API

TEST

Test topic

I’d like to apply a metadata template from another enterprise (let’s call it Enterprise B) to files from my enterprise (Enterprise A). When I attempt to do so via the Box API, I receive 403 Forbidden. I’ve tried a number of variations, to get an idea of what responses I can expect: If Enterprise B doesn’t exist - 400 Bad Request, Invalid metadata scope. If Enterprise B does exist but the metadata template does not - 404 Not Found, Specified Metadata Template not found. If Enterprise B does exist and the metadata template does exist - 403 Forbidden. I suspect that the user making the call needs permissions that they don’t have, but it’s not clear to me what permissions that user needs - there don’t appear to be any permissions specific to metadata. What must I do to allow a user from Enterprise A to apply a metadata template from Enterprise B to files in Enterprise A?

Our app is currently under review. Even though it is in the review process, is it okay for our customers to use it? Are there any restrictions, such as a maximum number of connections?

I am using trial version of Enterprise Box and I have created Box Custom application (authorized by Box admin). Then I generated a private key PK for that Box application and I use this PK to connect to Box App from AWS Kendra. I use Kendra Developer Edition in this test. This method used to work, however today I received the below connection error after providing new PK to Kendra. PK is passed to Kendra using Secrets Manager. Error connecting to customer repository: Error parsing PKCS private key for Box Developer Edition. I made sure the PK is copied properly to Kendra. I also tested connectivity using the same PK and Box SDK and I can connect successfully to Box App programmatically using Python, however the connection from AWS Console fails. What can cause this error? This is private key format generated from BOX Application. It contains “\n” character as text. I normally copy “privateKey” into secret in Secrets Manager Kendra uses and this used to work. { "boxAppSettings": {

Hello there I am developing an integration for a customer that uses BOX. I have created my own box account to develop and test the integration. Today i wanted to test it out on the customers enterprise. They could add and authorize the app easily via the client id. However the app service account needs to be added as a collaborator to the folder it needs to see. This is where we ran into trouble, as BOX refused to add the service account since it was from a different enterprise. Is it possible to add a serviceaccount from a different enterprise at all? I am going at this the wrong way or is there some trick that i have missed. Best regards Malte

Hi Team, I am facing issue while uploading file to folder, I am having collaborator access for uploading file to a folder. My colleague has added me as collaborator (Admin) in app. When using Developer Token of that app I am able to upload file on folder, but when generating Access Token and using it to upload it gives me below error: Error when uploading using Generated Access Token: { “type”: “error”, “status”: 404, “code”: “not_found”, “context_info”: { “errors”: [ { “reason”: “invalid_parameter”, “name”: “parent”, “message”: “Invalid value ‘d_244280116703’. ‘parent’ with value ‘d_244280116703’ not found” } ] }, “help_url”: “http://developers.box.com/docs/#errors”, “message”: “Not Found”, “request_id”: “6sq71ghlvfufpj1r” } I am generating token using client credentials and authentication for my app is OAuth 2.0 Can someone tell me what is issue or what i am missing in this implementation? Thanks

Hi, I am running this API call. ‘https://api.box.com/2.0/workflows?folder_id=FOLDER_ID’. When I run it, I am getting a 404 error. Here’s what I’ve done so far. I know it’s not an authentication issue because I can run ‘https://api.box.com/2.0/folders/FOLDER_ID/items’ just fine. I know it’s not an issue of there not being a workflow in the folder. I was able to successfully make this call yesterday. And I can SEE the workflows on the front end. I had our company box admin run this API call with his root account and got the same 404 error. What am I missing? Again, it’s super odd to me because I ran this just fine yesterday morning.

Hi I’m building a PHP app and I implemented the OAuth flow described in the documentation developer.box.com OAuth 2.0 without SDKs - Box Developer Documentation Explore the Box APIs and SDKs to use for app development, API documentation, developer support resources, and access the Box Developer Console however, after I successfully receive my refresh token, it only works for one request, the following request always fails Any reason why it won’t allow me to use the refresh token again in offline mode? Thanks

I want to to know if there is a webhook that can notify similar information that following: status.box.com Box Status Welcome to Box's home for real-time and historical data on system performance. because this status usually has too much delay. What do you think about, as a workaround, just use some general webhook, and finally if I didn’t receive a response it sounds like the service is unavailable?.

Hello, I’m using the cloudsync by synology for mirroring files. On 29/11/2023, I have noticed that one or two out of ten files are synced after 4 hours since the files was uploaded to the Box(Others was synced immediately). That problem persists for half a day. After some investigation, I have got to know that cloudsync uses the box event api and the event was delayed. I got the event data below by calling the api using curl command. The event data shows that recorded_at is about 4 hours later than created_at. { "type": "event", "event_id": "6a6e8892b56aa016e60dac75973e3c16ac06148f", "created_at": "2023-11-29T23:42:29-08:00", "recorded_at": "2023-11-30T03:43:23-08:00", "event_type": "ITEM_UPLOAD", "session_id": "v5wegwhkd6bo63sk", ... Now, I have the following questions below. How often does similar event delay occurs? How long is max expected event delay? Regards,

Hi all, I was wondering whether the Events API call has the same rate limits as described here. Due to its potential huge-size in enterprise environments, i wondered if it really falls under the 100K per month for an enterprise for example. If an enterprise with a lot of users has a SIEM tool and a few more integrated tools, this can be reached easily. Also - how the rate limiting of a client-credentials authenticated app is measured? is the app considered as a “user”? Another question i had, is whether i can filter out events based on their type (for example filter out login events etc). Thanks a lot.

Hi Team, I am working on an app integration to poll and parse Enterprise Event Stream API. I found the documentation for the list of events at the following link: https://developer.box.com/guides/events/enterprise-events/for-enterprise/#event-types 👍 Just wondering if there is documentation that explains the JSON response document for each event as it seems to vary a little based on event - example: CONTENT_ACCESS/LOCK/UNLOCK/EDIT has additional_details field. Thanks Andy

Hello all, I am using the download file API with a downscoped token to allow the user to download files directly from their browser as part of an application where box is hidden from the user (https://developer.box.com/guides/downloads/in-browser/). This works fine, except that the response includes a Content-Disposition header with the value set to “attachment;filename=…”. Ideally, I would want a response with Content-Disposition set to “inline;filename=…” so that the default behavior for browsers would be to preview the file rather than downloading it. So my questions: Is there a way to force box to return an inline disposition? If not, is there another endpoint/workaround I can use to achieve this (without recreating a preview system myself)?

For all intents and purposes, I’m using cURL commands to operate my application. Project: I have a large number of folders (1000+) in the root of my application. Each folder has a standard structure of sub-folders, and within each sub folder there can be a large number of individual files (1000+). Need: I have a database with associated records. Each record is given an identifier (UUID). I created a metdata template with one field called UUID. Goal is to add a metadata instance to related files and folders with associated UUID. When you pull up the record in the database, application will search all metadata for UUID, and return appropriate files. Problem: I have successfully done so with files. Added metadata instance, search for UUID, and found list of files (99% of the time it returns just one). I have NOT been able to do so with folders. I need to be able to search for a metadata instance on a “folder” and retrieve it. Because of the sheer number of folders, list_items_in_f

I am trying to post comments on files in box using rest api callouts.It is asking for auth token.I have already authorized the app in box.I am not sure how it will work.if anybody has a working example in postman etc.

Hello everyone. I created a custom app in september 2019 and I have been using it since them to automate some of my monthly tasks. It is able to upload and retrieve files data as I need, but not to list neither delete due a low regularity of usage of these functions, mainly because I’ve used to manage and delete old files using web Content Manager. Unfortunately I am not able to do it anymore. If I understood it well, now the feature is restrict to plans upper to Business Plus. I got the point to restrict users management, but wouldn’t it be bad for Custom Apps that haven’t a full self-management (CRUD) files feature? We must consider that some apps does not even have an UI, some finished and delivered apps to final users could not implement a full management, and even there is a needing to write more code and spend time to fix a issue that can’t be solved due a policy plan change Thanks.

Hi, We have issue where we want to get all the collaborators for file, however, we are not getting all the collaborators. If I call list folder collaboration Api, I am getting all the collaborators whoever have access to that file. If it is waterfall permission model, I should have all the collaborations from the file endpoint, if that file under the parent folder. So why I am not getting all the collaborators when I use list file collaboration API? ref: - List file collaborations - API Reference - Box Developer Documentation

Hi Team, What will be endpoint of API if subdomain enabled. Example - Default URL - https://api.box.com/2.0/events If enabled subdomain can we use API with default URL or do we need to use subdomain?

Regarding the plan mentioned in the https://www.box.com/pricing/business, we have below queries. Will the “\events” API availability change as the plan changes ? List Of Event type will change as per the Plan ? Will Enterprise events type include user events type ? What minimum paid account required to access the Enterprise event via “\events” API?

Getting below error in /users API Request - curl -i -X GET “https://api.box.com/2.0/users” \ -H “authorization: Bearer <ACCESS_TOKEN>” Response - { “type”: “error”, “status”: 403, “code”: “access_denied_insufficient_permissions”, “help_url”: “http://developers.box.com/docs/#errors”, “message”: “Access denied - insufficient permission”, “request_id”: “qcyqnkhl1oprc6uk” } What permission or paid account needed to access above API ?

Some of our users are getting flagged for going over their allotted API calls per month. We’re aware that this is part of the user’s Box’s billing plan. This is a pretty inconvenient limit. Our use case requires us to do full periodic syncs, where each sync making: ~2 API calls per folder, 1 to retrieve its children and 1 to retrieve its collaborations ~1 API call per file to retrieve its collaborations We do use webhooks to reduce how often we make these calls, but it still doesn’t guarantee control as a developer, especially if a user has thousands of files. To remediate: Are there any API calls that can pull the latest changes to folders & files, instead of us needing to do full periodic syncs? Or is there any other recommended practice so that we can reduce the # of API calls we need to make. Is there a programmatic way to access the user’s monthly limit? Does this limit apply to an individual user or the entire account of users? Any plans to remove this limit?