Python script to upload files

Hi @user205 ,

Most likely you are using a JWT or CCG configured application for which the underlying security context is the service account of the application.

You have several options to go around this:

• Use OAuth 2.0 and work with the user security context
• Using the JWT or CCG, authenticate with your user, typically use box_subject_type = user and the box_subject_id = your_user_id, as opposed to subject type of enterprise and your enterprise id. Your application security configurations need to have the Generate user access token selected.
• Share the content uploaded by the service account with your user.

Let us know if this helps

Best regards

I’m using JWT for the connections. I didn’t understand what I was supposed to do.

Here’s the code I’m using for the connection:
auth = JWTAuth.from_settings_file(‘C:/Users/077103869/Downloads/1153595375_rgd6y011_config.json’)

And this is the file :

{
“boxAppSettings”: {
“clientID”: “”,
“clientSecret”: “”,
“appAuth”: {
“publicKeyID”: “”,
“privateKey”: “”,
“passphrase”: “”
}
},
“enterpriseID”: “1153595375”
}

Hi,

I’m not sure which SDK are you using, I’m assuming python, but which one, the classical or the generated?

Anyway for the generated SDK, consider this code:

def main():
    config = ConfigJWT()
    jwt = JWTConfig.from_config_file(
        config_file_path=config.jwt_config_path,
        token_storage=FileWithInMemoryCacheTokenStorage(
            ".ent" + config.cache_file
        ),
    )

    auth = BoxJWTAuth(jwt)
    client = BoxClient(auth)
    me = client.users.get_user_me()
    print(f"\nHello, I'm {me.name} ({me.login}) [{me.id}]")

    auth = auth.as_user(config.jwt_user_id)
    client = BoxClient(auth)
    me = client.users.get_user_me()
    print(f"\nHello, I'm {me.name} ({me.login}) [{me.id}]")

    auth = auth.as_user("29598695136")
    client = BoxClient(auth)
    me = client.users.get_user_me()
    print(f"\nHello, I'm {me.name} ({me.login}) [{me.id}]")

    auth = auth.as_enterprise(config.enterprise_id)
    client = BoxClient(auth)
    me = client.users.get_user_me()
    print(f"\nHello, I'm back to {me.name} ({me.login}) [{me.id}]")


if __name__ == "__main__":
    main()

Executing it produces this:

Hello, I'm JWT (AutomationUser_1827756_bs5C1GfCgv@boxdevedition.com) [20130487697]

Hello, I'm Rui Barbosa (barduinor@gmail.com) [18622116055]

Hello, I'm Test APP User (AppUser_1841316_WPijcZsfjv@boxdevedition.com) [29598695136]

Hello, I'm back to JWT (AutomationUser_1827756_bs5C1GfCgv@boxdevedition.com) [20130487697]

For the classic python SDK, it is very similar.

from boxsdk import JWTAuth, Client

auth = JWTAuth.from_settings_file('/path/to/settings.json')
client = Client(auth)
service_account = client.user().get()
print(f'Service Account user ID is {service_account.id}')

user_to_impersonate = client.user(user_id='USER_ID_GOES_HERE')
user_client = client.as_user(user_to_impersonate)
current_user = user_client.user().get()
print(f'Current user ID is {current_user.id}')

Let us know if this helps

Cheers

When executing the code you passed me it gives me the following error:

Service Account user ID is 32503240531
“GET https://api.box.com/2.0/users/me” 403 217
{‘Date’: ‘Wed, 13 Mar 2024 21:01:51 GMT’, ‘Content-Type’: ‘application/json’, ‘x-envoy-upstream-service-time’: ‘82’, ‘box-request-id’: ‘0173ee255635dd28190ed20304d27057d’, ‘cache-control’: ‘no-cache, no-store’, ‘strict-transport-security’: ‘max-age=31536000’, ‘Via’: ‘1.1 google’, ‘Alt-Svc’: ‘h3=“:443”; ma=2592000,h3-29=“:443”; ma=2592000’, ‘Transfer-Encoding’: ‘chunked’}
{‘code’: ‘—ions’,
‘help_url’: ‘http://developers.box.com/docs/#errors’,
‘message’: ‘Access denied - insufficient permission’,
‘request_id’: ‘66lgfthnq1vgm8r5’,
‘status’: 403,
‘type’: ‘error’}

What permission would I need to enable?

Ah yes, forgot to mention that…

In the developer sonsole, in your app under the configurations tab, make sure:

The app access level is set to App+ Enterprise

And under the advanced features you have:

Since it is a JWT app remember to re-authorize after saving the changes:

Let us know if it worked

Cheers

I’ve been able to fix it. Thank you