API

Hello Sir/Madam,We would like to set which file extensions should be allowed on upload to box folders. We are sending app user tokens to browsers. The browser passes the token to Box UI Elements, i.e. the Uploader element. We can customize JS scripts to only allow a list of file extensions. However, is it possible to do it through box settings so that they can’t use the token maliciously to upload files with unauthorized extensions? I can see that in Governance / Content Security / Policies we can set which file extensions are forbidden, but I’m searching for the opposite: setting which file extensions should be allowed.Does box support this feature, or is there a workaround (through collaboration settings for example)? Thank you for your time,Sincerely,Antonin Marxer Content security 

Hi, I’ve been working with the Java SDK and am trying to use the FileRequest copy method to apply an existing template to file requests to new folders. This is the example code I’ve been following:https://developer.box.com/guides/file-requests/copy/But the template doesn’t seem to be copying over correctly. Could there be an issue with the Java SDK?Thanks!

Hi Team,We are planning to develop an integration between Box and Zoho Cliq.Use Case:We are trying to fetch both team folders and personal folders of a user through the API. However, we couldn’t find any specific endpoint that directly supports this.Currently, we are able to fetch all files and folders in the root directory using the /folders/0/items endpoint. Is there any recommended workaround or approach for specifically identifying team folders (i.e., folders shared with groups)?

I referred the API documentation from link below:https://developer.box.com/reference/get-users/#param-user_typeAccording to the documentation, I should be able to fetch external users by passing the value "external" to the "user_type" query parameter in the "/users" API. However, when I tried this, it returned an empty list, even though I know there are external users in my account. I have attached screenshots for your reference.External User tab UIPostman API responseCould you please clarify if any limitations with the account might be preventing us from retrieving external users? Alternatively, is there another method to fetch external users? I would appreciate a brief explanation on this.

We are looking to automate the process of adding users to segments within an Information Barrier using the Box API, as we anticipate frequent additions to each segment. However, we are encountering issues during implementation.When attempting to add a user to a segment while the Information Barrier is in the "enabled" state, the API returns a 409 Conflict response.The API endpoint we are using for this operation is: POST /shield-information-barrier-segment-members.We understand from the documentation that modifying segment members is not allowed when the Information Barrier is in the "enabled" state. Could you provide guidance on the recommended approach to edit segment members via the API under these circumstances? Is there a specific workflow we should follow to handle this?Thank you in advance for your support!

Hi Everyone,Need to have any documentation about the default expiration period for a JWT requested through private key default expiration period.Best Regards

Hello Box devs!I’ve written a JS script that connects to box and uploads some files. When I run it locally, the script connects to Box using the following: { "boxAppSettings": { "clientID": "value", "clientSecret": "value", "appAuth": { "publicKeyID": "value", "privateKey": "value", "passphrase": "value" } }, "enterpriseID": "value"}Locally this works and there is no problem. The issue is when the script is run by a Github Workflow for automation. In this case, no matter how I format the private key value, I get this response: Error connecting to box: secretOrPrivateKey is not valid key materialThis is the error I would get locally if the key was not being correctly loaded, due to an incorrect filepath or data type (not a string). I’ve confirmed this is not the case on github - the script finds the secret value, but using it produces this error.  I’m having a very tough time understanding why this code to move files to Box would work locally, but fail on G

Hi, I created a platform App using OAuth 2.0.  I created a website that allows a user to login to Box, then use the Box API to list all the folders that the user owns.  I use the Create folder lock endpoint to allow the user to lock/unlock a folder.  However I always get an Authorization failed when trying to lock/unlock.  The app has both read and write permissions.  Are there other settings I need to set ?  Thanks.

お疲れ様です。SalesforceからBoxApiへのアクセスを試みたのですが、エラーになってしまってアクセスできませんでした。エラーの内容：Box API 認証エラー: {"error":"invalid_grant","error_description":"Please check the 'sub' claim. The 'sub' specified is invalid."} 実際いただいた、公開鍵/秘密鍵のペアのデータを確認したところ、Enterprise IDが0になっていたので、subにUserID（番号）を入れて、box_sub_typeをuserにしましたがエラーになりました。最初はこの設定でやっていました。 ですが、エラーになっていましたので、アプリの状態も確認しました。 こちらのアプリが承認されていないからアクセスされないというのも原因としてありますでしょうか？結論として、無料ユーザの場合は外部ApiからJWT認証してデータをとることは不可能なのでしょうか？可能でしたら、やり方を教えていただけますでしょうか。以上、よろしくお願いいたします。

Hello, Team.I got a 429 Error when calling the search API.The error message is as follows.--------------------{"type":"error","status":429,"code":"rate_limit_exceeded","help_url":"http:\/\/developers.box.com\/docs\/#errors","message":"Request rate limit exceeded, please try again later","request_id":"XXXXXX"}--------------------I found information about this error at the link below.https://developer.box.com/guides/api-calls/permissions-and-errors/common-errors/https://developer.box.com/guides/api-calls/permissions-and-errors/rate-limits/ But I'm curious about this. I want to get related information such as the cumulative number of API calls per user per month.Is there a screen or way I can see this information?

I am developing using Box.V2 (5.8.0) in VB.Net. Dim downloadStreamRequest = objBoxClient.FilesManager.DownloadAsync(strBoxId)  downloadStreamRequest.Wait() When executing the above process repeatedly, an internal exception with "Request timed out" always occurs on the third attempt.Even if I restart the program and try again, it still happens on the third attempt.I am not sure what is causing this issue and am struggling to find a solution.If anyone knows how to resolve this, please let me know.

How do I programmatically move files from my app service account to user accounts? I need to distribute app-uploaded files between the users. I am using box.sdk.gen API. What is the allocated space limit for the service account with a business plus subscription?

Hello I am Using Box Search API and Also Try To Search With dll When I Give the Search Keyword “disposition” In response I Get the files Which contain “disposition” in file name and file content.But ,Here i also get files Which Contain Different Keyword “dispositive” and “disposal”Hello ,Box Team Can You explain me this ?and i also try with Exact Match using operator “disposition” but return same result.  

Hello, I’m getting 104 errors when processing webhooks for Trashed files.The error only occurs in this specific scenario - I have no issues doing similar processing of webhooks for Uploaded or Restored files. I also have tested the same API calls I’m running here from a Jupyter notebook using the same app auth with no issues. Specifically, when I receive a webhook notification that a file has been trashed, I call box.trashed_files.get_trashed_file_by_id() with the ID from the webhook message. (This is all Python with the newer box-sdk-gen library.) This call throws the 104. When I make the same call from my notebook, it returns the file info I need with no errors.

Hello,I am working on an integration between kintone and Box. When using a Box Starter account to create a shared link from kintone for internal use, I encountered the following error:{"type":"error","status":403,"code":"forbidden","context_info":{"errors":[{"reason":"invalid_parameter","name":"access","message":"Invalid value '1'. The item does not allow this access option."}]},"help_url":"http:\/\/developers.box.com\/docs\/#errors","message":"Forbidden","request_id":"h7yusxhze4s1svcd"}The issue does not occur when the access is set to 'open', but it appears when the access is set to 'company'.Could anyone help me understand the cause of this issue and how to resolve it?Thank you for your help!Best regards,Marie

I would like to clarify the API call limitations when using the CDATA JDBC driver. Specifically:1. Are there any restrictions on the number of API calls that can be made using this driver?2. It was mentioned on the Box website that Integration Partner API calls are not subject to usage charges. Can you confirm whether API calls made through the CDATA Box JDBC driver are also exempt from counting towards our client’s limit?Additionally, if API calls made through the CDATA JDBC driver are chargeable, could you provide details on:1. The cost structure once the API limit is exceeded.2. Whether the Business Plus plan (which includes 50,000 API calls per month) covers these API calls, or if they are treated separately.We understand that the final decision on API call charges rests with Box, but we would appreciate any clarification you can provide to ensure proper planning.

Is it possible to import information to documents in BOX via a metadata template using a CSV file? Or is it possible to add metadata to documents in BOX using a CSV file as custom metadata? And how to do that? What I want to do is to use a CSV file to add individual metadata to a large number of documents at once.I will need to use metadata templates from the UI and manually enter values for each attribute. Instead of doing that, I want to use a CSV file to apply them all at once and save time.Currently, a test metadata template has been created. I understand that it is possible to export metadata information.Extract metadata - Box Developer Documentation

Hi,I have multiple Co-Admin accounts, and each has created their own files and folders. However, I do not have an existing Admin account with access to all content. To resolve this, I created a new Admin account, and my goal is to have a single account that can access all files and folders across the organization.In the Admin Console → Content Management, I can see all users' data. However, when I use the Box API endpoint:https://api.box.com/2.0/folders/0/items  the API response only returns the files and folders that the Admin account has direct access to, rather than all content from all users.Is there any way to retrieve all data across all users without explicitly adding the Admin account as a collaborator to each folder?Thanks!

Is it possible to retrieve the names of all folders and files from a folder, including everything inside its subfolders, via the API?

Hello,I am trying to upload a document but am receiving error 400 (API upload did not contain a file part).I have to use an application called 4D to submit the http request using the following code…    $boundary:=Generate UUID    $crlf:="\r\n"        $bodyPartTxt:=""        $bodyPartTxt:=$bodyPartTxt+"--"+$boundary+$crlf        $bodyPartTxt:=$bodyPartTxt+"Content-Disposition: form-data; name=\"attributes\""+$crlf         $bodyPartTxt:=$bodyPartTxt+"Content-Type: application/json"+$crlf+$crlf        $bodyPartTxt:=$bodyPartTxt+$attributesText+$crlf        $bodyPartTxt:=$bodyPartTxt+"--"+$boundary+$crlf        $bodyPartTxt:=$bodyPartTxt+"Content-Disposition: form-data; name=\"file\"; filename=\""+$docName+"\""+$crlf        $bodyPartTxt:=$bodyPartTxt+"Content-Type: text/plain"+$crlf        $bodyPartTxt:=$bodyPartTxt+"Some text."+$crlf        $bodyPartTxt:=$bodyPartTxt+"--"+$boundary+"--"    ARRAY TEXT(aHeaderNames; 0)    ARRAY TEXT(aHeaderValues; 0)    APPEND TO ARRAY(aHeaderNames; "author

We are looking to interact with millions of files. We have noticed on the box site that Enterprise business plan has a limit of 100,000 API calls per month. Can this rate be increased? If so, what can it be increased to?

Hello,I have had a script working for a while and recently I started getting errors.Example:box storage-policies:assign 1111111 22222222Errorbox : Unexpected API Response [403 Forbidden | 0c905f030dd35551650c37d06ecdc251d.0c905f030dd35551650c37d06ecdc251d] forbidden - Purchase validation failed.I’m not sure why this started happening.  I’m about to go through setup again in hopes it will fix it.

Hi Everyone,Is there any behavior change in Get Token functionality recently? We are not able to get any token from Box.Regards

Hi,I’ve been going around in circles for the last hour and a half trying to figure out how to use a Limited Access App on a free account. Is this even possible? I’ve seen various posts from a year ago saying this feature had been “temporally” disabled, is it still “temporally” disabled? I’m up to the point of trying to authorize the app but none of the menus as described in this tutorial are visible for me. Cheers,Michael

We want to avoid getting charged when moving some files from box to sharepoint. apparently there is the API issue where we have to manually download one file by one file vs using boxs ability to download and move but we wanted to make sure we knew the exact difference and options before we spent hours moving files for an important peoject.