SDKs and Tools

I can’t change redirect urls, all action fail, can’t add, can’t remove, can’t edit ​​​Box Developers Consolewith browser request Box cfg RequestResponse Body 

Hi,I’m trying to use BOX CLI version @box/cli/4.10.1 linux-x64 node-v24.21.0in headless mode.I can access box using box cli and validating through a local browserIf I try headless I get an error.These are the steps.box login --code? How would you like to authenticate?[1] Log-in as a Box user (OAuth)[2] Use a Box Platform App[q] Quit? Enter 1, 2, or q: 1I paste in the URL given into a broswer on another computer and click Grant Access. This redirects to a localhost IP which includes the code and state. Similar to this http://localhost:3000/callback?state=12345678901234567890123456789012&code=ABCDEFGHIJKLMNOPQRSTUVWXYZABCDEFI enter the state and the code into the box cli  and get Login failed: Failed to exchange auth code for tokens.Can anyone help?

Does anyone know where to get actual guidance/help in accessing Box with the .net sdk.  It looks like all of the developers seeking for assistance on this site never gets resolved. Thanks in advance.

Can anyone please help with accessing box from vb.net.  I am having a heck of a time figuring it out after researching for days. Thanks

As the developer of voidtools - Everything, I would like to know why the process Everything.exe is blocked from indexing the box folder. If I rename my process, indexing works fine.

We need to rotate the OAuth client secret for an existing production mobile application while older versions remain installed.Could you clarify:1. Can multiple client secrets remain active during migration?2. Does generating a new secret revoke the existing secret?3. Will existing access and refresh tokens remain valid?4. Can existing refresh tokens be used with the new secret?5. Will users need to authenticate again?6. What zero-downtime migration process do you recommend?7. Does rotation require another application review?8. When is it safe to revoke the previous secret?

Using the Box Java SDK v10:During a high volume of uploads I occasionally see a “Stream already closed” exception.  This appears to be caused by a retry attempt on a 429 response from the original upload request.  It appears that the Box SDK attempts to retry the upload without resetting the stream so the stream has been read. I have written a custom RetryStrategy that resets the stream before a retry and this fixes the issue.  It seems like this should be part of the retry code or is this the expected way to handle retry attempts for uploads?

Using Box Java SDK v10:During a high volume of uploads (1000+ files), I occasionally receive a 409 (name_temporarily_reserved) error. When verifying the upload, the file that threw the exception DOES exists in the folder and appears to be uploaded successfully. It looks like the request is receiving a 429 response but retrying too fast (before the original upload is cleaned up)?  Seems like an Box issue but I’m not sure how to handle this scenario in my code.    

I’d like to report that it’s impossible to authorize third party app using Android WebView. All Android apps seem to be affected by that unless they use external browser or Box app for auth. Regular flow should be: Login page → enter credentials → Grant access pageCurrent broken flow is: Login page → enter credentials → Blank page and no authorization code returned I was able to capture error log from js console, I guess this prevents the grant page from showingmain-preload.f0bdd4e4aa.js:69 Uncaught (in promise) TypeError: Cannot read properties of null (reading 'getItem') at 91049 (main-preload.f0bdd4e4aa.js:69:37140) at y (runtime.d0fed8b796.js:2:146219) at 60972 (main-preload.f0bdd4e4aa.js:69:9428) at y (runtime.d0fed8b796.js:2:146219) at 31988 (main-preload.f0bdd4e4aa.js:8:41008) at y (runtime.d0fed8b796.js:2:146219) at 38736 (main.89da41b464.js:1:213) at y (runtime.d0fed8b796.js:2:146219)91049 @ main-preload.f0bdd4e4aa.js:69y @ runtime.d0fed8b796.js:260972

Hi,I need to restricting folder renaming for user after creation. Is there any SDK API available to call or any other option.Thanks

i have a shared Folder created by different enterprise.i have created JWT app in my own account and trying to access this folder.Facing 404 and not able to access this shared folder. Any solutions?

Hello, we are using the box content previewer as well as cookiebot for our application. Recently, the content previewer stopped working when a user rejected not necessary cookies. Interestingly the file to be previewed is still loaded and we can even see it in the dom structure:The bp-is-invisible class never gets removed though. If we remove it manually, we can see the file preview on the page. After some time we end up in this stateWe are currently using version 2.106.0. With approved cookie consent everything works fine.We also tried different browser and machines - all with the same problem.The file type also does not seem to matter as we have the same problem for pds.

Hi,I’m trying to find a way to restrict a range of files.Using a down scoped token like this: List<String> scopes = new ArrayList<String>();scopes.add("item_preview");scopes.add("item_download");List<TokenRestriction> restrictions = new ArrayList<>();for (String id : fileIds) { String resourceUrl = "https://api.box.com/2.0/files/" + id; restrictions.add(new TokenRestriction(scopes, resourceUrl));}ScopedToken downscopedToken = api.getDownscopedToken(scopes, null, null, restrictions);boxToken = downscopedToken.getAccessToken();I can’t find the class of the TokenRestriction.import com.box.sdk.TokenRestriction;   is not available.I’m using version 5.9 of the java SDK.Is there a solution use TokenRestriction or other way to restrict a list of files?Kind regards,Marcel​​​​​​​

Hi, I need to restricting folder renaming for user after creation. Is there any SDK API available to call or any other option.ThanksSampathkumar s

Hi Team,I am currently investigating the best security practice for the Box Java SDK into our enterprise application and have a question regarding private key handling and PKCS standards.We are evaluating secure key management approaches and would like to understand whether the Box Java SDK supports authentication using private keys in standard PKCS formats, specifically: PKCS#1 (RSA private key format) PKCS#8 (Private-Key Information Syntax Specification) More specifically: Does the Box Java SDK natively support loading private keys in PKCS#1 or PKCS#8 format for JWT-based authentication? If PKCS#1 is not directly supported, is PKCS#8 required? Does the SDK support encrypted PKCS#8 keys? Are there any recommended best practices from Box for handling private keys in Java (e.g., conversion requirements, keystore usage, or specific security providers)? We are particularly concerned about enterprise-grade security compliance and compatibility with standard Java security libraries.

Having a problem when I try to open MSOffice files through the web application and BoxTools. I can open files in Office for Web but when I try Office for Desktop I get this message:  “This action couldn’t be performed because Office doesn’t recognize the command it was given”I can open the files using Windows File Explorer through Box Drive. Any suggestions or ideas?   

Application that persists User Access and Refresh token works with .Net SDK v10.1.0, fails with :"The given key 'Retry-After' was not present in the dictionary" error at System.ThrowHelper.ThrowKeyNotFoundException[T](T key)   at System.Collections.Generic.Dictionary`2.get_Item(TKey key)   at Box.Sdk.Gen.BoxRetryStrategy.RetryAfter(FetchOptions fetchOptions, FetchResponse fetchResponse, Int32 attemptNumber)   at Box.Sdk.Gen.Internal.BoxNetworkClient.<Box-Sdk-Gen-INetworkClient-FetchAsync>d__3.MoveNext()   at Box.Sdk.Gen.Managers.FoldersManager.<GetFolderByIdAsync>d__8.MoveNext()   at Program.<<Main>$>d__0.MoveNext() in C:\Users\xxxxx\source\repos\BoxTestTokenStore\Program.cs:line 28 A sample console test app code fragments to recreate: Simple Model for token persistence:namespace BoxTestTokenStore{    internal class TokenData    {        public string AccessToken { get; set; } = string.Empty;        public string RefreshToken { get; set; } = string.Empty;    }}C

This is an old question from stackoverlow which uses boxselect aka box file picker popup. The usage is very simple and straight forward but very old. But when i went through the dev docs none of them showed how to use the box file picker only using client id. Below example shows only via access token. In integration apps page it mentions “strongly recommend that you do not send it to an end-user client for both primary and secondary access token”https://developer.box.com/guides/embed/ui-elements/picker/#sample-html if I use the client id in above example, no files are loaded. Now how do i integrate box in my web app. 

Our in-house service implements a Python SDK for creating folders and uploading files to BOX. User inputs consist of the target BOX folder path and the file to be uploaded. We execute the Python SDK using the "API execution account" provided by the user and upload the file to BOX. The processing logic works as follows: when the input folder path is "/Test/User", we first check if a "Test" folder exists at the root of the "API execution account". We then verify if a "User" folder exists directly under "Test", and if it does, we upload the file to that "User" folder. If "User" does not exist, we create it directly under "Test" and then upload the file. For example, if both "Account1" and "Account2" create folders named "Test" and grant collaboration access to the "API execution account", the root of the "API execution account" will display two "Test" folders. In this scenario, when the input folder path is "/Test/User", the "API execution account" cannot determine which "Test" folder to

Could you please provide guidance on BoxSDK?When retrieving folder IDs using BoxSDK, we are encountering an issue where multiple folder IDs are returned even though only one folder should exist.The following method is being looped, and more than 200 folder IDs are being obtained.Since we have specified modified_at for sorting, we suspect that this issue occurs because the timing of folder updates overlaps with the timing of the loop that retrieves folder IDs. Is this assumption correct?Also, could you please advise on how to avoid this issue?method　　：　BoxClient.SearchManager.QueryAsync()parameter　：　limit:200,sort: "modified_at",offset:[1+200*n]

Hello all,I’m integrating Box in one iOS app using BoxSdkGen for swift (box-swift-sdk-gen).I have successfully implemented authentication and the upload - both small files and chunked big files, however it seems I can’t find anything in the docs or exploring the source to give me a way to track the upload progress. So my question is is there a way I'm missing to do that or any other workaround - probably implementing my own logic based on swift’s network tasks and so on.Thanks 

I have install boxsdk python package by ‘pip install boxsdk’. But Still got error like ModuleNotFoundError: No module named 'boxsdk'Python 3.10.13pip 23.0.1 from /Users/elei/.pyenv/versions/3.10.13/lib/python3.10/site-packages/pip (python 3.10)Successfully installed boxsdk-10.0.1 This is a python example:from boxsdk import OAuth2, Client oauth = OAuth2(    client_id='YOUR_CLIENT_ID',    client_secret='YOUR_CLIENT_SECRET',    store_tokens=your_store_tokens_callback_method,    access_token=persisted_access_token,    refresh_token=persisted_refresh_token,)client = Client(oauth)

Can somebody help me what’s wrong with my below code? I am getting error: PS C:\Script\UploadToBox> python UploadtoBox2.pyTraceback (most recent call last): File "C:\Script\UploadToBox\UploadtoBox2.py", line 36, in <module> main() File "C:\Script\UploadToBox\UploadtoBox2.py", line 31, in main folder = client.folders.get_folder_by_id(folder_id) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "C:\Users\sajkumar\AppData\Roaming\Python\Python312\site-packages\box_sdk_gen\managers\folders.py", line 425, in get_folder_by_id response: FetchResponse = self.network_session.network_client.fetch( ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "C:\Users\sajkumar\AppData\Roaming\Python\Python312\site-packages\box_sdk_gen\networking\box_network_client.py", line 85, in fetch request: APIRequest = self._prepare_request( ^^^^^^^^^^^^^^^^^^^^^^ File "C:\Users\sajkumar\AppData\Roaming\Python\Python312\site-packages\box_sdk_gen\networking\box_network_client.py", line 148, in _prepare_request hea

I having an issue connecting  When ever i call boxJWT.AdminTokenAsync().GetAwaiter().GetResult() I get this...Box.V2.Exceptions.BoxAPIException: 'The API returned an error [BadRequest | .029b2b393ff5677f7723883563acadb4] unauthorized_client - This app is not configured properly. No public key(s) added.'

I updated a Python environment this afternoon and my code using boxsdk stopped passing validation. The environment claiming that “boxsdk is not present,” despite it being installed. I then noted the module version had jumped from 3.14.0 to 10.0.0. I reverted to 3.14.0 and the code again passed validation. Suspicious?