Question

Error: Grant credentials are invalid

Forum|Forum|1 year ago
May 22, 2025
55 replies
107 views

community-manager
Box Employee

Hi,

I have created a Client Grant type application in our company Box application.

When trying to connect to it, I am getting following error:

curl -L -X POST "https://<companyboxurl>/oauth2/token"
-H "Content-Type: application/x-www-form-urlencoded"
--data-urlencode "client_id=<client_id>"
--data-urlencode "client_secret=<client_secret>"
--data-urlencode "grant_type=client_credentials"
--data-urlencode "box_subject_type=enterprise"
--data-urlencode "box_subject_id=<enterprise_id>"

On trying this, I am getting the below error:

{"error":"invalid_grant","error_description":"Grant credentials are invalid"}

Can you please let me know, what I might be missing.

Show first post

1
2
3

Forum|pagination.label 3 / 3

C

community-manager
Author
Box Employee
Forum|Forum|1 year ago
May 22, 2025

Hello 23426911768,

I too am facing similar issue.

Results:{error=invalid_grant, error_description=Grant credentials are invalid}

Client ID : 2qqp032lws6ijjmxdbhj6oklhy5pk0ru

access level: App access only

Please let me know what is causing the problem.

Thanks,

~Rajesh

Like

C

community-manager
Author
Box Employee
Forum|Forum|1 year ago
May 22, 2025

me too having same problem,

client_id: 6ra1hjyr5uem4k4uhygtnnhqpgbsjjwh

Like

C

community-manager
Author
Box Employee
Forum|Forum|1 year ago
May 22, 2025

I am having the same issue, can someone please help/advise please:

Client Auth success: {'_oauth': <boxsdk.auth.ccg_auth.CCGAuth object at 0x7f84ad76e550>, '_session': <boxsdk.session.session.AuthorizedSession object at 0x7f84ad77b010>}
Client AsUser Auth success: {'_oauth': <boxsdk.auth.ccg_auth.CCGAuth object at 0x7f84ad76e550>, '_session':

Upload to folder "86734036620" failed with error [
Message: Grant credentials are invalid
Status: 400
URL: https://api.box.com/oauth2/token
Method: POST
Headers: {'Date': 'Wed, 01 Nov 2023 14:24:19 GMT', 'Content-Type': 'application/json', 'Transfer-Encoding': 'chunked', 'Strict-Transport-Security': 'max-age=31536000', 'Set-Cookie': 'box_visitor_id=65425f93155745.46558765; expires=Fri, 01-Nov-2024 14:24:19 GMT; Max-Age=31622400; path=/; domain=.box.com; secure; SameSite=None, bv=PARTNERS-22119; expires=Wed, 08-Nov-2023 15:24:19 GMT; Max-Age=608400; path=/; domain=.app.box.com; secure, cn=82; expires=Fri, 01-Nov-2024 14:24:19 GMT; Max-Age=31622400; path=/; domain=.app.box.com; secure, site_preference=desktop; path=/; domain=.box.com; secure', 'Cache-Control': 'no-store', 'Via': '1.1 google', 'Alt-Svc': 'h3=":443"; ma=2592000,h3-29=":443"; ma=2592000'}]