PowerShell Requires Chilkat v11.5.0+

Box: Get a Service Account Token with Client Credentials

See more Box Examples

Obtain a Box service-account token using the client credentials grant. Configure and authorize a Server app first. Load credentials from protected application configuration; do not ship a client secret in a public client.

See the Box API guide for setup and the complete workflow.

PowerShell

Add-Type -Path "C:\chilkat\ChilkatDotNet47-x64\ChilkatDotNet47.dll"

$success = $false

#  Requires Chilkat 11.5.0 or later and a previously unlocked Chilkat bundle.
#  See Global Unlock Sample.
#  Guide: Box API Guide.

$success = $false

$curl = New-Object Chilkat.HttpCurl
$curl.SetVar("client_id","BOX_CLIENT_ID")
$curl.SetVar("client_secret","BOX_CLIENT_SECRET")
$curl.SetVar("enterprise_id","BOX_ENTERPRISE_ID")
#  enterprise identifies the app's service account. This is not an admin-user token.
$curl.ClearTargetOutput("*")
$curl.ClearVar("access_token")
$curl.AddTargetOutput("access_token","access_token")
$success = $curl.DoYourThing("curl -X POST `"https://api.box.com/oauth2/token`" --data-urlencode `"grant_type=client_credentials`" --data-urlencode `"client_id={{client_id}}`" --data-urlencode `"client_secret={{client_secret}}`" --data-urlencode `"box_subject_type=enterprise`" --data-urlencode `"box_subject_id={{enterprise_id}}`"")
if (($success -ne $true) -or ($curl.StatusCode -ne 200)) {
    $("Box request failed. HTTP status: " + $curl.StatusCode)
    $("Failure reason: " + $curl.FailReason)
    exit
}

if ($curl.VarDefined("!") -ne $true) {
    $("Expected response fields are missing.")
    exit
}

#  Keep this token in protected application memory; reacquire it when it expires.
#  Do not print tokens or the complete token response.
$("Service-account access token obtained.")
$curl.ClearTargetOutput("*")
$authorizedCommand1 = New-Object Chilkat.StringBuilder
$authorizedCommand1.SetString("curl -X GET `"https://api.box.com/2.0/users/me?fields=id,name,login`" -H `"Authorization: Bearer {{access_token}}`"")
$headerReplacement1 = $authorizedCommand1.Replace("{{access_token}}",$curl.GetVar("access_token"))
$success = $curl.DoYourThing($authorizedCommand1.GetAsString())
if (($success -ne $true) -or ($curl.StatusCode -ne 200)) {
    $("Box request failed. HTTP status: " + $curl.StatusCode)
    $("Failure reason: " + $curl.FailReason)
    $($curl.ResponseBodyStr)
    exit
}

$($curl.ResponseBodyStr)