Skip to main content

I have an intermittent problem where the Python Box SDK is raising the following exception when generating a down scoped token. The code works most of the time but occasionally will stop working for a few minutes. Do the JWT tokens need to be expired or released? The code is being run from an AWS Lambda and the downscoped token only needs to be used once. Is there API rate limit. I don’t think I’m near it usage would be less then 30 an hour but maybe multiple in quick succession. Our Box Account is Business Plus.





boxsdk.exception.BoxAPIException: Message: The subject_token provided is invalid





The code that is generating the error is in the used to create a downscoped token that can be used by a Box Preview embed:



config = JWTAuth.from_settings_file('cert/abcd_1234_config.json')


client = Client(config)


target_file = client.file(file_id=file_id)


token_info = client.downscope_token(k'item_preview', 'annotation_view_all', 'annotation_edit'], target_file)


Full Error Trace



Traceback (most recent call last):


  File "/var/task/flask/app.py", line 2073, in wsgi_app


    response = self.full_dispatch_request()


  File "/var/task/flask/app.py", line 1519, in full_dispatch_request


    rv = self.handle_user_exception(e)


  File "/var/task/flask/app.py", line 1517, in full_dispatch_request


    rv = self.dispatch_request()


  File "/var/task/flask/app.py", line 1503, in dispatch_request


    return self.ensure_sync(self.view_functionsirule.endpoint])(**req.view_args)


  File "/var/task/artwork.py", line 56, in artwork_info


    downscoped_token = get_box_downscoped_preview_token(file_id)


  File "/var/task/artwork.py", line 73, in get_box_downscoped_preview_token


    token_info = client.downscope_token(k'item_preview', 'annotation_view_all', 'annotation_edit'], target_file)


  File "/var/task/boxsdk/util/api_call_decorator.py", line 63, in call


    return method(*args, **kwargs)


  File "/var/task/boxsdk/client/client.py", line 1247, in downscope_token


    box_response = self._session.post(url, data=data)


  File "/var/task/boxsdk/session/session.py", line 100, in post


    return self.request('POST', url, **kwargs)


  File "/var/task/boxsdk/session/session.py", line 138, in request


    response = self._prepare_and_send_request(method, url, **kwargs)


  File "/var/task/boxsdk/session/session.py", line 375, in _prepare_and_send_request


    self._raise_on_unsuccessful_request(network_response, request, raised_exception)


  File "/var/task/boxsdk/session/session.py", line 271, in _raise_on_unsuccessful_request


    raise BoxAPIException(


boxsdk.exception.BoxAPIException: Message: The subject_token provided is invalid


Status: 400


Code: invalid_request


Request ID: None


Headers: {'Date': 'Tue, 06 Feb 2024 03:23:20 GMT', 'Content-Type': 'application/json', 'Strict-Transport-Security': 'max-age=31536000', 'Set-Cookie': 'box_visitor_id=65c1a628174fe4.21384767; expires=Thu, 06-Feb-2025 03:23:20 GMT; Max-Age=31622400; path=/; domain=.box.com; secure; SameSite=None, bv=MONO-5788; expires=Tue, 13-Feb-2024 03:23:20 GMT; Max-Age=604800; path=/; domain=.app.box.com; secure, cn=45; expires=Thu, 06-Feb-2025 03:23:20 GMT; Max-Age=31622400; path=/; domain=.app.box.com; secure, site_preference=desktop; path=/; domain=.box.com; secure', 'Cache-Control': 'no-store', 'Via': '1.1 google', 'Alt-Svc': 'h3=":443"; ma=2592000,h3-29=":443"; ma=2592000', 'Transfer-Encoding': 'chunked'}


URL: https://api.box.com/oauth2/token


Method: POST


Context Info: None

Hello! ✋,



Appreciate you posting on the forum! From first glance, the code looks correct. And, based on the error message, it looks like it isn’t the code but maybe the service being called from the code. Would it be possible to add some retry logic if you get that error? Could you also estimate how often it is happening? Like once in a blue moon or all the time?



I would not think its rate limits either.



I’m assuming the error is happing on the .downscope_token(…) line?



In the meantime, let me chat with our python sdk team and see if they have further thoughts.



Thanks,


Alex, Box Developer Advocate 🥑

Thanks for the response Alex



I’ll add in some retry code. It’s not automated retry code but I know our users have been hitting refresh so manually retrying and this doesn’t clear the problem. Leaving it for 10 minutes to an hour seems to do the job.



I didn’t come across the problem in development or testing which is why I felt it had something to do with rates or frequency.



At the moment it’s happening 1 to 2 times a day. Based on traffic of 10 - 30 views. I’ll build out more detailed logging. If it helps here’s a link to what the end product looks like.

I’m going to send you a pm!

Reply


Terms & ConditionsCookie settings