SDKs and Tools

Hello there, I am using your API to upload/download files to Box. I have managed to list all the folders and files but when trying to upload or download files and i’m receiving 403 error insufficient_scope. I have created a OAuth 2.0 app and i have all permissions (having a free account). So any solve for me? Thank you for your time.

I am using an App Token as my authentication and I am attempting to find a file by its name by submitting a cURL request to /search?query={filename}&type=file. While the response is successful in both my PHP code and doing it from the terminal, nothing is ever returned. Is there something I’m missing? For what its worth, here is my PHP function: function findRecordByFilename($accessToken, $filename) { $encodedFileName = urlencode($filename); $curl = curl_init(); curl_setopt_array($curl, [ CURLOPT_URL => "https://api.box.com/2.0/search?query=$encodedFileName&type=file", CURLOPT_RETURNTRANSFER => true, CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1, CURLOPT_CUSTOMREQUEST => "GET", CURLOPT_HTTPHEADER => [ "authorization: Bearer $accessToken" ], ]); $response = curl_exec($curl); $curlError = curl_error($curl); curl_close($curl); // do something meaningful here, this is just an example if ($curlError) { echo '<pre><code>' . jso

Hi all, I created an app using JWT authentication and assigned it all permissions in the dev portal, and subsequently authorized it. When trying to run basic commands like “box users”, I am getting a 403 forbidden error. The app has the manage users checkbox checked, and has been authorized. Any ideas why I’m getting an error here? I appreciate your insights, thanks.

i am try to do some action in box , like add new task , get comments etc … i only know the user email but in api side we need account id , so do we have API to get account id by email ? or the api can using email to repacle account id ? BTW , i am using box-python-sdk-main , thank you!!

Hello box folks, I’ve created a new app with JWT authentication and while most everything so far has worked as expected, I’m getting a 403 error when trying to create an app user: ‘The request requires higher privileges than provided by the access token.’ Question for you: do I need a paid enterprise account to create app users or can it be done with a developer account. If it can be done with a developer account, can you point me to any documentation about what app permissions need to be enabled to create an app user? Thank you.

There is a Box folder that has over 360,000 items. When I attempt to list items in the folder I receive the following error: Context Info: {‘errors’: [{‘reason’: ‘invalid_parameter’, ‘name’: ‘offset’, ‘message’: ‘The offset plus limit must not exceed the maximum limit of 300000’}]} How can I limit the number of items returned? Is there a technique I can use to adjust the limit and offset when listing over 300,000 items?

We use the Content Preview UI element to display a variety of files that are different dimensions. Some are long portrait, some are narrow landscaped. Is there a way to have the height property of the Content Preview automatically adjust or be in better proportion to the content. I have considered inserting metadata into the file at the time of file generation with the dimensions so I could calculate an appropriate dimension but to do that it looks like I would need to pass the file from box to another service.

I’ve encountered an issue with conflicting styles between the modal and btn elements in our site’s Bootstrap framework and the styles in https://cdn01.boxcdn.net/platform/elements/19.0.0/en-US/explorer.css. There might be additional conflicting styles that I haven’t identified yet. Any suggestions on how to resolve this? Currently, the only solution I can think of is to create a customised version of explorer.css. It would have been beneficial if the Box styles were prefixed to mitigate conflicts. Any insights would be appreciated. Thanks.

Hi there, I’m trying to download files created by someone within the same organization with Python SDK, but I get [403] access_denied_insufficient_permissions I can get file’s information (file id and name) with client.file(file_id).get(), but I get the above error when I try client.file(file_id).content(). Here’s my app’s status Authentication with Client Credentials Grant (already authorized) Both reading/writing files are allowed The service account has the access to the folder as Editor. Could anybody give me advice on the cause of this error? Thank you.

I have created a webhook as part of an application in Box. The application has a service account. The service account has all scopes possible (just make sure I didn’t miss anything). The service account is a co-owner of the folder that the webhook monitors. However, when I use the code examples from here and here I am unable to see the webhook (I receive a 404). Is this a permissions issue or am I doing something wrong? I have tried impersonating as the owner of the folder but I get a 403 response. import boxsdk import json from boxsdk import JWTAuth from boxsdk import Client def build_client(): auth = JWTAuth.from_settings_file('box_settings.json') client = Client(auth) return client client = build_client() webhooks = client.get_webhooks()

While creating application,clicked the “Generate Public/Private Keypair” & get the JSON file. From the JSON file,we have copied the content from “privateKey” & create new file (Config.PEM) and updated the “privateKey” values. the run the below code, getting an error. from boxsdk import JWTAuth from boxsdk import Client auth = JWTAuth( client_id=‘xxxxxx’, client_secret=‘xxxxxxxx’, enterprise_id=‘0’, jwt_key_id=‘xxxxxx’, rsa_private_key_file_sys_path=‘C:\Box\config.PEM’, rsa_private_key_passphrase=‘xxxxxxxxxxx’, ) access_token = auth.authenticate_instance() client = Client(auth) Issue : Could not deserialize key data. The data may be in an incorrect format, it may be encrypted with an unsupported algorithm, or it may be an unsupported key type C:\Program Files (x86)\Python\Python310>python.exe “C:\Users\arulap\OneDrive - Symphony Summit\Working\Official\Dev\Box\summitorchestration@gmail.com\JWTAuth_Test.py” Traceback (most recent call last): File “C:\Users\arulap\OneDrive - Sy

Hi, Is it possible to Downscope the Box token with java sdk for one folder only if that user is collaborator on multiple folders? e.g. root folder → folder 1 → folder x | | → folder y → more child folders and files | | → folder z → more child folders and files | → folder 2 → folder a | → folder b → more child folders and files (in case format messed up. folder x,y and z are the child folder of folder 1. folder a and b is child folder of folder 2. Folder 1 and 2 is child folders of root folder.) If user “ABC” is collaborated on “folder y”, “folder z” and “folder b”, can we downscope token to show only “folder y”, and “folder z” and not “folder b” on the box ui element with the existing role? Say user “ABC” has “editor” role on “folder y”, and “folder z”. Thanks.

Hi, we are using java1.8 version and trying to get the Token using Java SDK , but we got the below exception. developer.box.com Install Java SDK - Box Developer Documentation Explore the Box APIs and SDKs to use for app development, API documentation, developer support resources, and access the Box Developer Console above blog suggeste all the jar’s added. Sample Code: Path configPath = Paths.get(“config.json”); try (BufferedReader reader = Files.newBufferedReader(configPath, Charset.forName(“UTF-8”))) { BoxConfig boxConfig = BoxConfig.readFrom(reader); BoxDeveloperEditionAPIConnection client = BoxDeveloperEditionAPIConnection.getAppEnterpriseConnection(boxConfig); //Not able to get this token System.out.println(client.getAccessToken()); }catch(Exception e){ System.out.println(“Error =”+e.getMessage()); } This below exception, we are getting recently. Exception in thread “main” com.box.sdk.BoxAPIException: Error parsing PKC

I have an intermittent problem where the Python Box SDK is raising the following exception when generating a down scoped token. The code works most of the time but occasionally will stop working for a few minutes. Do the JWT tokens need to be expired or released? The code is being run from an AWS Lambda and the downscoped token only needs to be used once. Is there API rate limit. I don’t think I’m near it usage would be less then 30 an hour but maybe multiple in quick succession. Our Box Account is Business Plus. boxsdk.exception.BoxAPIException: Message: The subject_token provided is invalid The code that is generating the error is in the used to create a downscoped token that can be used by a Box Preview embed: config = JWTAuth.from_settings_file('cert/abcd_1234_config.json') client = Client(config) target_file = client.file(file_id=file_id) token_info = client.downscope_token(['item_preview', 'annotation_view_all', 'annotation_edit'], target_file) Full Error Trace Traceback (most

Hi, I’d like to make a request to have the dll in Nuget package signed by Box. The package itself is signed, but Box.V2.dll. Microsoft is introducing Smart App Control and having dlls signed gets more important.

Dear Forum, When running BoxAPI through an internal proxy, I am having trouble because [EE certificate key too weak] SSLError has occurred. Internal proxy information is set in Python-BoxSDK, Skipping certificate validation will prevent SSLError from occurring. Please let me know the cause of the above problem and how to resolve it. My personal opinion is that the security strength of the certificate sent from the internal proxy is too weak. 【SSL Error】 requests.exceptions.SSLError: HTTPSConnectionPool(host=‘api.box.com’, port=443): Max retries exceeded with url: /oauth2/token (Caused by SSLError(SSLCertVerificationError(1, ‘[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: EE certificate key too weak (_ssl.c:997)’)))

Hi, I’m a little stuck on this. We use box for our storage for clients (organisations) and with each client, we open a new folder. The functionality I’m looking for is for an internal admin webapp. When a user logs in to the admin app, I want to retrieve a service account token so then when they create an organisation, it triggers a new folder created in the enterprise account. All the client_ids etc are in the .env and in the dev console, the custom app is fine. Here is a copy of my server.js: const BoxSDK = require('box-node-sdk'); // Box configuration app.get('/api/box-access-token', cors(corsOptions), async (req, res) => { const sdkConfig = { boxAppSettings: { clientID: process.env.BOX_CLIENT_ID, clientSecret: process.env.BOX_CLIENT_SECRET, }, enterpriseID: process.env.ENTERPRISE_ID, } const sdk = BoxSDK.getPreconfiguredInstance(sdkConfig) const client = sdk.getAnonymousClient(); // Extract the necessary information con

Hello , do we have a sample to get the refresh token in Python Gen SDK ? and those any rule to using refresh token ? like i am a Dev account can we using the refresh token ? and where can get the authorization code ? if Enterprise account do we need refresh token ? Many thanks !

Hi @rbarbosa we have created app with CCG and were trying to get access token with client credentials (client id,secret ,box service id ,box sevice type)in POSTMAN. WE got following error : "error":“unauthorized_client”,“error_description”:“The grant type is unauthorized for this client_id”} " And also “Authrozition” tab is also not active (no clickable).it is my doubt that we logging to site with diff user then Admin user.If that is the case , how can we know the admin user name

We’ve integrated Box with Apache NiFi, there is a processor which puts files to Box folders. In case the folder does not exist, it is created by NiFi. Usually there are several nodes in NiFi cluster so two or more NiFi instances try to create the same folder in Box parallel. Normally Box returns 409 (conflict) in case the folder is being created while another request arrives for the creation of the same folder, the NiFi processor handles this case. Although we experienced intermittent failures during our system tests when subfolders are created in Box (e.g. folder1/folder2/folder3) . Sometimes the folder is created twice with the same name, e.g. we have two “folder1” which is considered illegal since folder names are unique in Box. It seems Box does not throw an error in some cases and creates a folder with an existing name. Is it a known issue maybe? We use box-java-sdk, 4.4.0.

I’m trying to download the files of the publicly shared KUL fall simulation dataset (Box), as I access the server I want to run my AI training on via ssh and of course don’t have a browser there. Also I’d like to avoid copying 20GB of videos via ssh or something. My app successfully authenticates and obtains the folder ID from the shared link using client.get_shared_item(shared_link), it returns “44028703597” as the folder ID. Then I call folder_items = client.folder(folder_id).get_items(), no problems here. Now when I try to iterate over that, I get an error message that the folder with the ID “d_44028703597” can’t be found, which is weird because in the same message I can see that the SDK calls GET https://api.box.com/2.0/folders/44028703597/items?offset=0, without the d_ prefix. Any idea what I’m doing wrong? My app has read permission, I can’t see anything else it might need to read public files.

Hi, I’m new using Box.com’s Java SDK. The application I’m working is trying to use Java to connect to Box.com in order to download a file. The application is a Spring Boot project, version 2.5.9, compiled using Java 8. The code below “fails” in method: BoxDeveloperEditionAPIConnection.getAppEnterpriseConnection(boxConfig, tokenCache). The method does not throw an error and never comes back from the call. The thread this process is in Stops. try { Reader reader = new FileReader("D:/Box/xxxxxxx_config.json"); BoxConfig boxConfig = BoxConfig.readFrom(reader); IAccessTokenCache tokenCache = new InMemoryLRUAccessTokenCache(100); BoxDeveloperEditionAPIConnection api = BoxDeveloperEditionAPIConnection.getAppEnterpriseConnection(boxConfig, tokenCache); BoxFile file = new BoxFile(api, "1081XXXXXXXXX"); BoxFile.Info info = file.getInfo(); FileOutputStream stream = new FileOutputStream(info.getName()); file.download(stream); tr

error: package org.apache.poi.ss.usermodel does not exist import org.apache.poi.ss.usermodel.*; i meet above error when i coding , i has add the poi dependencies in build.gradle as below implementation “org.apache.poi:poi:3.17” i am using IntelliJ IDEA , anyone can help to this ? thanks!

{‘error’: ‘invalid_grant’, ‘error_description’: ‘Grant credentials are invalid’} getting error while using ccgAuth() with cient id, client secret and user. please help…