I have an intermittent problem where the Python Box SDK is raising the following exception when generating a down scoped token. The code works most of the time but occasionally will stop working for a few minutes. Do the JWT tokens need to be expired or released? The code is being run from an AWS Lambda and the downscoped token only needs to be used once. Is there API rate limit. I don’t think I’m near it usage would be less then 30 an hour but maybe multiple in quick succession. Our Box Account is Business Plus.
boxsdk.exception.BoxAPIException: Message: The subject_token provided is invalid
The code that is generating the error is in the used to create a downscoped token that can be used by a Box Preview embed:
config = JWTAuth.from_settings_file('cert/abcd_1234_config.json')
client = Client(config)
target_file = client.file(file_id=file_id)
token_info = client.downscope_token(['item_preview', 'annotation_view_all', 'annotation_edit'], target_file)
Full Error Trace
Traceback (most recent call last):
File "/var/task/flask/app.py", line 2073, in wsgi_app
response = self.full_dispatch_request()
File "/var/task/flask/app.py", line 1519, in full_dispatch_request
rv = self.handle_user_exception(e)
File "/var/task/flask/app.py", line 1517, in full_dispatch_request
rv = self.dispatch_request()
File "/var/task/flask/app.py", line 1503, in dispatch_request
return self.ensure_sync(self.view_functions[rule.endpoint])(**req.view_args)
File "/var/task/artwork.py", line 56, in artwork_info
downscoped_token = get_box_downscoped_preview_token(file_id)
File "/var/task/artwork.py", line 73, in get_box_downscoped_preview_token
token_info = client.downscope_token(['item_preview', 'annotation_view_all', 'annotation_edit'], target_file)
File "/var/task/boxsdk/util/api_call_decorator.py", line 63, in call
return method(*args, **kwargs)
File "/var/task/boxsdk/client/client.py", line 1247, in downscope_token
box_response = self._session.post(url, data=data)
File "/var/task/boxsdk/session/session.py", line 100, in post
return self.request('POST', url, **kwargs)
File "/var/task/boxsdk/session/session.py", line 138, in request
response = self._prepare_and_send_request(method, url, **kwargs)
File "/var/task/boxsdk/session/session.py", line 375, in _prepare_and_send_request
self._raise_on_unsuccessful_request(network_response, request, raised_exception)
File "/var/task/boxsdk/session/session.py", line 271, in _raise_on_unsuccessful_request
raise BoxAPIException(
boxsdk.exception.BoxAPIException: Message: The subject_token provided is invalid
Status: 400
Code: invalid_request
Request ID: None
Headers: {'Date': 'Tue, 06 Feb 2024 03:23:20 GMT', 'Content-Type': 'application/json', 'Strict-Transport-Security': 'max-age=31536000', 'Set-Cookie': 'box_visitor_id=65c1a628174fe4.21384767; expires=Thu, 06-Feb-2025 03:23:20 GMT; Max-Age=31622400; path=/; domain=.box.com; secure; SameSite=None, bv=MONO-5788; expires=Tue, 13-Feb-2024 03:23:20 GMT; Max-Age=604800; path=/; domain=.app.box.com; secure, cn=45; expires=Thu, 06-Feb-2025 03:23:20 GMT; Max-Age=31622400; path=/; domain=.app.box.com; secure, site_preference=desktop; path=/; domain=.box.com; secure', 'Cache-Control': 'no-store', 'Via': '1.1 google', 'Alt-Svc': 'h3=":443"; ma=2592000,h3-29=":443"; ma=2592000', 'Transfer-Encoding': 'chunked'}
URL: https://api.box.com/oauth2/token
Method: POST
Context Info: None
