API

Question about the Collaboration Limit Is the maximum number of collaborators that can be invited to a file 500 people? When trying to invite collaborators with 500 already present, the following response is returned: Unexpected API Response [403 Forbidden | xxxx ] access_denied_insufficient_permissions - Access denied - insufficient permission I have confirmed that more than 1000 people can be invited to a folder, but is there a limit on the number of collaborators that can be invited to a folder?

Hi, I am trying to use box-ui-elements in my custom built react app project but keep getting the same errors about box-ui-elements not being installed correctly. Any help would be appreciated.

Hello - I am working on a custom application that requires the use of annotations on files. I am consistently running into issues with annotations. Our application utilizes JWT for authentication. When attempting to downscope the access token with scopes needed for the UI elements + annotations, I consistently get “Insufficient permissions” for the downscoped token. Upon looking at the permissions for my file using the downscoped token, I notice that there are additional permissions that are not enabled despite following the scopes outlined in the documentation: Downscoped access token (scopes: base_preview item_download item_upload annotation_edit annotation_view_all base_sidebar item_comment item_preview) { "type": "file", "etag": "0", "permissions": { "can_download": true, "can_preview": true, "can_upload": true, "can_comment": true, "can_rename": false, "can_delete": false, "can_share": false, "can_set_shar

I have been using the same call for some days but since a couple of days we started getting 400 responses when using offset in a /search call. For example: {'type': 'error', 'status': 400, 'code': 'bad_request', 'context_info': {'errors': [{'reason': 'invalid_parameter', 'name': 'offset', 'message': "Invalid value '2'."}]}, 'help_url': 'http://developers.box.com/docs/#errors', 'message': 'Bad Request', 'request_id': 'gcvgk4hqlhels3di'} The original call was to the url https://api.box.com/2.0/search?limit=11&offset=2&content_types=name,description&ancestor_folder_ids=250469971042&type=folder&fields=name,description,path_collection&query=%2232%22 Are we composing the URL right? Thanks in advance!

i am using the boxnet integration with moodle as found on GitHub - moodlehq/moodle-repository_boxnet: Boxnet repository that was removed from standard package in Moodle 4.0 and finding some environments failing on the download (while others continue working). i am wondering if there are any tools to let me see what is happening from the box end of things? thx for any help.

Hi team!We submitted the app for approval around 2 weeks back but haven’t received any reply till now about our approval status.App details:Name: CobaltEmail: <removed personal information>User ID: <removed information>Can you please expedite this as it’s an urgent requirement?Looking forward to a positive response.

We are actively builidng a Box Integration. Developed a custom-application to use Authentication as OAuth2.0. We have added multiple web-integrations and everything works as expected. When Any action is triggered from Box-Cloud using a Web-Integration – We use the authCode to generate the access-token with NodeSdk. – We perform the required task and Workflow is Completed without any issues. We are storing {access_token, refresh_token, ttl} in our backend database… The Problem is when we Try to refresh the Token: The Refresh Token is used for the first time. The Refresh Token is not expired (I tested within few minutes, after getting the refresh-token). I tried using the Authentication flo: Contructing AuthenticationUrl, Allow Access from BOX, Exchange Code for Token. etc. It also failed when I try to Refresh the Token. I tried using CURL, POSTMAN and NODE-SDK. Everything is throwing the same error related to "Invalid-grant" “invalid_grant”, “Invalid grant_type parameter”, etc T

Copy pasting this from another question that was never answered: When I attempt to perform a preflight check with a file with the same name in the same folder and run into a naming collision, I have code that accounts for the conflict error Box API Exception with code: “item_name_in_use”. I expect the JSON object to have an array of conflicts inside context_info as per the documentation https://developer.box.com/reference/resources/conflict-error/ However, sometimes conflicts is an object instead of an array, breaking my deserialization process. Example: When calling boxFolder.canUpload(filename, fileSize), I receive this error: { "type": "error", "status": 409, "code": "item_name_in_use", "context_info": { "conflicts": { "type": "file", "id": "1545199568548", "file_version": { "type": "file_version", "id": "1697444235748", "sha1": "da39a3ee5e6b4b0d3255bfef95601890afd80709" }, "sequence_id": "0", "etag": "0",

After a lot of simultaneous user delete and group_membership delete operations, some group_memberships are stuck. In admin console, it shows that there are users in the group, but not showing them inside, also users are already deleted. If checking via API, they are shown in group/GROUP_ID/memberships endpoint, but attempting to delete them via DELETE on /group_memberships endpoint causes this error: { “type”: “error”, “status”: 404, “code”: “not_found”, “context_info”: { “errors”: [ { “reason”: “invalid_parameter”, “name”: “group_tag_user”, “message”: “Invalid value ‘group_tag_user_36356814675’. ‘group_tag_user’ with value ‘group_tag_user_36356814675’ not found” } ] }, “help_url”: “http://developers.box.com/docs/#errors”, “message”: “Not Found”, “request_id”: “fdm4k5hpziqx9of5” }

For all intents and purposes, I’m using cURL commands to operate my application. Project: I have a large number of folders (1000+) in the root of my application. Each folder has a standard structure of sub-folders, and within each sub folder there can be a large number of individual files (1000+). Need: I have a database with associated records. Each record is given an identifier (UUID). I created a metdata template with one field called UUID. Goal is to add a metadata instance to related files and folders with associated UUID. When you pull up the record in the database, application will search all metadata for UUID, and return appropriate files. Problem: I have successfully done so with files. Added metadata instance, search for UUID, and found list of files (99% of the time it returns just one). I have NOT been able to do so with folders. I need to be able to search for a metadata instance on a “folder” and retrieve it. Because of the sheer number of folders, list_items_in_f

I am a bit confused about the application type and authentication method best suited for my use case. I want to build an application, which should be published into the box app centre. The application should add context menu items to the existing box cloud Users with the box cloud account are the expected users. They will select a file or folder and click the context menu option. Context menu item click - should invoke our API., with information about the selected file or folder. The application should have permission to download and upload files. The main concern is that I want a long-lived token. I don’t want to re-authenticate for every call of a user a short-lived token. If multiple Organizations installed the application, How do we differentiate the organization? Thanks, Sarin

I think the user will be directed to the URL below when authorizing the user using OAuth 2.0. https://account.box.com/api/oauth2/authorize?response_type=code&redirect_uri=xxxx&state=xxxx&client_id=xxxx When redirecting the user to the above URL, a problem occurs where a screen like the one below is displayed. https://account.box.com/login/mfa?redirectUrl=/api/oauth2/authorize?response_type=code&redirect_uri=xxxx&client_id=xxxx I’ve run into this problem several times and I’m guessing that the following conditions are causing this issue: ・2FA is enabled for your Box account stored in your browser’s cookies ・A certain amount of time has passed since you accessed the box using the above account on your browser. Currently, the following workarounds are being considered, but is there a fundamental solution? ・Use an incognito browser to prevent your Box account saved in cookies from being used. ・Access the approval URL again Similar questions have been asked in other env

Hello, I am currently experiencing an issue with two-factor authentication on BOX. When I attempt to access the authentication page, I am presented with a CORS (Cross-Origin Resource Sharing) error, which prevents me from completing the authentication process. Here is the error message I am seeing: Access to XMLHttpRequest at ‘h ttps://app.box.com/gen204? category=boomerang&event_type=beacon&&keys_and_values[current_rm]= box_oauth2_server_authorize&keys_and_values[datacenterTag]= us-west4-prod&keys_and_values[is_old]=1&keys_and_values[uri]= https%3A%2F%2Fapp.box.net%2Fapi%2Foauth2%2Fauthorize%3F … {snip} … &runmode_options[add_geo]=1’) from origin ‘h ttps://app.box.net’ has been blocked by CORS policy: No ‘Access-Control-Allow-Origin’ header is present on the requested resource. I have also attached a screenshot of the error for reference. I understand that CORS is a security feature implemented in web browsers to restrict requests from one domain to anot

I wanted to connect Box and DataSpider (currently mitocoX), so I created a custom app from the development console, downloaded a JSON file, and tried to set it in DataSpider. However, I get an error and can’t connect. If you are an expert, please tell me if I should use a file other than a JSON file, and if so, where can I download a file other than a JSON file? I’m a newcomer, so there are a lot of things I don’t understand, but , thank you.

Hello Box Community, I am currently using Box Drive and monitoring file events with its Webhooks. I’m curious to know if it’s possible to retrieve the version history of files using Box Drive Webhooks. Specifically, I’d like to retrieve the version history related to changes made to a file, and I’m particularly interested in detecting if a file version has been reverted. If anyone in the Box community knows how to retrieve file version history using Box Drive Webhooks, I would greatly appreciate any insights you can provide. Thank you very much.

Hello Getting exception “Request timed out” since Friday 4/12 through today on downloads using Box C# client var stream = await client.FilesManager.DownloadAsync(BoxID); On Saturday could not download any files Now it seems after program start, 1 or 2 downloads in a row work fine and then it hits a wall, restarting program over and over is the short term fix. Integration has been in place since 2020 Program has not changed lately Can access Box.com UI fine and download files too. Thank You!

Hi Team, We are trying to set the unshared_at value to update the publicly shared folder to be accessible for 10 minutes only, with this endpoint, https://developer.box.com/reference/put-folders-id/#param-shared_link-unshared_at We do have a paid account However we are getting the below response : { "reason": "invalid_parameter", "name": "unshared_at", "message": "Invalid value '1712055223'." } Could anyone help with this error

In implementing a flow within the OAuth authentication process that always prompts users to select an account, is my understanding correct that there are currently no parameters available for this purpose? developer.box.com Authorize user - API Reference - Box Developer Documentation Explore the Box APIs and SDKs to use for app development, API documentation, developer support resources, and access the Box Developer Console

Using the API, is there any way to get download/preview counts when you create a shared link for a folder? I can see counts on the files in the folder through the web interface, but files returned by the api don’t have shared link data which is where the counts would show if the individual files had a shared link. The shared link data related to the folder returned by the api exists, but the download/preview counts are always 0. I wasn’t really expecting them to be anything else, but those are the only counts I can find that have any value at all. I suppose I can create a shared link of each individual file in addition to the folder, but I was hoping to avoid that. Thanks!

I was trying to create the webhook but i encounter this error while creating it Anyone know what was the reason of it?

I’ve created a Box free account and trying to access the box APIs using Postman. I have used Auth 2.0 flow and successfully authenticated to generate an access token. While I’m able to perform GET API callouts, I’m encountering issues with POST callouts for actions such as creating files or folders. These attempts result in a 403-error status code. Could someone please suggest a solution for accessing Box APIs with a free account? Do I need to purchase a plan or are there any prerequisites or configurations that I might be missing?