Box for Developers

Is it possible to configure the non-private custom URL in Shared Link Settings using the BOX API? I want to automate the process of linking files from local storage to BOX and setting a non-private custom URL using the BOX API. Since I couldn’t find information in the API reference, I would appreciate your guidance.

Hi there, I’m trying to download files created by someone within the same organization with Python SDK, but I get [403] access_denied_insufficient_permissions I can get file’s information (file id and name) with client.file(file_id).get(), but I get the above error when I try client.file(file_id).content(). Here’s my app’s status Authentication with Client Credentials Grant (already authorized) Both reading/writing files are allowed The service account has the access to the folder as Editor. Could anybody give me advice on the cause of this error? Thank you.

In the ever-evolving landscape of enterprise documents, metadata plays a pivotal role in how you organize, discover, and extract value from your unstructured content. This is a companion discussion topic for the original entry at https://medium.com/box-developer-blog/box-ai-driven-metadata-extraction-4af9f52feb83?source=rss----a995c24848a3---4

I’m running an API call to /files/[fileid]/content with just the file id in the URL and the access token in the header. It says the api call is completing successfully, but it does not actually prompt a download in the browser. It worked a while back, but I’m not sure what I changed causing it not to work any more. Any tips on what I can check would be helpful. Thanks in advance for any assistance.

When attempting to extract tracking codes for a particular user via Python script, I am receiving an AttributeError as follows: ‘User’ object has no attribute ‘tracking_codes’. Based on the documentation I’ve read, I should be able to pull tracking codes using the ‘tracking_codes’ attribute. Any input on addressing this issue would be greatly appreciate.

I have created a webhook as part of an application in Box. The application has a service account. The service account has all scopes possible (just make sure I didn’t miss anything). The service account is a co-owner of the folder that the webhook monitors. However, when I use the code examples from here and here I am unable to see the webhook (I receive a 404). Is this a permissions issue or am I doing something wrong? I have tried impersonating as the owner of the folder but I get a 403 response. import boxsdk import json from boxsdk import JWTAuth from boxsdk import Client def build_client(): auth = JWTAuth.from_settings_file('box_settings.json') client = Client(auth) return client client = build_client() webhooks = client.get_webhooks()

Hi, I can query for various thumbnail representations of an uploaded image, but is there any endpoint/query that will return the original dimensions of the file? Thanks

I want to give users of my FlutterFlow mobile/web app full access to a dynamic folder path from within my app, without the user knowing they are in Box. This means a custom app using JWT authentication using key pairs and the config.json for authentication: https://developer.box.com/guides/authentication/jwt/without-sdk/ However, FlutterFlow does not have native support for SDKs, python, or any of the languages supported in the documentation. I was wondering if anyone else has any experience using Box.com integrations with Flutter/FlutterFlow apps and if so how they did it.

While creating application,clicked the “Generate Public/Private Keypair” & get the JSON file. From the JSON file,we have copied the content from “privateKey” & create new file (Config.PEM) and updated the “privateKey” values. the run the below code, getting an error. from boxsdk import JWTAuth from boxsdk import Client auth = JWTAuth( client_id=‘xxxxxx’, client_secret=‘xxxxxxxx’, enterprise_id=‘0’, jwt_key_id=‘xxxxxx’, rsa_private_key_file_sys_path=‘C:\Box\config.PEM’, rsa_private_key_passphrase=‘xxxxxxxxxxx’, ) access_token = auth.authenticate_instance() client = Client(auth) Issue : Could not deserialize key data. The data may be in an incorrect format, it may be encrypted with an unsupported algorithm, or it may be an unsupported key type C:\Program Files (x86)\Python\Python310>python.exe “C:\Users\arulap\OneDrive - Symphony Summit\Working\Official\Dev\Box\summitorchestration@gmail.com\JWTAuth_Test.py” Traceback (most recent call last): File “C:\Users\arulap\OneDrive - Sy

In today’s digital landscape, efficient file management is crucial for businesses. With the exponential volume of data being generated, it’s essential to have streamlined processes in place for organizing and disposing of outdated files and folders. This is a companion discussion topic for the original entry at https://medium.com/box-developer-blog/digital-cleanup-day-with-box-api-a751b2e0fd4d?source=rss----a995c24848a3---4

Hi there. I’m looking for a way to download a watermarked file using the API with a viewer user. I saw the platform docs mentioning that when using a Viewer user to download a watermarked file, you need to first open the file for preview and then the download becomes available. How can I do the same thing using the API instead of the UI?

Our app is currently under review. Even though it is in the review process, is it okay for our customers to use it? Are there any restrictions, such as a maximum number of connections?

Hi, Is it possible to Downscope the Box token with java sdk for one folder only if that user is collaborator on multiple folders? e.g. root folder → folder 1 → folder x | | → folder y → more child folders and files | | → folder z → more child folders and files | → folder 2 → folder a | → folder b → more child folders and files (in case format messed up. folder x,y and z are the child folder of folder 1. folder a and b is child folder of folder 2. Folder 1 and 2 is child folders of root folder.) If user “ABC” is collaborated on “folder y”, “folder z” and “folder b”, can we downscope token to show only “folder y”, and “folder z” and not “folder b” on the box ui element with the existing role? Say user “ABC” has “editor” role on “folder y”, and “folder z”. Thanks.

Hi, We have issue where we want to get all the collaborators for file, however, we are not getting all the collaborators. If I call list folder collaboration Api, I am getting all the collaborators whoever have access to that file. If it is waterfall permission model, I should have all the collaborations from the file endpoint, if that file under the parent folder. So why I am not getting all the collaborators when I use list file collaboration API? ref: - List file collaborations - API Reference - Box Developer Documentation

Hi, we are using java1.8 version and trying to get the Token using Java SDK , but we got the below exception. developer.box.com Install Java SDK - Box Developer Documentation Explore the Box APIs and SDKs to use for app development, API documentation, developer support resources, and access the Box Developer Console above blog suggeste all the jar’s added. Sample Code: Path configPath = Paths.get(“config.json”); try (BufferedReader reader = Files.newBufferedReader(configPath, Charset.forName(“UTF-8”))) { BoxConfig boxConfig = BoxConfig.readFrom(reader); BoxDeveloperEditionAPIConnection client = BoxDeveloperEditionAPIConnection.getAppEnterpriseConnection(boxConfig); //Not able to get this token System.out.println(client.getAccessToken()); }catch(Exception e){ System.out.println(“Error =”+e.getMessage()); } This below exception, we are getting recently. Exception in thread “main” com.box.sdk.BoxAPIException: Error parsing PKC

Box Developer Relations has some exciting news to share — free developer accounts are BACK! This is a companion discussion topic for the original entry at https://medium.com/box-developer-blog/announcing-the-return-of-free-developer-accounts-97c8b9965845?source=rss----a995c24848a3---4

We have several upcoming opportunities for you to engage with the Box Developer Relations team and learn about Box Platform! Below is a round up of the currently scheduled events, but stay tuned — we have even more coming soon. This is a companion discussion topic for the original entry at https://medium.com/box-developer-blog/box-platform-upcoming-events-09adf5d04151?source=rss----a995c24848a3---4

I have an intermittent problem where the Python Box SDK is raising the following exception when generating a down scoped token. The code works most of the time but occasionally will stop working for a few minutes. Do the JWT tokens need to be expired or released? The code is being run from an AWS Lambda and the downscoped token only needs to be used once. Is there API rate limit. I don’t think I’m near it usage would be less then 30 an hour but maybe multiple in quick succession. Our Box Account is Business Plus. boxsdk.exception.BoxAPIException: Message: The subject_token provided is invalid The code that is generating the error is in the used to create a downscoped token that can be used by a Box Preview embed: config = JWTAuth.from_settings_file('cert/abcd_1234_config.json') client = Client(config) target_file = client.file(file_id=file_id) token_info = client.downscope_token(['item_preview', 'annotation_view_all', 'annotation_edit'], target_file) Full Error Trace Traceback (most

Hi, I’d like to make a request to have the dll in Nuget package signed by Box. The package itself is signed, but Box.V2.dll. Microsoft is introducing Smart App Control and having dlls signed gets more important.

Hello developers,We are thrilled to announce the release of our new dedicated resource page Working with the Box Sign API. This comprehensive guide is designed to help you seamlessly integrate Box Sign into your applications, providing you with the tools and knowledge to make the most out of this powerful e-signature solution. This is a companion discussion topic for the original entry at https://medium.com/box-developer-blog/announcing-the-release-of-box-sign-dedicated-resource-page-for-developers-9f910c2f795d?source=rss----a995c24848a3---4

Dear Forum, When running BoxAPI through an internal proxy, I am having trouble because [EE certificate key too weak] SSLError has occurred. Internal proxy information is set in Python-BoxSDK, Skipping certificate validation will prevent SSLError from occurring. Please let me know the cause of the above problem and how to resolve it. My personal opinion is that the security strength of the certificate sent from the internal proxy is too weak. 【SSL Error】 requests.exceptions.SSLError: HTTPSConnectionPool(host=‘api.box.com’, port=443): Max retries exceeded with url: /oauth2/token (Caused by SSLError(SSLCertVerificationError(1, ‘[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: EE certificate key too weak (_ssl.c:997)’)))

Hello there I am developing an integration for a customer that uses BOX. I have created my own box account to develop and test the integration. Today i wanted to test it out on the customers enterprise. They could add and authorize the app easily via the client id. However the app service account needs to be added as a collaborator to the folder it needs to see. This is where we ran into trouble, as BOX refused to add the service account since it was from a different enterprise. Is it possible to add a serviceaccount from a different enterprise at all? I am going at this the wrong way or is there some trick that i have missed. Best regards Malte

Watermarking serves as a deterrent to unauthorized sharing of content. When a file or folder is watermarked, the email (or ip address) and a time stamp of the user, are added to the preview of the content. This is a companion discussion topic for the original entry at https://medium.com/box-developer-blog/box-python-next-gen-sdk-watermarks-0def26fc34ef?source=rss----a995c24848a3---4

Hi, I’m a little stuck on this. We use box for our storage for clients (organisations) and with each client, we open a new folder. The functionality I’m looking for is for an internal admin webapp. When a user logs in to the admin app, I want to retrieve a service account token so then when they create an organisation, it triggers a new folder created in the enterprise account. All the client_ids etc are in the .env and in the dev console, the custom app is fine. Here is a copy of my server.js: const BoxSDK = require('box-node-sdk'); // Box configuration app.get('/api/box-access-token', cors(corsOptions), async (req, res) => { const sdkConfig = { boxAppSettings: { clientID: process.env.BOX_CLIENT_ID, clientSecret: process.env.BOX_CLIENT_SECRET, }, enterpriseID: process.env.ENTERPRISE_ID, } const sdk = BoxSDK.getPreconfiguredInstance(sdkConfig) const client = sdk.getAnonymousClient(); // Extract the necessary information con

Hello , do we have a sample to get the refresh token in Python Gen SDK ? and those any rule to using refresh token ? like i am a Dev account can we using the refresh token ? and where can get the authorization code ? if Enterprise account do we need refresh token ? Many thanks !