Solved

One aspect of maintaining security posture is ensuring users are updating their Box password periodically (especially if SSO is not enabled).  Is there a way to report on the last password change through Box reporting? 

Good morning, I have a long running process that starts by reading the directory contents of between 70k + 700k files, when running the process on a very small set of data, it works 100%, on my side of the process it then runs a series of ‘things’ on that data, then generates a metadata template and stamps it on the file. This works 100% until, what I think is, the token becoming stale/invalid/expired. I say this because if this process runs for like 4-6hrs, nothing. It works perfect, but around 24hr, when i stamp the template i get 401 errors. So the first thing i did (my program is in Rust) is re-build my auth before stamping the templates. Example Code: let client = Client::builder().build().unwrap(); let params = [ (“client_id”, “”), (“client_secret”, “”), (“grant_type”, “client_credentials”), (“box_subject_type”, “enterprise”), (“box_subject_id”, “534608”), ]; //Get client token let response = client .post(“https://api.box.com/oauth2/token”) .form(&params) .send() .await .un

We have a number of users outside of our domain that were inappropriately added as managed users. I want to roll them off the enterprise and convert them to external users, but when using box-sdk-gen and emit a client.users.update_user_by_id(xxxx, enterprise=None) nothing happens. It seems to execute successfully, but fetching that user again shows that the enterprise information is still present. If I try to execute with enterprise={'id':None} or enterprise='null' I get a 403 insufficient permissions error. I noticed that the type on the enterprise field is str so that’s why I tried the latter. { 'code': 'access_denied_insufficient_permissions', 'help_url': 'http://developers.box.com/docs/#errors', 'message': 'Access denied - insufficient permission', 'request_id': 'xxxxx', 'status': 403, 'type': 'error'} Raw body: {"type":"error","status":403,"code":"access_denied_insufficient_permissions","help_url":"http:\/\/developers.box.com\/docs\/#

I’m trying to use the .NET SDK to create a signature request for a file. My code is: public async Task<BoxSignRequest> CreateSignatureRequest(BoxUser user, string signerEmail, string emailMessage, string subject, string sourceFileId, string destinationFolderId) { var userClient = GetUserClient(user); //this uses the Client Credentials Grant to get a token for the user that owns the file BoxSignRequestCreateRequest createRequest = new BoxSignRequestCreateRequest() { AreRemindersEnabled = true, AreTextSignaturesEnabled = false, DaysValid = 10, EmailMessage = emailMessage, EmailSubject = subject, ParentFolder = new BoxRequestEntity() { Id = destinationFolderId }, Signers = new List<BoxSignRequestSignerCreate>() { new BoxSignRequestSignerCreate() { Email = signerEmail, LoginRequired = true, Role = BoxSignRequest

The documentation at https://developer.box.com/guides/embed/box-embed/ briefly mentions that postMessage() is used to retrieve status, but I can’t seem to make it work. I’ve setup an event listener for the message event, but it does not fire. I’ve also tried calling postMessage on the iframes contentWindow property, but to no effect.

Hi Team, I got stuck when I tried to run the script from the repository Mini Box MediaInfo Video Metadata Uploader on GitHub. I followed the README instructions step by step, and I also check the Video on YouTube. When I ran the following command: python3 src/main.py -c I got the following error: ImportError: cannot import name ‘appengine’ from ‘urllib3.contrib’ Can anyone help me understand why I got this? Thanks.

I have concerns about potential API charges associated with using Box webhooks, and I would appreciate your insights on this matter. For instance, when using Webhook v2 to capture file update events, is there a difference in API charges if the target is a folder containing approximately three files compared to a folder containing a large number of files and subfolders? Thank you for your assistance.

I’ve incorporated Box into my applications and have relied on it for several months. Previously, I’ve been utilizing the getDownloadURL function outlined in their documentation to download individual files. Now, my objective is to download an entire folder as a zip file. To accomplish this, I’ve utilized a recursive implementation of the getDownloadURL function and manually recreated the folder structure to mimic that of Box. Is there a built-in solution or workaround provided by Box for this scenario? The current process is consuming significant server resources and is prone to failure, especially when dealing with folder sizes in the gigabytes range. Thank you in advance for your assistance.

I am a bit confused about the application type and authentication method best suited for my use case. I want to build an application, which should be published into the box app centre. The application should add context menu items to the existing box cloud Users with the box cloud account are the expected users. They will select a file or folder and click the context menu option. Context menu item click - should invoke our API., with information about the selected file or folder. The application should have permission to download and upload files. The main concern is that I want a long-lived token. I don’t want to re-authenticate for every call of a user a short-lived token. If multiple Organizations installed the application, How do we differentiate the organization? Thanks, Sarin

Trying to build an Integration in box cloud: Application Type: Custom App Authentication Type: OAuth 2.0 Context Menu items are added using “Web Integration” My Web Integration (Context Menu) Configuration is: Supports all file extensions Integration Type is “Files” Everything is working as expected when select a single file and perform the context menu action. However, my context menu option is not visible when I select multiple files.

Hello, all. Thank you in advance for the assistance. I am working on authenticating to box via JWT in python. I am currently authenticating like this: auth = JWTAuth( client_id='<CLIENT ID>', client_secret='<CLIENT SECRET>', enterprise_id='<ENTERPRISE ID>', jwt_key_id='<JWT KEY ID>', rsa_private_key_file_sys_path='/Users/folder/private_key.pem', rsa_private_key_passphrase='<PASSWORD>', ) access_token = auth.authenticate_instance() client = Client(auth) However, when I try and access my files in the box, I am not able to find any via code (even though there are certainly files in my account): client.folder('0').get() The interesting thing is that I am able to access all of the files and folders in my account if I use the development client, go into the developer console, and manually copy and paste an access token into the application: from boxsdk import DevelopmentClient client = DevelopmentClient() I was curious if anyone had a

I am working on a Lambda function to be deployed on AWS. Application works fine locally. But fails when deployed on AWS. When I try to generate JWT token, I am getting error. " The SSL connection could not be established. Unable to read data from transport connection. Connection reset by peer" I am working with Windows SDK Box.V2 - 5.7.0 There are no out bound rules that’s blocking me and curl request seems to get me some response back. Any one face similar issue and have a suggestion I could try?

Hi, I need to download all the files in https://app.box.com/s/rf6p81j3o507e8c5saywtlc1p91f8po9 I cannot download it through the browser because the files are > 150 GB. Thus, I want to create a script that downloads the files one by one. To do so, I signed up for Box, and created a Custom App. On the ‘purpose’ drop-down menu, I selected ‘other’. Next, I selected ‘server authentication (with JWT)’. I then navigated to the configuration tab and added clicked ‘Genereate a Public/Private Keypair’, which downloaded a file named 0_XXXXXenv_config.json where the X’s are random digits/characters. I renamed this file to config.json and then tried to run: from boxsdk import JWTAuth, Client auth = JWTAuth.from_settings_file('config.json') client = Client(auth) auth.authenticate_instance() shared_folder = client.get_shared_item("https://app.box.com/s/rf6p81j3o507e8c5saywtlc1p91f8po9") for item in shared_folder.get_items(limit=1000): client.file(file_id=item.id).download_to(item.name) b

Hi, I am currently looking for fixing the issue when uploading a multipart request through a http request, showing the error as { “code”:“bad_request”, “help_url”:“http://developers.box.com/docs/#errors”, “status”:400, “message”:“API upload did not contain a file part”, “type”:“error” } and the input is ------BOUNDARY Content-Disposition: form-data; name=“attributes” { “name”: “Sample.png”, “parent”: { “id”: “0” }, “content_created_at”: “2012-12-12T10:53:43-08:00”, “content_modified_at”: “2012-12-12T10:53:43-08:00” } ------BOUNDARY Content-Disposition: form-data; name=“file”; filename=“Sample.png” Content-Type: image/png ------BOUNDARY-- I couldn’t use the SDK’s and the curl’s because I am using a low code platform and its very complicated there. I used a web socket to check out the request and the binary file was getting send.

I have a custom app registered/authorized by our Box admin with a permission scope of App+Enterprise , the C# client is using the Client Credentials Grant authentication method. I can get users in our Enterprise with the GetEnterpriseUsersAsync() method with no issue. However, it throws an exception of Box.V2.Exceptions.BoxAPIException : The API returned an error [Forbidden | figvvzhkcgjuvsex.02c4ce4ec440d4ba759f146d40493582d] forbidden - Forbidden when attempting to update a user via the .NET sdk UpdateUserInformationAsync method. C# code is as follows: _boxConfig = new BoxConfigBuilder(BOX_CLIENT_ID, boxClientSecret).SetEnterpriseId(BOX_ENTERPRISE_ID).Build(); _boxCCG = new BoxCCGAuth(_boxConfig); _boxClient = _boxCCG.AdminClient(); to update the user is coded as follows: public async Task UpdateUser(BoxUser user, string? setColleagueId = null) { var updates = new BoxUserRequest(); // pass the user properties into the updates object updates.Address = user.Address; updates.ExternalAp

Hi! I have a client who wants me to back up ALL the files on an old Ubuntu 14.04.6 LTS system to box.com. It’s a headless server (no gui) and they need every single file. There’s about 850 GB across 1,948,569 files in there. The largest file is only 2.4 GB. There are a few directories with a large number of files in them. The biggest count is 457,703 files in a single directory. They say they have unlimited box.com space and do not want to setup storage with another provider. I’m not sure I can run the box cli on this version of linux, and from what I’ve read, it doesn’t seem like it would be appropriate for something this big. I feel like FTPS would be the right thing (for box), but I can’t login to it from my personal account. Any suggestions would be appreciated. Thanks!

Hi Team, We are trying to set the unshared_at value to update the publicly shared folder to be accessible for 10 minutes only, with this endpoint, https://developer.box.com/reference/put-folders-id/#param-shared_link-unshared_at We do have a paid account However we are getting the below response : { "reason": "invalid_parameter", "name": "unshared_at", "message": "Invalid value '1712055223'." } Could anyone help with this error