Hello,
I would like to use the API to allow users on my website login to box.com. However, I would like to use my custom form on my website where user can type username and password, click login button and he will be logged in and redirected to box.com site.
Is it possible with the API?
If it is, which endpoint should I use and what should be in the body?
HI Patryk
We do not allow this as although your intentions are good, bad actors would be able to utilize this for phising and other types of attacks and general OAuth guidelines suggest to steer well clear of 'password grant' type API. For custom apps access to Box we provide two secure routes. Client side OAuth 2.0 and server side JWT and Client Credentials grant. See this overview of which type of app to use based on your requirements.
Best regards,
Peter Christensen, Platform Solutions Engineer, Box
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
