React Native Requires Chilkat v11.5.0+

Box: Get a Service Account Token with Client Credentials

See more Box Examples

Obtain a Box service-account token using the client credentials grant. Configure and authorize a Server app first. Load credentials from protected application configuration; do not ship a client secret in a public client.

See the Box API guide for setup and the complete workflow.

React Native

import { HttpCurl, StringBuilder } from '@chilkat/react-native'

async function chilkatExample() {
  let success = false;

  // Requires Chilkat 11.5.0 or later and a previously unlocked Chilkat bundle.
  // See Global Unlock Sample.
  // Guide: Box API Guide.

  success = false;

  const curl = new HttpCurl();
  curl.setVar('client_id', 'BOX_CLIENT_ID');
  curl.setVar('client_secret', 'BOX_CLIENT_SECRET');
  curl.setVar('enterprise_id', 'BOX_ENTERPRISE_ID');
  // enterprise identifies the app's service account. This is not an admin-user token.
  curl.clearTargetOutput('*');
  curl.clearVar('access_token');
  curl.addTargetOutput('access_token', 'access_token');
  success = true;
  try {
    await curl.doYourThingAsync('curl -X POST "https://api.box.com/oauth2/token" --data-urlencode "grant_type=client_credentials" --data-urlencode "client_id={{client_id}}" --data-urlencode "client_secret={{client_secret}}" --data-urlencode "box_subject_type=enterprise" --data-urlencode "box_subject_id={{enterprise_id}}"');
  } catch {
    success = false;
  }
  if ((!success) || (curl.statusCode !== 200)) {
    console.log(`Box request failed. HTTP status: ${curl.statusCode}`);
    console.log(`Failure reason: ${curl.failReason}`);
    return;
  }

  if (!curl.varDefined('!')) {
    console.log('Expected response fields are missing.');
    return;
  }

  // Keep this token in protected application memory; reacquire it when it expires.
  // Do not print tokens or the complete token response.
  console.log('Service-account access token obtained.');
  curl.clearTargetOutput('*');
  const authorizedCommand1 = new StringBuilder();
  authorizedCommand1.setString('curl -X GET "https://api.box.com/2.0/users/me?fields=id,name,login" -H "Authorization: Bearer {{access_token}}"');
  const headerReplacement1 = authorizedCommand1.replace('{{access_token}}', curl.getVar('access_token'));
  success = true;
  try {
    await curl.doYourThingAsync(authorizedCommand1.getAsString());
  } catch {
    success = false;
  }
  if ((!success) || (curl.statusCode !== 200)) {
    console.log(`Box request failed. HTTP status: ${curl.statusCode}`);
    console.log(`Failure reason: ${curl.failReason}`);
    console.log(curl.responseBodyStr);
    return;
  }

  console.log(curl.responseBodyStr);
}