Error: Grant credentials are invalid

Follow
New post
Rathin Mandal

Hi,

I have created a Client Grant type application in our company Box application.

When trying to connect to it, I am getting following error:

curl -L -X POST "https://<companyboxurl>/oauth2/token"
-H "Content-Type: application/x-www-form-urlencoded"
--data-urlencode "client_id=<client_id>"
--data-urlencode "client_secret=<client_secret>"
--data-urlencode "grant_type=client_credentials"
--data-urlencode "box_subject_type=enterprise"
--data-urlencode "box_subject_id=<enterprise_id>"

On trying this, I am getting the below error:

{"error":"invalid_grant","error_description":"Grant credentials are invalid"}

Can you please let me know, what I might be missing.

 

 

 

 

2

Comments

44 comments

Date Votes
  • Hirosuke NAMBA

    Hello Kourtney,

    Thank you for your quick reply.
    I selected "App Access Only".

    0
    Comment actions Permalink
  • Arturo Ordonez

    Hello @Kourtney. I set the initial configuration to OAuth 2.0 with Client Credentials Grant (Server Authentication)

    My app's clientId is: o0dlrw040lfrmz8d9jv3kcoa77xdzuex. I have set the application access to App + Enterprise Access. I hope that's everything you need. Thank you!

    0
    Comment actions Permalink
  • Ruben Ramirez

    Hello @Kourtney. My initial configuration is the Client Credentials Grant (Server Authentification) 

     

    My app's client id is kzd2wtczdmn178kdgsqfvgvmqve006qr and I have the App + Enterprise Access. Can you please enable permission. I keep receiving the "Grant credentials are invalid"

    0
    Comment actions Permalink
  • Arturo Ordonez
    • Edited

    I was able to get this working using the Authorization Code flow, but when I try using Client Credentials, I'm able to get an access token but using it results in a 404 Error. Do I need to request enterprise access even though my workplace has an enterprise account? I ask because if I were to try and use a console application to ultimately do what we need, my best bet is likely to convert my Authorization Code function into a web service the Console application can call in order to successfully make an API call itself.

    0
    Comment actions Permalink
  • Kourtney

    @Hirosuke: Thank you for confirming! Please reauthorize your app in the admin console and try again now. 

    @Ruben: This is already selected appropriately on the backend so there seems to be another issue with your request. Can you please confirm that the client id and client secret you're sending are correct and associated with the same application? 

    @Arturo: This authentication type will obtain a token for the application's service account. A 404 indicates that the user associated with your access token does not have access to the content you're trying to call. If you're not sure who your access token is associated with you can use the get current user endpoint. You will either need to obtain an access token for a user that already has access to the content or collaborate in your service account to the content. 

    0
    Comment actions Permalink
  • Namrata Dhage

    Hi, I am getting this issue {"error":"invalid_client","error_description":"The client credentials are invalid"}, after passing the correct credentials

    Could you please take a look...

    0
    Comment actions Permalink
  • Kourtney

    Hello @namrata: 

    Can you please provide the client ID of your application and what you tried to select for application access in the Developer Console?  The options are app only access or app + enterprise access. 

    0
    Comment actions Permalink
  • Namrata Dhage

    Hi, this is my client id -> 6jb3em8cpjb932pv33kshv9k0mabr91b

    I have selected Custom App and then User Authentication (OAuth 2.0)

    0
    Comment actions Permalink
  • Box User

    Hi, I am also facing this problem. I have set my app to App + Enterprise. My client id is

    de2e3ki0d9exfnk9tcppnnyjokbc5ole
     
    Thank you in advance
    0
    Comment actions Permalink
  • Kourtney

    @Namrata: If you would like to use a, client credentials grant as shown in the first post of this thread, you will need to create an app with the auth type JWT with client credentials grant. Otherwise, the only way the invalid_credentials error can surface in OAuth 2 is if the email and password combination entered is invalid. 

    @Box User: Your application does not look affected by the bug in question. I'd start by verifying that the client ID and secret are both correct and for the same application. 

    0
    Comment actions Permalink
  • Sami Luqman

    Hi, is there a fix for this issue? I am still having this problem

    client id: cv90ekrffk0ifdaibsmdnvc9sn246op7

    access level: App access only

    0
    Comment actions Permalink
  • John Herr

    Hi @Kourtney.

    Is this affecting either:

    `client_id=fgs8kfh71vaazeig5xljynv38lerw5ne`

    or

    `'client_id=g2kcz37610kbrrmko3vimror8btmuzb3`

    ?

    Thanks,
    John

    0
    Comment actions Permalink
  • Nihal Limbani
    • Edited

    Hi Kourtney,

    Can you please look into this matter? Having the same issue.

    1)

    Auth Method: OAuth 2.0 with Client Credentials Grant (Server Authentication)

    Client_ID: jte2rx61pddiq337dwk61kpbvulybrh7

    App Access Level: App Access Only

    2)

    Auth Method: OAuth 2.0 with JSON Web Tokens (Server Authentication)

    Client_ID: sdc5l30s0gmcgdje1wz6c794bzkbvgdb

    App Access Level: App + Enterprise Access

    3)

    Auth Method: OAuth 2.0 (User or Client Authentication)

    Client_ID: ojvskf3qzuzitlhmyxbz1ff3zkhi3c2w

     

    0
    Comment actions Permalink
  • Nicolas Reichert

    Hey Kourtney, I'm facing same issue! 

     

    Client id: cm6x78mf9dibv7nmqykq9y3lsqoal31o

    App Access Level: App Access Only

     

    Thanks! 

    0
    Comment actions Permalink

Please sign in to leave a comment.