Solved

Hello, this is Yane. My boss instructed me to use the BOX API to create a folder under a specific employee’s folder, and to create an application to check the contents of the folder. Is there any setting required to check the contents of a specific employee’s folder instead of the contents of the service account? Or should I just code in the API? Can you tell me please. I know that I can get the items in the service account folder by running the following python code. items = client.folder(folder_id=‘22222’).get_items() for items in items: print(f’{item.type.capitalize()} {item.id} is named “{item.name}”')

Hi, I am attempting to integrate an application in box with IBM App connect designer. In app connect, I need to provide the following authentication data: Access token Refresh token Client ID Client Secret I have already found the client ID and client secret, however the only token I was able to find was called a developer token. Can anyone help me understand how I could aqcuire the access and refresh tokens for my application? kind regards

When using the endpoint to list items in a folder is there any way to include representations in the nested items?

I have been testing Create Box Sign Request API using my free Developer Account, and it has been working fine until July 3rd, 2023. developer.box.com Create sign request - API Reference - Box Developer Documentation Explore the Box APIs and SDKs to use for app development, API documentation, developer support resources, and access the Box Developer Console However, when I tried the same request today (July 31st, 2023), the API request itself succeeded but the created Sign Request resulted in Error On Convert status. When I created Sign Request via WebUI, the created Sign Request successfully proceeded to In Progress status. Has there been any changes in the Box Sign API, or on its usage restriction for free Developer Accounts?

[First post – please bear with me.] Box recently sent me a notice about deprecating some SSL protocols. Legacy SSL Ciphers Deprecation The suggestion is to use “api-test(.)box(.)com” instead of the normal “api(.)box(.)com” to test whether you need to make security changes to your app. The problem I’m facing is I use the BOX SDK v.2 (with C#) which has “api(.)box(.)com” hardcoded in the library so I can’t change it to use the testing URL. [The (.) is to get around the new user 1 link only restrictions.] Any suggestions? Please let me know if you need more info. thanks, randy

Is there a way to find files which are tagged with custom metadata (not template version) using the Box UI?

Does Content Explorer include any mechanisms to stop the uploading of files that are infected with viruses? Is there any indication of an error in Content Explorer when attempting to preview a file that contains a virus? Is it possible for Content Explorer to hide/remove the download choice for a file containing a virus, despite the download permission granted by the downscoped token used in Content Explorer?

Hi there, Sorry for the very basic question, but I was wondering if somebody could guide me on how to generate a “Bearer Access Token” for usage with Box’s API? I’m trying to authorize the Preflight check before upload API call which requires a Bearer Access Token, but I can’t figure out where I can generate this token. I was reading through Box’s API documentation, but I couldn’t find definitive steps on how to do this. Thanks! 🙂 Scott

Hi there, We’re facing a weird issue for a few days now. When trying to add an existing (app) user to an existing group, the API throws an error: curl https://api.box.com/2.0/group_memberships \ -H "Content-Type: application/json" \ -H 'Authorization: Bearer <token>' \ -d '{"user":{"id":"aaa59478bbb"},"group":{"id":"yyy2197xxx"},"role":"admin"}' { "type": "error", "status": 404, "code": "not_found", "context_info": { "errors": [ { "reason": "invalid_parameter", "name": "group_tag", "message": "Invalid value 'g_yyy2197xxx'. 'group_tag' with value 'g_yyy2197xxx' not found" } ] }, "help_url": "http://developers.box.com/docs/#errors", "message": "Not Found", "request_id": "awo09uhgm4qzv4ww" } First I though this is a permission related issue, but this has been working just fine for years and nothing has been changed recently on our end. Interesti

The generate downscoped token is valid for almost one hour. Let’s say i want to invalidate token after 20 minutes(Logout usecase). I am getting the following error, The API returned an error code {“error”:“invalid_request”,“error_description”:“The client is invalid”} The following specified code is not working. box-java-sdk/doc/authentication.md at main · box/box-java-sdk · GitHub Is there any other way, we can achieve this functionality ?

Hi There I am creating a wordpress site, where my students will be able to upload files on individual topics. File request features allows me, where I can create individual links / folder for specific topics Now the issue is that, they have to add their name, email addresses (i know you can remove it) again. Will it be possible to integrate this with WordPress username or profile, so that they don’t have to add their details again? I am happy to pay if someone can help me. Thanks

Hello, I am working on a Python integration that requests Box API. My goal is as follows: to set up an automation that invites one or more individuals to collaborate on a file/folder. Once the invitation is accepted, an approval task is created on the file (or on each file within a folder) and assigned to the same person. However, how can I invite a user who does not have a Box account? The request to create a collaboration requires an object of type ‘User (Collaborations)’. Yet, I only have the email address and not a user ID. Thank you in advance for helping me through my issue. Antoine

Hey guys, I am new to box development eco system, I am following the basic tutorial present in the documentation. When I am importing the Postman collection to my Postman, the collection is imported but it shows 0 APIs are present in the collection. Can any one help me with this

Hi, Is there any API that can remove specific user share from a specific file? I saw there is an API to remove a collaborator in general from the account, and i saw i can remove shared link like public or domain links, but I just want to remove specific user I shared with him the file from the specific file I shared with him. Thanks for the help.

Hi @matt.riley I tried using Box CLI to apply metadata that has dropdown with a single selection Template Name: Record Retention Classification - Creation Date Trigger Template Key: recordRetentionClassificationCreationDateTrigger Key: retentioncode Key: ADMN-002 - Reference Information Related to Projects and Events CLI that I used: box folders:metadata:add 1051425259330 --template-key recordRetentionClassificationOtherDateTrigger --data “retentioncode=ADMN-002 - Reference Information Related to Projects and Events” --as-user=19154187332 Error that I get: Unexpected API Response [404 Not Found | 46bpsqhg41zbyrqj.0d6797ce64c9554460589c48527cffcf9] not_found - Not Found Need to know the wrong step from my side.

I am attempting to determine how many of my users are not properly syncing so I can proactively reach out and help fix them. Is there a method or status on each client that I can get that may say when they last synched and if there were any errors?

Hi All, We are looking for an best practice to rollover configuration/settings/folder taxonomy from non prod i.e DEV/Test/UAT to prod environment? Any lead or help would be highly appreciated. Thanks,

Hi there, I would like to know is it possible to limit the OAuth authorization to specific folder much like how the scopes parameter works: https://account.box.com/api/oauth2/authorize?response_type=code&client_id=ly1nj6n11vionaie65emwzk575hnnmrk&redirect_uri=http://example.com/auth/callback&folder_id=somefolderid

I am a ServiceNow Developer looking to build a Box Integration. Currently, I have ServiceNow configured to make API calls utilizing OAuth with JWT (Server Authentication). The steps I followed to accomplish that can be found here. This does work. For testing and development purposes I would like to configure Postman to emulate exactly what I have configured in the provided link. By that I mean I was to use the same client id, secret id, and point to the same custom app that was created in those steps. I feel like I want to use the developer token generated from the custom app to accomplish this, similar to what Alex responded within this post, however, I don’t see how to point to my custom app. Admittedly, when searching for documentation on how to accomplish this I probably don’t know enough about this process to find the correct steps. Any guidance on how to accomplish this would be appreciated. Thank you

I’m trying to specify a Dropdown item of a template ( in prefill_tags ) in a signing request. I tried using text_value but it didn’t seem to work. Do I have to specify the Dropdown item index somehow instead? I hope this is possible, as it seems this would be barebones functionality. Thanks.

Hello, I’m using the Box API with Python and the boxsdk module. I have developed a system that does the following: when a user uploads a file to a specific folder, a “FILE.UPLOADED” webhook is sent to my server. Then, my server sends a request to rename the file using the file.update_info(data={'name': 'some name'}) instruction. This works. In this case, I need to rename my files with the same name but with a suffix indicating the file number. For example: “file_1.png”, “file_2.png”, “file_3.png”… However, when a user uploads multiple files at once, these requests happen very quickly. My system checks if a file with the same name already exists before attempting to rename the file. If it does, it tries with a higher index suffix: 1, then 2, then 3, and so on. It’s possible that my script doesn’t find a file with the same name, and then, in the time interval between the test and the request to rename the file, another file is renamed with that name. This results in a 409 status error (“

My company does not allow us to share a box folder with any other users or service account. How can I give access to box folder with service account created by my company and not by Box(automation user svc account). Basically, I don’t want to use svc user auto generated by Box upon authorisation but I want use box apis to upload the file. How can I do this? I really need answer to this as soon as possible. Thanks in advance.

Hello, From https://developer.box.com/guides/api-calls/permissions-and-errors/rate-limits/ I can see there are monthly API max limits by customer. Where can I go to see my account’s current API usage towards this monthly cap?

We are currently implementing a functionality to automatically create a Box folder upon record creation in Salesforce. However, we are facing an issue where the folder creation process does not occur (no folder is created, and the return value is NULL) when using the createFolderForRecordId method from the Salesforce Developer Toolkit within an after insert trigger on record creation. We have confirmed that the process works correctly and the folder is created when manually triggered from the Developer Console. Could you please provide guidance on the possible cause of this issue? If it is not possible to achieve automatic folder creation within the trigger, could you please suggest an alternative solution for resolving this requirement? I got a error message as below. 18:18:41:463 USER_DEBUG [572]|DEBUG|Unable to create folder for record id a0E1m000007S0gcEAC - Details: Unable to use default credentials to make a callout to Box (maybe this is in a trigger, constructor, or after a DML

Hello all, Currently, I’m trying to utilize Box to upload/download documents using Nodejs on the backend to do this. From my understanding, I would need to get an access/bearer token (from: https://api.box.com/oauth2/token) - which I’m able to do using Client ID and Client Secret, and once I have the the bearer token I can make API calls as needed. However, I’m trying to test a few of the API calls using postman and receiving an error when doing it this way. As an example, to list the current items in a folder I’m making a GET request in Postman to: https://api.box.com/2.0/folders/:folder_id/items where I’m setting :folder_id to 0. I receive this error that says: { "type": "error", "status": 404, "code": "not_found", "context_info": { "errors": [ { "reason": "invalid_parameter", "name": "folder", "message": "Invalid value 'd_215579098453'. 'folder' with value 'd_215579098453' not found" }