Delphi ActiveX Requires Chilkat v11.5.0+

Box: Authorize a User with OAuth 2.0

See more Box Examples

Interactive local-development example using a browser and a loopback callback. Register exactly http://localhost:3017/ in the Box User app. Run this in a trusted environment that can hold the client secret. A deployed web app must handle its registered HTTPS callback on the server.

See the Box API guide for setup and the complete workflow.

Delphi ActiveX

var
success: Integer;
oauth2: TChilkatOAuth2;
url: WideString;
elapsedMs: Integer;
accessToken: WideString;
refreshToken: WideString;
tokens: TChilkatJsonObject;

begin
success := 0;

//  Requires Chilkat 11.5.0 or later and a previously unlocked Chilkat bundle.
//  See Global Unlock Sample.
//  Guide: Box API Guide.

success := 0;

oauth2 := TChilkatOAuth2.Create(Self);
oauth2.ListenPort := 3017;
oauth2.AuthorizationEndpoint := 'https://account.box.com/api/oauth2/authorize';
oauth2.TokenEndpoint := 'https://api.box.com/oauth2/token';
oauth2.ClientId := 'BOX_CLIENT_ID';
oauth2.ClientSecret := 'BOX_CLIENT_SECRET';
//  Use Box's documented confidential-client authorization-code flow.
oauth2.CodeChallenge := 0;
url := oauth2.StartAuth();
if (oauth2.LastMethodSuccess <> 1) then
  begin
    Memo1.Lines.Add(oauth2.LastErrorText);
    Exit;
  end;
success := oauth2.LaunchBrowser(url);
if (success <> 1) then
  begin
    Memo1.Lines.Add(oauth2.LastErrorText);
    Exit;
  end;
elapsedMs := 0;
while (elapsedMs < 120000) and (oauth2.AuthFlowState < 3) do
  begin
    oauth2.SleepMs(100);
    elapsedMs := elapsedMs + 100;
  end;

if (oauth2.AuthFlowState < 3) then
  begin
    oauth2.Cancel();
    Memo1.Lines.Add('Authorization timed out.');
    Exit;
  end;
if (oauth2.AuthFlowState <> 3) then
  begin
    Memo1.Lines.Add('Authorization was denied or failed. State: ' + IntToStr(oauth2.AuthFlowState));
    Exit;
  end;
//  Retain both tokens in your application's protected token store.
//  The variables below are deliberately not printed.
accessToken := oauth2.AccessToken;
refreshToken := oauth2.RefreshToken;
//  For this local-development example only, save in a directory restricted to this user.
//  Create qa_data/tokens before running; never put this file under a web root.
tokens := TChilkatJsonObject.Create(Self);
success := tokens.Load(oauth2.AccessTokenResponse);
if (success <> 1) then
  begin
    Memo1.Lines.Add(tokens.LastErrorText);
    Exit;
  end;
success := tokens.WriteFile('qa_data/tokens/box_oauth.json');
if (success <> 1) then
  begin
    Memo1.Lines.Add(tokens.LastErrorText);
    Exit;
  end;
Memo1.Lines.Add('Authorization complete; token response saved in the protected local token file.');