Java Requires Chilkat v11.5.0+

Box: Get a Service Account Token with Client Credentials

See more Box Examples

Obtain a Box service-account token using the client credentials grant. Configure and authorize a Server app first. Load credentials from protected application configuration; do not ship a client secret in a public client.

See the Box API guide for setup and the complete workflow.

Chilkat2 Java

import com.chilkatsoft.chilkat2.ChilkatException;
import com.chilkatsoft.chilkat2.HttpCurl;
import com.chilkatsoft.chilkat2.StringBuilder;

public class ChilkatExample {

    public static void main(String[] args) {
        boolean success = false;

        // Requires Chilkat 11.5.0 or later and a previously unlocked Chilkat bundle.
        // See Global Unlock Sample.
        // Guide: Box API Guide.

        success = false;

        HttpCurl curl = new HttpCurl();
        curl.setVar("client_id", "BOX_CLIENT_ID");
        curl.setVar("client_secret", "BOX_CLIENT_SECRET");
        curl.setVar("enterprise_id", "BOX_ENTERPRISE_ID");
        // enterprise identifies the app's service account. This is not an admin-user token.
        curl.clearTargetOutput("*");
        curl.clearVar("access_token");
        curl.addTargetOutput("access_token", "access_token");
        try {
            curl.doYourThing("curl -X POST \"https://api.box.com/oauth2/token\" --data-urlencode \"grant_type=client_credentials\" --data-urlencode \"client_id={{client_id}}\" --data-urlencode \"client_secret={{client_secret}}\" --data-urlencode \"box_subject_type=enterprise\" --data-urlencode \"box_subject_id={{enterprise_id}}\"");
            success = true;
        } catch (ChilkatException e) {
            success = false;
        }
        if ((!success) || (curl.getStatusCode() != 200)) {
            System.out.println("Box request failed. HTTP status: " + curl.getStatusCode());
            System.out.println("Failure reason: " + curl.getFailReason());
            return;
        }

        if (!curl.varDefined("!")) {
            System.out.println("Expected response fields are missing.");
            return;
        }

        // Keep this token in protected application memory; reacquire it when it expires.
        // Do not print tokens or the complete token response.
        System.out.println("Service-account access token obtained.");
        curl.clearTargetOutput("*");
        StringBuilder authorizedCommand1 = new StringBuilder();
        authorizedCommand1.setString("curl -X GET \"https://api.box.com/2.0/users/me?fields=id,name,login\" -H \"Authorization: Bearer {{access_token}}\"");
        int headerReplacement1 = authorizedCommand1.replace("{{access_token}}", curl.getVar("access_token"));
        try {
            curl.doYourThing(authorizedCommand1.getAsString());
            success = true;
        } catch (ChilkatException e) {
            success = false;
        }
        if ((!success) || (curl.getStatusCode() != 200)) {
            System.out.println("Box request failed. HTTP status: " + curl.getStatusCode());
            System.out.println("Failure reason: " + curl.getFailReason());
            System.out.println(curl.getResponseBodyStr());
            return;
        }

        System.out.println(curl.getResponseBodyStr());
    }
}