Perl Requires Chilkat v11.5.0+

Box: Get a Service Account Token with Client Credentials

See more Box Examples

Obtain a Box service-account token using the client credentials grant. Configure and authorize a Server app first. Load credentials from protected application configuration; do not ship a client secret in a public client.

See the Box API guide for setup and the complete workflow.

Perl

use chilkat();

$success = 0;

#  Requires Chilkat 11.5.0 or later and a previously unlocked Chilkat bundle.
#  See Global Unlock Sample.
#  Guide: Box API Guide.

$success = 0;

$curl = chilkat::CkHttpCurl->new();
$curl->SetVar("client_id","BOX_CLIENT_ID");
$curl->SetVar("client_secret","BOX_CLIENT_SECRET");
$curl->SetVar("enterprise_id","BOX_ENTERPRISE_ID");
#  enterprise identifies the app's service account. This is not an admin-user token.
$curl->ClearTargetOutput("*");
$curl->ClearVar("access_token");
$curl->AddTargetOutput("access_token","access_token");
$success = $curl->DoYourThing("curl -X POST \"https://api.box.com/oauth2/token\" --data-urlencode \"grant_type=client_credentials\" --data-urlencode \"client_id={{client_id}}\" --data-urlencode \"client_secret={{client_secret}}\" --data-urlencode \"box_subject_type=enterprise\" --data-urlencode \"box_subject_id={{enterprise_id}}\"");
if (($success != 1) or ($curl->get_StatusCode() != 200)) {
    print "Box request failed. HTTP status: " . $curl->get_StatusCode() . "\r\n";
    print "Failure reason: " . $curl->get_FailReason() . "\r\n";
    exit;
}

if ($curl->VarDefined("!") != 1) {
    print "Expected response fields are missing." . "\r\n";
    exit;
}

#  Keep this token in protected application memory; reacquire it when it expires.
#  Do not print tokens or the complete token response.
print "Service-account access token obtained." . "\r\n";
$curl->ClearTargetOutput("*");
$authorizedCommand1 = chilkat::CkStringBuilder->new();
$authorizedCommand1->SetString("curl -X GET \"https://api.box.com/2.0/users/me?fields=id,name,login\" -H \"Authorization: Bearer {{access_token}}\"");
$headerReplacement1 = $authorizedCommand1->Replace("{{access_token}}",$curl->getVar("access_token"));
$success = $curl->DoYourThing($authorizedCommand1->getAsString());
if (($success != 1) or ($curl->get_StatusCode() != 200)) {
    print "Box request failed. HTTP status: " . $curl->get_StatusCode() . "\r\n";
    print "Failure reason: " . $curl->get_FailReason() . "\r\n";
    print $curl->responseBodyStr() . "\r\n";
    exit;
}

print $curl->responseBodyStr() . "\r\n";