SDKs and Tools

Hi Team,I am currently investigating the best security practice for the Box Java SDK into our enterprise application and have a question regarding private key handling and PKCS standards.We are evaluating secure key management approaches and would like to understand whether the Box Java SDK supports authentication using private keys in standard PKCS formats, specifically: PKCS#1 (RSA private key format) PKCS#8 (Private-Key Information Syntax Specification) More specifically: Does the Box Java SDK natively support loading private keys in PKCS#1 or PKCS#8 format for JWT-based authentication? If PKCS#1 is not directly supported, is PKCS#8 required? Does the SDK support encrypted PKCS#8 keys? Are there any recommended best practices from Box for handling private keys in Java (e.g., conversion requirements, keystore

Having a problem when I try to open MSOffice files through the web application and BoxTools. I can open files in Office for Web but when I try Office for Desktop I get this message:  “This action couldn’t be performed because Office doesn’t recognize the command it was given”I can open the files using Windows File Explorer through Box Drive. Any suggestions or ideas?   

Application that persists User Access and Refresh token works with .Net SDK v10.1.0, fails with :"The given key 'Retry-After' was not present in the dictionary" error at System.ThrowHelper.ThrowKeyNotFoundException[T](T key)   at System.Collections.Generic.Dictionary`2.get_Item(TKey key)   at Box.Sdk.Gen.BoxRetryStrategy.RetryAfter(FetchOptions fetchOptions, FetchResponse fetchResponse, Int32 attemptNumber)   at Box.Sdk.Gen.Internal.BoxNetworkClient.<Box-Sdk-Gen-INetworkClient-FetchAsync>d__3.MoveNext()   at Box.Sdk.Gen.Managers.FoldersManager.<GetFolderByIdAsync>d__8.MoveNext()   at Program.<<Main>$>d__0.MoveNext() in C:\Users\xxxxx\source\repos\BoxTestTokenStore\Program.cs:line 28 A sample console test app code fragments to recreate: Simple Model for token persistence:namespace BoxTestTokenStore{    internal class TokenData    {        public string Access

This is an old question from stackoverlow which uses boxselect aka box file picker popup. The usage is very simple and straight forward but very old. But when i went through the dev docs none of them showed how to use the box file picker only using client id. Below example shows only via access token. In integration apps page it mentions “strongly recommend that you do not send it to an end-user client for both primary and secondary access token”https://developer.box.com/guides/embed/ui-elements/picker/#sample-html if I use the client id in above example, no files are loaded. Now how do i integrate box in my web app. 

Our in-house service implements a Python SDK for creating folders and uploading files to BOX. User inputs consist of the target BOX folder path and the file to be uploaded. We execute the Python SDK using the "API execution account" provided by the user and upload the file to BOX. The processing logic works as follows: when the input folder path is "/Test/User", we first check if a "Test" folder exists at the root of the "API execution account". We then verify if a "User" folder exists directly under "Test", and if it does, we upload the file to that "User" folder. If "User" does not exist, we create it directly under "Test" and then upload the file. For example, if both "Account1" and "Account2" create folders named "Test" and grant collaboration access to the "API execution account", the root of the "API execution account" will display two "Test" folders. In this scenario, when the input folder path is "/Test/User", the "API execution account" cannot determine which "Test" folder

Could you please provide guidance on BoxSDK?When retrieving folder IDs using BoxSDK, we are encountering an issue where multiple folder IDs are returned even though only one folder should exist.The following method is being looped, and more than 200 folder IDs are being obtained.Since we have specified modified_at for sorting, we suspect that this issue occurs because the timing of folder updates overlaps with the timing of the loop that retrieves folder IDs. Is this assumption correct?Also, could you please advise on how to avoid this issue?method　　：　BoxClient.SearchManager.QueryAsync()parameter　：　limit:200,sort: "modified_at",offset:[1+200*n]

Hello all,I’m integrating Box in one iOS app using BoxSdkGen for swift (box-swift-sdk-gen).I have successfully implemented authentication and the upload - both small files and chunked big files, however it seems I can’t find anything in the docs or exploring the source to give me a way to track the upload progress. So my question is is there a way I'm missing to do that or any other workaround - probably implementing my own logic based on swift’s network tasks and so on.Thanks 

I have install boxsdk python package by ‘pip install boxsdk’. But Still got error like ModuleNotFoundError: No module named 'boxsdk'Python 3.10.13pip 23.0.1 from /Users/elei/.pyenv/versions/3.10.13/lib/python3.10/site-packages/pip (python 3.10)Successfully installed boxsdk-10.0.1 This is a python example:from boxsdk import OAuth2, Client oauth = OAuth2(    client_id='YOUR_CLIENT_ID',    client_secret='YOUR_CLIENT_SECRET',    store_tokens=your_store_tokens_callback_method,    access_token=persisted_access_token,    refresh_token=persisted_refresh_token,)client = Client(oauth)

Can somebody help me what’s wrong with my below code? I am getting error: PS C:\Script\UploadToBox> python UploadtoBox2.pyTraceback (most recent call last): File "C:\Script\UploadToBox\UploadtoBox2.py", line 36, in <module> main() File "C:\Script\UploadToBox\UploadtoBox2.py", line 31, in main folder = client.folders.get_folder_by_id(folder_id) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "C:\Users\sajkumar\AppData\Roaming\Python\Python312\site-packages\box_sdk_gen\managers\folders.py", line 425, in get_folder_by_id response: FetchResponse = self.network_session.network_client.fetch( ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "C:\Users\sajkumar\AppData\Roaming\Python\Python312\site-packages\box_sdk_gen\networking\box_network_client.py", line 85, in fetch request: APIRequest = self._prepare_request( ^^^^^^^^^^^^^^^^^^^^^^ File "C:\Users\sajkumar\AppData\Roaming\Python\P

I having an issue connecting  When ever i call boxJWT.AdminTokenAsync().GetAwaiter().GetResult() I get this...Box.V2.Exceptions.BoxAPIException: 'The API returned an error [BadRequest | .029b2b393ff5677f7723883563acadb4] unauthorized_client - This app is not configured properly. No public key(s) added.'

I updated a Python environment this afternoon and my code using boxsdk stopped passing validation. The environment claiming that “boxsdk is not present,” despite it being installed. I then noted the module version had jumped from 3.14.0 to 10.0.0. I reverted to 3.14.0 and the code again passed validation. Suspicious?

After authenticate the user using authorization url, I’m obtaining refresh token and access token using following method in my Android project(Kotlin). private suspend fun exchangeCodeForToken(code: String): JSONObject? { return withContext(Dispatchers.IO) { val form = FormBody.Builder() .add("grant_type", "authorization_code") .add("code", code) .add("client_id", CLIENT_ID) .add("client_secret", CLIENT_SECRET) .build() val req = Request.Builder() .url(TOKEN_URL) .post(form) .build() httpClient.newCall(req).execute().use { resp -> val body = resp.body?.string() if (resp.isSuccessful && body != null) { JSONObject(body)

Hello,My JWT Service Account cannot access folders that were shared with us from outside our organization.Setup:- Box Enterprise account- Custom App with JWT Server Authentication- App configured with App + Enterprise Access- App is authorized by enterprise adminThe Problem:Service Account can create and access its own folders but gets 404 error when trying to access externally shared folders by ID What I Tried:- Verified App + Enterprise Access is enabled- Confirmed app is authorized in Admin Console- Invited Service Account as collaborator on the shared folder- Verified all application scopes are enabledExample:Accessing Service Account own folder works fine.Accessing externally shared folder ID ...2037 returns 404 Not Found.How do I make this work?Thanks for any help. 

Hello, I am wondering if anyone can explain a bit more about how the ftp server add on works. (https://support.box.com/hc/en-us/articles/ [removed by moderator] -Using-Box-with-FTPS , https://app.box.com/integrations/box_ftp_server/) I have a client that still uses FTP to upload images to an online platform. It would be great if I could share with them the proper use of this addon. They need to be able to send images or the contents of a folder from their box.com account directly to the external platform via FTP. The functionality I’m looking for is as follows: Images from my clients box account ---->FTP ---> external site platform

I’m using Box SDK python package for development. Since the developer token is valid for only 60 minutes, I need to refresh once it’s expired. How to refresh developer token with Box SDK automatically so that my service can run without manually interrupted? Thanks.

Completely unrelated to the “Invalid Crypto Key” error we ran into last month, a SINGLE one of our client’s (so far) Salesforce Partial sandboxes is now getting CORS errors from Box (using the Box SDK in a LWC) w/o making any changes to the component code, Salesforce, or Box config. We use this same lower level utility LWC code across about a dozen different client’s Salesforce Org’s, including dozens of total sandboxes & Production envs, and no other env is encountering this error...yet.I’ve opened a case w/ Salesforce Partner Community support and they’re running out of ideas, our Box CORS config is unchanged and includes the URL that’s throwing the CORS error, we’ve added and removed the domain back w/ & w/o the trailing slash and didn’t make a difference.I upgraded to the latest 4.91 version of the Box for Salesforce managed package since it adds a couple of extra Trusted URL’s...didn’t make a difference.The “

Hi all,I'm developing a java application to fetch box documents/files properties/Info. I'm able to get most of the file properties/Info except MIME type of the files. Is it possible to directly get the MIME type of a document/file using Box Java SDK ? Please suggest your suggestion. Thank you,Arpit

Is it possible to programmatically create an app user via Apex (Box Toolkit/Box SDK for Salesforce) and associate it with an Experience Cloud user in Salesforce?

Hi, a user is trying to connect BOX to my app and they’re not seeing any of their files show up. When they navigate to the web they get this: The application could not be added as it is lacking the proper configuration. Please check with an enterprise admin if the app is properly configured via Admin Console or contact the support e-mail indicated in app description for assistance. Any ideas?

Hi everyone,I’ve been testing the Content Sidebar UI Element via the CDN and noticed that the “Open With” option isn’t showing up. After digging into the docs and doing some trial and error, I wanted to confirm what I found in case others hit the same thing: The hasOpenWith parameter used to be part of Sidebar, but it only works for Enterprise accounts where App Integrations (Google Docs, Adobe, Box Edit, etc.) are enabled by an admin. On Free/Personal plans, those integrations aren’t available, so the Open With option won’t appear in the Sidebar at all, even if you set the flag in code. The current Sidebar options you can use on Free plans are: hasActivityFeed, hasMetadata, hasSkills, and detailsSidebarProps. So if you’re on a free plan and wondering why you don’t see “Open Wit

I’m using the following snippet, I don’t receive any event in uploaderClose method. var configData = { ACCESS_TOKEN: "XXXXXXXX", FOLDER_ID: "XXXXXX" }; function uploaderClose(e) { console.log('close:', e); } var optionsUploader = { 'onClose' : uploaderClose } var options = { 'container': '.explorer', 'contentUploaderProps': optionsUploader } var contentExplorer = new Box.ContentExplorer(); contentExplorer.show(configData.FOLDER_ID, configData.ACCESS_TOKEN, options);

Hey allI’m trying to use the Box Typescript SDK’s `client.search.searchForContent()` method to query for Folders using `tags`. There are two routes that I tried, both did not result in success, so was hoping someone knows what’s going on. The two routes were:Update Folder `tags` property:on Folder Create, add step which calls PATCH Folder (`client.folders.updateFolderById`) and update `tags` property const folder = await this.scopedClient.folders.updateFolderById( folderId, { requestBody: { tags: tags }, } ); oddly, when I GET Folder after this PATCH, I don’t see the “tags” attribute defined (ie: `tags: undefined`). I tried the same call, with both `name` and `tags`, and still, `tags` was not updated, however `name` was updated and changed

Based on the following documentation, we have set setConnectTimeout and setReadTimeout to 300000 milliseconds, but even after 30 minutes have passed, no timeout error occurs and the application continues to wait for a response from Box.https://opensource.box.com/box-java-sdk/javadoc/com/box/sdk/BoxAPIConnection.html When we captured a thread dump while waiting for a response, we observed the following stack trace:at java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:480)at sun.net.www.protocol.https.HttpsURLConnectionImpl.getResponseCode(HttpsURLConnectionImpl.java:352)at com.box.sdk.BoxAPIRequest.trySend(BoxAPIRequest.java:720)at com.box.sdk.BoxAPIRequest.sendWithoutRetry(BoxAPIRequest.java:378)at com.box.sdk.BoxDeveloperEditionAPIConnection.authenticate(BoxDe

I followed this: https://medium.com/box-developer-blog/box-python-next-gen-sdk-getting-started-with-ccg-81be0abc82d9 And it worked but this stops at `user_client.users.get_user_me()`. I want to be able to list files in my folder and download them. How can I do that? I use python.

need to create an app on a box enterprise accountan external application will upload files to box. Box account has added users who will check the files Organization is recommending to use oauth  the external app is automated and need to run without having someone enter credentials everytimeis this workflow possible?