Xbase++ Requires Chilkat v11.5.0+

Box: Get a Service Account Token with Client Credentials

See more Box Examples

Obtain a Box service-account token using the client credentials grant. Configure and authorize a Server app first. Load credentials from protected application configuration; do not ship a client secret in a public client.

See the Box API guide for setup and the complete workflow.

Xbase++

LOCAL nSuccess
LOCAL oCurl
LOCAL oAuthorizedCommand1
LOCAL nHeaderReplacement1

nSuccess := 0

//  Requires Chilkat 11.5.0 or later and a previously unlocked Chilkat bundle.
//  See Global Unlock Sample.
//  Guide: Box API Guide.

nSuccess := 0

oCurl := CreateObject("Chilkat.HttpCurl")
oCurl:SetVar("client_id", "BOX_CLIENT_ID")
oCurl:SetVar("client_secret", "BOX_CLIENT_SECRET")
oCurl:SetVar("enterprise_id", "BOX_ENTERPRISE_ID")
//  enterprise identifies the app's service account. This is not an admin-user token.
oCurl:ClearTargetOutput("*")
oCurl:ClearVar("access_token")
oCurl:AddTargetOutput("access_token", "access_token")
nSuccess := oCurl:DoYourThing('curl -X POST "https://api.box.com/oauth2/token" --data-urlencode "grant_type=client_credentials" --data-urlencode "client_id={{client_id}}" --data-urlencode "client_secret={{client_secret}}" --data-urlencode "box_subject_type=enterprise" --data-urlencode "box_subject_id={{enterprise_id}}"')
IF ((nSuccess != 1) .OR. (oCurl:StatusCode != 200))
    ? "Box request failed. HTTP status: " + Str(oCurl:StatusCode)
    ? "Failure reason: " + Str(oCurl:FailReason)
    oCurl:destroy()
    RETURN
ENDIF

IF (oCurl:VarDefined("!") != 1)
    ? "Expected response fields are missing."
    oCurl:destroy()
    RETURN
ENDIF

//  Keep this token in protected application memory; reacquire it when it expires.
//  Do not print tokens or the complete token response.
? "Service-account access token obtained."
oCurl:ClearTargetOutput("*")
oAuthorizedCommand1 := CreateObject("Chilkat.StringBuilder")
oAuthorizedCommand1:SetString('curl -X GET "https://api.box.com/2.0/users/me?fields=id,name,login" -H "Authorization: Bearer {{access_token}}"')
nHeaderReplacement1 := oAuthorizedCommand1:Replace("{{access_token}}", oCurl:GetVar("access_token"))
nSuccess := oCurl:DoYourThing(oAuthorizedCommand1:GetAsString())
IF ((nSuccess != 1) .OR. (oCurl:StatusCode != 200))
    ? "Box request failed. HTTP status: " + Str(oCurl:StatusCode)
    ? "Failure reason: " + Str(oCurl:FailReason)
    ? oCurl:ResponseBodyStr
    oCurl:destroy()
    oAuthorizedCommand1:destroy()
    RETURN
ENDIF

? oCurl:ResponseBodyStr

oCurl:destroy()
oAuthorizedCommand1:destroy()