Unicode C++ Requires Chilkat v11.5.0+

Box: Get a Service Account Token with Client Credentials

See more Box Examples

Obtain a Box service-account token using the client credentials grant. Configure and authorize a Server app first. Load credentials from protected application configuration; do not ship a client secret in a public client.

See the Box API guide for setup and the complete workflow.

Unicode C++

#include <CkHttpCurlW.h>
#include <CkStringBuilderW.h>

void ChilkatSample(void)
    {
    bool success = false;

    //  Requires Chilkat 11.5.0 or later and a previously unlocked Chilkat bundle.
    //  See Global Unlock Sample.
    //  Guide: Box API Guide.

    success = false;

    CkHttpCurlW curl;
    curl.SetVar(L"client_id",L"BOX_CLIENT_ID");
    curl.SetVar(L"client_secret",L"BOX_CLIENT_SECRET");
    curl.SetVar(L"enterprise_id",L"BOX_ENTERPRISE_ID");
    //  enterprise identifies the app's service account. This is not an admin-user token.
    curl.ClearTargetOutput(L"*");
    curl.ClearVar(L"access_token");
    curl.AddTargetOutput(L"access_token",L"access_token");
    success = curl.DoYourThing(L"curl -X POST \"https://api.box.com/oauth2/token\" --data-urlencode \"grant_type=client_credentials\" --data-urlencode \"client_id={{client_id}}\" --data-urlencode \"client_secret={{client_secret}}\" --data-urlencode \"box_subject_type=enterprise\" --data-urlencode \"box_subject_id={{enterprise_id}}\"");
    if ((success != true) || (curl.get_StatusCode() != 200)) {
        wprintf(L"Box request failed. HTTP status: %d\n",curl.get_StatusCode());
        wprintf(L"Failure reason: %d\n",curl.get_FailReason());
        return;
    }

    if (curl.VarDefined(L"!") != true) {
        wprintf(L"Expected response fields are missing.\n");
        return;
    }

    //  Keep this token in protected application memory; reacquire it when it expires.
    //  Do not print tokens or the complete token response.
    wprintf(L"Service-account access token obtained.\n");
    curl.ClearTargetOutput(L"*");
    CkStringBuilderW authorizedCommand1;
    authorizedCommand1.SetString(L"curl -X GET \"https://api.box.com/2.0/users/me?fields=id,name,login\" -H \"Authorization: Bearer {{access_token}}\"");
    int headerReplacement1 = authorizedCommand1.Replace(L"{{access_token}}",curl.getVar(L"access_token"));
    success = curl.DoYourThing(authorizedCommand1.getAsString());
    if ((success != true) || (curl.get_StatusCode() != 200)) {
        wprintf(L"Box request failed. HTTP status: %d\n",curl.get_StatusCode());
        wprintf(L"Failure reason: %d\n",curl.get_FailReason());
        wprintf(L"%s\n",curl.responseBodyStr());
        return;
    }

    wprintf(L"%s\n",curl.responseBodyStr());
    }