns only events up to December 13, 2024. Could you help clarify why this is happening and how to resolve it?2. Scheduled executions do not save data after December 13When I set up scheduled executions of my script to fetch event data, no events after December 13, 2024, are saved in my system. Could you explain why the API is not retrieving or saving these events during automated runs, even though the data exists in the reports? // Function to fetch events from BOX API using the current stream_positionfunction fetchBoxEvents() { const sheet = SpreadsheetApp.getActiveSpreadsheet().getActiveSheet(); const scriptProperties = PropertiesService.getScriptProperties(); const accessToken = scriptProperties.getProperty("BOX_ACCESS_TOKEN"); if (!accessToken) { Logger

I use to be able to authenticate as the subject_type user on the client id app kox474mes4cugrj929i4kh5enokukmltThis is a free account and the app is authorized and enabled.However, now it seems that the subject_type is being required to be set to enterprise. The problem with this is that as the enterprise, I have to add the "Automationuser" to the folder I want the user to upload to. This is a problem because I have been shared several folders and it would be a large coordination effort to have everyone add the "Automationuser" as an uploader. And this would break for any new shares if the user wasn't added.Is there a way to still be able to upload as the user that has access to those folders? I tried using the As-User header, but then that returns the error like the folder doesn't exist.

Hello,I want to create user invite via .NET SDK. I’m using boxClient.Invites.CreateInviteAsync method. I created another (personal) account on box.com and I’m trying to invite it to my enterpise. But I’m getting an exception with details:{"type":"error","status":400,"code":"bad_request","context_info":{"errors":[{"reason":"invalid_parameter","name":"login","message":"Invalid value <personal information-redacted>."}]},"help_url":"http:\/\/developers.box.com\/docs\/#errors","message":"Bad Request","request_id":"suqbwuhwiea7aeue"} Am I missing something?

Delete Folder Lock fails with 404 Not Found.{    "type": "error",    "status": 404,    "code": "not_found",    "help_url": "http://developers.box.com/docs/#errors",    "message": "Authorization Failed",    "request_id": "0b3a714efe5a6f7110fc3281c015b0d2c"}I’ve authenticated with the Owner as well as made myself Co-Owner.I’ve reviewed: API [Content API] - 404 "not_found" Errors from the Box API – Box Support but doesn’t seem to help.curl --location --request DELETE 'https://api.box.com/2.0/folder_locks/297778732113' \--header 'content-type: application/json' \--header 'Authorization: Bearer ----------------------------------------------' \--header 'Cookie: box_visitor_id=66ec80484d6913.85943221'   

2024-12-13 18:56:58.523 INFO  [[ACTIVE] ExecuteThread: '15' for queue: 'weblogic.kernel.Default (self-tuning)']The API returned an error code [403 | q8maaahwjvoa01l7.04b218b328508244f8ff0d76320de105e] storage_limit_exceeded - Account storage limit reached

When I run the folder creation API, I get the following error.What's the cause? { "error": "invalid_grant", "error_description": "Please check the 'sub' claim. The 'sub' specified is invalid."} 

Happening intermittent, 3/5 executions are SUCCESS, 2 are getting failed with below error.In our UAT environment facing below error once in a while, Any suggestion how to fix?CODE:  BoxDeveloperEditionAPIConnection  boxConnection = new BoxDeveloperEditionAPIConnection(EnterpriseId(), DeveloperEditionEntityType.ENTERPRISE, boxConfig, null); Proxy   proxy = new Proxy(Proxy.Type.HTTP, new InetSocketAddress(proxy-uat.apple.com, 8080));  boxConnection.setProxy(proxy);boxConnection.authenticate();ERROR:com.box.sdk.BoxAPIException: Couldn't connect to the Box API due to a network errorat com.box.sdk.BoxAPIConnection.executeOnClient(BoxAPIConnection.java:1259) ~[box-java-sdk-4.0.1.jar:?]Caused by: java.io.IOException: Unexpected response code for CONNECT: 403 

 I only used Box and Practice questions with study guide to prepare for the exam for 2 weeks.https://docs.google.com/document/d/1i5y-X-17RVirib6URVZOqzkIMd37Vw_6nBXuk07ahDc/edit?tab=t.0#heading=h.p6lesgmecr55

Specifically, I need to understand:If an app user or service account starts a pre-configured workflow through the API (POST /workflows/{workflow_id}/start) Can they add another app user as a task assignee at the time of starting this workflow? I've checked the Box Developer Documentation but couldn't find specific information about this capability. Any documentation references or real-world experience would be helpful.Thank you in advance for your help!