Box Platform

Mastering the art of asking questions on developer forums can make all the difference in getting the answers quickly. Providing all necessary information will reduce the time of getting a satisfactory solutions from days to hours. Let’s look into some best practices for asking great questions related to software issues. This is a companion discussion topic for the original entry at https://medium.com/box-developer-blog/how-to-write-great-developer-forum-questions-and-get-lightning-fast-answers-5d882b0cb5f0?source=rss----a995c24848a3---4

Hi all, I was wondering whether the Events API call has the same rate limits as described here. Due to its potential huge-size in enterprise environments, i wondered if it really falls under the 100K per month for an enterprise for example. If an enterprise with a lot of users has a SIEM tool and a few more integrated tools, this can be reached easily. Also - how the rate limiting of a client-credentials authenticated app is measured? is the app considered as a “user”? Another question i had, is whether i can filter out events based on their type (for example filter out login events etc). Thanks a lot.

Hi Team, I am working on an app integration to poll and parse Enterprise Event Stream API. I found the documentation for the list of events at the following link: https://developer.box.com/guides/events/enterprise-events/for-enterprise/#event-types 👍 Just wondering if there is documentation that explains the JSON response document for each event as it seems to vary a little based on event - example: CONTENT_ACCESS/LOCK/UNLOCK/EDIT has additional_details field. Thanks Andy

Hello all, I am using the download file API with a downscoped token to allow the user to download files directly from their browser as part of an application where box is hidden from the user (https://developer.box.com/guides/downloads/in-browser/). This works fine, except that the response includes a Content-Disposition header with the value set to “attachment;filename=…”. Ideally, I would want a response with Content-Disposition set to “inline;filename=…” so that the default behavior for browsers would be to preview the file rather than downloading it. So my questions: Is there a way to force box to return an inline disposition? If not, is there another endpoint/workaround I can use to achieve this (without recreating a preview system myself)?

The Box API supports a variety of users, ranging from real employees logging in with their managed user account, to applications using service accounts to drive powerful automation workflows. This is a companion discussion topic for the original entry at https://medium.com/box-developer-blog/box-python-next-gen-sdk-users-8735f41516bf?source=rss----a995c24848a3---4

{‘error’: ‘invalid_grant’, ‘error_description’: ‘Grant credentials are invalid’} getting error while using ccgAuth() with cient id, client secret and user. please help…

I am trying to post comments on files in box using rest api callouts.It is asking for auth token.I have already authorized the app in box.I am not sure how it will work.if anybody has a working example in postman etc.

Hello everyone. I created a custom app in september 2019 and I have been using it since them to automate some of my monthly tasks. It is able to upload and retrieve files data as I need, but not to list neither delete due a low regularity of usage of these functions, mainly because I’ve used to manage and delete old files using web Content Manager. Unfortunately I am not able to do it anymore. If I understood it well, now the feature is restrict to plans upper to Business Plus. I got the point to restrict users management, but wouldn’t it be bad for Custom Apps that haven’t a full self-management (CRUD) files feature? We must consider that some apps does not even have an UI, some finished and delivered apps to final users could not implement a full management, and even there is a needing to write more code and spend time to fix a issue that can’t be solved due a policy plan change Thanks.

Hi, I have a requirement where, once an object is updated from an external system, a process is triggered that will fetch all the files from the updated object and save the files into a specified box folder into another object that is newly created. I have used the Box toolkit method - createFileFromAttachment() to add the files to the new folder. The method is also getting executed in the future context and callouts are allowed. Yet the process throws an authentication error that starts with: "boxtoolkitToolkit:[AUTH_WRAPPER_PREPARE_FAIL_MESSAGE=Unable to use default credentials to make a callout to Box (maybe this is in a trigger, constructor, or after a DML statement):, authWrapper=BoxAuthWrapper:[adminSettings=box__BoxUser_Settings__c:{}, " Once the process gets executed, if multiple files need to be transferred, only one file gets transferred to the destination folder, and the other files are stopped after the same error is encountered. I’m implementing the requirement in Salesfor

Welcome to the core of technology’s evolution, where the essential role of product management takes center stage in the development journey. In this exploration of Box’s developer platform, as a Senior Product Manager for Box Developer Platform I’d like to demystify the practical significance of product management, particularly in the critical discovery phase. Join me as I pull back the curtain, revealing the behind-the-scenes orchestration of building the Box developer Platform that seamlessly aligns with the evolving needs of our users. This is a companion discussion topic for the original entry at https://medium.com/box-developer-blog/box-developer-focused-product-management-approach-0aefd8bfd8d3?source=rss----a995c24848a3---4

In this article we are going to explore how to electronically sign a structured document using the Box Platform. This is a companion discussion topic for the original entry at https://medium.com/box-developer-blog/working-with-box-sign-structured-documents-ec629628ea5b?source=rss----a995c24848a3---4

Hi Team, What will be endpoint of API if subdomain enabled. Example - Default URL - https://api.box.com/2.0/events If enabled subdomain can we use API with default URL or do we need to use subdomain?

Api Path : https://{{api.box.com}}/2.0/sign_requests Request Body: { "is_document_preparation_needed": true, "parent_folder": { "id": "242033790140", "type": "folder" }, "name": "new file", "days_valid": 2, "source_files": [ { "id": "1402075677437", "type": "file" } ], "signature_color": "blue", "signers": [ { "email": "abc@gmail.com", "role": "final_copy_reader" } ] } Response : { "type": "error", "code": "bad_request", "status": 400, "message": "Bad request", "help_url": "https://developer.box.com/guides/api-calls/permissions-and-errors/common-errors/", "request_id": "0161f8a960ede1346f50bfdc34b75156f", "context_info": { "errors": [ { "name": "source_files", "message": "Enter a valid file.", "reason": "invalid_parameter" } ] } }

Hi folks, I often use the Box Postman Collection to interact directly with the Box API, so I can troubleshoot my code, or just to see what an actual response looks like. The existing collection only automates the access token refresh for OAuth 2.0, and it is fairly complex to change it to support CCG or JWT, even though a lot of times I wish I had that possibility, so I could work directly with the service accounts. Having said that I wanted to gauge the community interest in supporting access token refresh for CCG and JWT, or anything in between: Developer Token (non refreshable) OAuth 2.0 Client Credential Grant (CCG) JSON Web Token (JWT) Other (leave comment below) All of the above 0 voters Let us know! Cheers

Regarding the plan mentioned in the https://www.box.com/pricing/business, we have below queries. Will the “\events” API availability change as the plan changes ? List Of Event type will change as per the Plan ? Will Enterprise events type include user events type ? What minimum paid account required to access the Enterprise event via “\events” API?

Hello everyone, I’m facing an issue with the speed of the responses I’m receiving from the API. I’m making 100 parallel calls from one user and repeating this process 10 times, resulting in less than 1000 calls per minute. Here’s the code snippet that I’m using: _boxClientCredentialsGrant = new BoxCCGAuth(boxConfig); _userclient = _boxClientCredentialsGrant.UserClient(_testUserId); // This part in paralel 100 times // iterate 10 times var result = await _userclient.UsersManager.GetCurrentUserInformationAsync(); The blue line is the performance in average pro call in this scenario I’m wondering if there are additional optimizations that I can implement to receive faster responses to these API calls and process them more quickly. Has anyone had experience with performance optimization? I’m questioning whether the current performance is acceptable or if there are further optimizations I can make on my end. For example, should I consider using an HTTP client instead of the SDK or any o

Hi Team, We are constantly getting below error when our automated jenkins jobs trying to upload files on box folder: access_token = response.json()[‘access_token’] KeyError: ‘access_token’ The same jobs are working fine on staging server with same configurations means files are being uploaded to box folders using the same app config on our staging server. The issue we are facing is in production jenkins jobs, it was working fine till 24th dec but now continue to fails generating access token. We are currently using JWT without SDK approach. Looking forward for some help. Thanks, Shailendra J

Getting below error in /users API Request - curl -i -X GET “https://api.box.com/2.0/users” \ -H “authorization: Bearer <ACCESS_TOKEN>” Response - { “type”: “error”, “status”: 403, “code”: “access_denied_insufficient_permissions”, “help_url”: “http://developers.box.com/docs/#errors”, “message”: “Access denied - insufficient permission”, “request_id”: “qcyqnkhl1oprc6uk” } What permission or paid account needed to access above API ?

It’s end of a year and it’s summary time! I invite you to insights from Box Developer Relations team. We are highly dedicated to improving the developer experience of Box Platform and combine our complementary skills to serve our developer community. This is a companion discussion topic for the original entry at https://medium.com/box-developer-blog/a-year-in-box-developer-relations-team-4bbbb4105790?source=rss----a995c24848a3---4

Tasks allow users to request collaborators on a document to review it or complete a piece of work, and can be used by developers to create document-centric workflows. This is a companion discussion topic for the original entry at https://medium.com/box-developer-blog/box-python-next-gen-sdk-working-with-tasks-b3727349115b?source=rss----a995c24848a3---4

If there’s one lesson imprinted deeply from time at Kiva, it was that the smaller the footprint of the technical systems the easier everything else would flow in the operations of the business. With that in mind, Doc2Doc’s technical platform was built to be minimal, efficient, and cost effective. Our application operational footprint is low and can be handled by one virtual machine along with creative use of 3rd party SaaS systems, a key one of those systems being Box. This is a companion discussion topic for the original entry at https://medium.com/box-developer-blog/how-doc2doc-builds-biz-ops-on-box-9466ac3a505e?source=rss----a995c24848a3---4

Some of our users are getting flagged for going over their allotted API calls per month. We’re aware that this is part of the user’s Box’s billing plan. This is a pretty inconvenient limit. Our use case requires us to do full periodic syncs, where each sync making: ~2 API calls per folder, 1 to retrieve its children and 1 to retrieve its collaborations ~1 API call per file to retrieve its collaborations We do use webhooks to reduce how often we make these calls, but it still doesn’t guarantee control as a developer, especially if a user has thousands of files. To remediate: Are there any API calls that can pull the latest changes to folders & files, instead of us needing to do full periodic syncs? Or is there any other recommended practice so that we can reduce the # of API calls we need to make. Is there a programmatic way to access the user’s monthly limit? Does this limit apply to an individual user or the entire account of users? Any plans to remove this limit?

Box TS SDK is gaining momentum with plenty of new users! In my last post I presented a simple example how to start using the SDK with a static HTML page. Now, let’s take it to the next level and incorporate the SDK to a React based app. This is a companion discussion topic for the original entry at https://medium.com/box-developer-blog/use-box-ts-sdk-in-react-projects-5f029cccda0?source=rss----a995c24848a3---4

Dear Forum, For several months, I’ve been using Box drive for sync’ign with local folders - with no issue. Since last week, I can still login to the online box, but get an SSL error when trying to connect to the Box drive. I checked with my IT team (no change on that side), tried resetting password, no effect. I uninstalled/re-installed, but get to the same point. Coudl it be comign from a recent updates? Any ideas on how to address it? Thanks! 2023-12-16 19:17:49.975 14628 INFO CompleteAuthenticati network_layer Got a SSLError so calling refresh_proxy_settings: BoxHTTPSConnectionPool(host=‘api.box.com’, port=443): Max retries exceeded with url: /oauth2/token (Caused by SSLError(SSLCertVerificationError(1, ‘[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate signature failure (_ssl.c:997)’)))