Box Platform

I have an intermittent problem where the Python Box SDK is raising the following exception when generating a down scoped token. The code works most of the time but occasionally will stop working for a few minutes. Do the JWT tokens need to be expired or released? The code is being run from an AWS Lambda and the downscoped token only needs to be used once. Is there API rate limit. I don’t think I’m near it usage would be less then 30 an hour but maybe multiple in quick succession. Our Box Account is Business Plus. boxsdk.exception.BoxAPIException: Message: The subject_token provided is invalid The code that is generating the error is in the used to create a downscoped token that can be used by a Box Preview embed: config = JWTAuth.from_settings_file('cert/abcd_1234_config.json') client = Client(config) target_file = client.file(file_id=file_id) token_info = client.downscope_token(['item_preview', 'annotation_view_all', 'annotation_edit'], target_file) Full Error Trace Traceback (most

Hello there I am developing an integration for a customer that uses BOX. I have created my own box account to develop and test the integration. Today i wanted to test it out on the customers enterprise. They could add and authorize the app easily via the client id. However the app service account needs to be added as a collaborator to the folder it needs to see. This is where we ran into trouble, as BOX refused to add the service account since it was from a different enterprise. Is it possible to add a serviceaccount from a different enterprise at all? I am going at this the wrong way or is there some trick that i have missed. Best regards Malte

Hi, I’m a little stuck on this. We use box for our storage for clients (organisations) and with each client, we open a new folder. The functionality I’m looking for is for an internal admin webapp. When a user logs in to the admin app, I want to retrieve a service account token so then when they create an organisation, it triggers a new folder created in the enterprise account. All the client_ids etc are in the .env and in the dev console, the custom app is fine. Here is a copy of my server.js: const BoxSDK = require('box-node-sdk'); // Box configuration app.get('/api/box-access-token', cors(corsOptions), async (req, res) => { const sdkConfig = { boxAppSettings: { clientID: process.env.BOX_CLIENT_ID, clientSecret: process.env.BOX_CLIENT_SECRET, }, enterpriseID: process.env.ENTERPRISE_ID, } const sdk = BoxSDK.getPreconfiguredInstance(sdkConfig) const client = sdk.getAnonymousClient(); // Extract the necessary information con

Hello , do we have a sample to get the refresh token in Python Gen SDK ? and those any rule to using refresh token ? like i am a Dev account can we using the refresh token ? and where can get the authorization code ? if Enterprise account do we need refresh token ? Many thanks !

Hello dear box.com support team, Perhaps someone here can help me… but first, some information: TB: 115.6.1 (64-Bit) OS: Windows 10 Account Type: POP Mailbox Provider (split): SMTP marec.de (own domain) / POP (Incoming server:) gmail.com Storage Service (the one that is / isn’t working ;)): box (box.com) AV: Windows Defender Firewall: Windows Defender (and Fritzbox) On the subject: For many years, I have been using the Box (box.com) add-on with Filelink (from a certain attachment size). It has always worked great. However, for some time now, the upload always fails, I can no longer use Box (box.com) in conjunction with Thunderbird. There is no further error message, except that the “upload failed”. I have already “uninstalled” and re-set up the service several times → no improvement. If I try it e.g. 5 times with Box (box.com), it may work on the 5th try or already on the third try or only on the 7th try and sometimes not even then. Since I have a lot and enough storage at Box, I am in

Hi @rbarbosa we have created app with CCG and were trying to get access token with client credentials (client id,secret ,box service id ,box sevice type)in POSTMAN. WE got following error : "error":“unauthorized_client”,“error_description”:“The grant type is unauthorized for this client_id”} " And also “Authrozition” tab is also not active (no clickable).it is my doubt that we logging to site with diff user then Admin user.If that is the case , how can we know the admin user name

We’ve integrated Box with Apache NiFi, there is a processor which puts files to Box folders. In case the folder does not exist, it is created by NiFi. Usually there are several nodes in NiFi cluster so two or more NiFi instances try to create the same folder in Box parallel. Normally Box returns 409 (conflict) in case the folder is being created while another request arrives for the creation of the same folder, the NiFi processor handles this case. Although we experienced intermittent failures during our system tests when subfolders are created in Box (e.g. folder1/folder2/folder3) . Sometimes the folder is created twice with the same name, e.g. we have two “folder1” which is considered illegal since folder names are unique in Box. It seems Box does not throw an error in some cases and creates a folder with an existing name. Is it a known issue maybe? We use box-java-sdk, 4.4.0.

Hi Team, I am facing issue while uploading file to folder, I am having collaborator access for uploading file to a folder. My colleague has added me as collaborator (Admin) in app. When using Developer Token of that app I am able to upload file on folder, but when generating Access Token and using it to upload it gives me below error: Error when uploading using Generated Access Token: { “type”: “error”, “status”: 404, “code”: “not_found”, “context_info”: { “errors”: [ { “reason”: “invalid_parameter”, “name”: “parent”, “message”: “Invalid value ‘d_244280116703’. ‘parent’ with value ‘d_244280116703’ not found” } ] }, “help_url”: “http://developers.box.com/docs/#errors”, “message”: “Not Found”, “request_id”: “6sq71ghlvfufpj1r” } I am generating token using client credentials and authentication for my app is OAuth 2.0 Can someone tell me what is issue or what i am missing in this implementation? Thanks

I’m trying to download the files of the publicly shared KUL fall simulation dataset (Box), as I access the server I want to run my AI training on via ssh and of course don’t have a browser there. Also I’d like to avoid copying 20GB of videos via ssh or something. My app successfully authenticates and obtains the folder ID from the shared link using client.get_shared_item(shared_link), it returns “44028703597” as the folder ID. Then I call folder_items = client.folder(folder_id).get_items(), no problems here. Now when I try to iterate over that, I get an error message that the folder with the ID “d_44028703597” can’t be found, which is weird because in the same message I can see that the SDK calls GET https://api.box.com/2.0/folders/44028703597/items?offset=0, without the d_ prefix. Any idea what I’m doing wrong? My app has read permission, I can’t see anything else it might need to read public files.

Hi, I’m new using Box.com’s Java SDK. The application I’m working is trying to use Java to connect to Box.com in order to download a file. The application is a Spring Boot project, version 2.5.9, compiled using Java 8. The code below “fails” in method: BoxDeveloperEditionAPIConnection.getAppEnterpriseConnection(boxConfig, tokenCache). The method does not throw an error and never comes back from the call. The thread this process is in Stops. try { Reader reader = new FileReader("D:/Box/xxxxxxx_config.json"); BoxConfig boxConfig = BoxConfig.readFrom(reader); IAccessTokenCache tokenCache = new InMemoryLRUAccessTokenCache(100); BoxDeveloperEditionAPIConnection api = BoxDeveloperEditionAPIConnection.getAppEnterpriseConnection(boxConfig, tokenCache); BoxFile file = new BoxFile(api, "1081XXXXXXXXX"); BoxFile.Info info = file.getInfo(); FileOutputStream stream = new FileOutputStream(info.getName()); file.download(stream); try

Hello there, I am using your API to upload/download files to Box. I have managed to list all the folders and files but when trying to upload or download files and i’m receiving 403 error insufficient_scope. I have created a OAuth 2.0 app and i have all permissions (having a free account). So any solve for me? Thank you for your time.

Hi, I am running this API call. ‘https://api.box.com/2.0/workflows?folder_id=FOLDER_ID’. When I run it, I am getting a 404 error. Here’s what I’ve done so far. I know it’s not an authentication issue because I can run ‘https://api.box.com/2.0/folders/FOLDER_ID/items’ just fine. I know it’s not an issue of there not being a workflow in the folder. I was able to successfully make this call yesterday. And I can SEE the workflows on the front end. I had our company box admin run this API call with his root account and got the same 404 error. What am I missing? Again, it’s super odd to me because I ran this just fine yesterday morning.

Hi I’m building a PHP app and I implemented the OAuth flow described in the documentation developer.box.com OAuth 2.0 without SDKs - Box Developer Documentation Explore the Box APIs and SDKs to use for app development, API documentation, developer support resources, and access the Box Developer Console however, after I successfully receive my refresh token, it only works for one request, the following request always fails Any reason why it won’t allow me to use the refresh token again in offline mode? Thanks

I want to to know if there is a webhook that can notify similar information that following: status.box.com Box Status Welcome to Box's home for real-time and historical data on system performance. because this status usually has too much delay. What do you think about, as a workaround, just use some general webhook, and finally if I didn’t receive a response it sounds like the service is unavailable?.

error: package org.apache.poi.ss.usermodel does not exist import org.apache.poi.ss.usermodel.*; i meet above error when i coding , i has add the poi dependencies in build.gradle as below implementation “org.apache.poi:poi:3.17” i am using IntelliJ IDEA , anyone can help to this ? thanks!

Hello, I’m using the cloudsync by synology for mirroring files. On 29/11/2023, I have noticed that one or two out of ten files are synced after 4 hours since the files was uploaded to the Box(Others was synced immediately). That problem persists for half a day. After some investigation, I have got to know that cloudsync uses the box event api and the event was delayed. I got the event data below by calling the api using curl command. The event data shows that recorded_at is about 4 hours later than created_at. { "type": "event", "event_id": "6a6e8892b56aa016e60dac75973e3c16ac06148f", "created_at": "2023-11-29T23:42:29-08:00", "recorded_at": "2023-11-30T03:43:23-08:00", "event_type": "ITEM_UPLOAD", "session_id": "v5wegwhkd6bo63sk", ... Now, I have the following questions below. How often does similar event delay occurs? How long is max expected event delay? Regards,

Hi all, I was wondering whether the Events API call has the same rate limits as described here. Due to its potential huge-size in enterprise environments, i wondered if it really falls under the 100K per month for an enterprise for example. If an enterprise with a lot of users has a SIEM tool and a few more integrated tools, this can be reached easily. Also - how the rate limiting of a client-credentials authenticated app is measured? is the app considered as a “user”? Another question i had, is whether i can filter out events based on their type (for example filter out login events etc). Thanks a lot.

Hi Team, I am working on an app integration to poll and parse Enterprise Event Stream API. I found the documentation for the list of events at the following link: https://developer.box.com/guides/events/enterprise-events/for-enterprise/#event-types 👍 Just wondering if there is documentation that explains the JSON response document for each event as it seems to vary a little based on event - example: CONTENT_ACCESS/LOCK/UNLOCK/EDIT has additional_details field. Thanks Andy

Hello all, I am using the download file API with a downscoped token to allow the user to download files directly from their browser as part of an application where box is hidden from the user (https://developer.box.com/guides/downloads/in-browser/). This works fine, except that the response includes a Content-Disposition header with the value set to “attachment;filename=…”. Ideally, I would want a response with Content-Disposition set to “inline;filename=…” so that the default behavior for browsers would be to preview the file rather than downloading it. So my questions: Is there a way to force box to return an inline disposition? If not, is there another endpoint/workaround I can use to achieve this (without recreating a preview system myself)?

{‘error’: ‘invalid_grant’, ‘error_description’: ‘Grant credentials are invalid’} getting error while using ccgAuth() with cient id, client secret and user. please help…

For all intents and purposes, I’m using cURL commands to operate my application. Project: I have a large number of folders (1000+) in the root of my application. Each folder has a standard structure of sub-folders, and within each sub folder there can be a large number of individual files (1000+). Need: I have a database with associated records. Each record is given an identifier (UUID). I created a metdata template with one field called UUID. Goal is to add a metadata instance to related files and folders with associated UUID. When you pull up the record in the database, application will search all metadata for UUID, and return appropriate files. Problem: I have successfully done so with files. Added metadata instance, search for UUID, and found list of files (99% of the time it returns just one). I have NOT been able to do so with folders. I need to be able to search for a metadata instance on a “folder” and retrieve it. Because of the sheer number of folders, list_items_in_f

CLI installation and command line Box login -n example_name > error as below How can I solve this error? Redirect URI = http://localhost:3000/callback client id and client secret may be correct. Error: redirect_uri_mismatch Show Error Details response_type=code redirect_uri=http://localhost:3000/callback state=ndJjebiBosm-3K06PdUAlZvCduS_ofoB client_id=clyd1w6ectfsns7p90uq2olth66ax69j

I am trying to post comments on files in box using rest api callouts.It is asking for auth token.I have already authorized the app in box.I am not sure how it will work.if anybody has a working example in postman etc.