Cannot access Event API

回答済み

フォローする

新規投稿

ashwant

• 2020年10月15日 07:12

Receiving  Forbidden error on calling Event API using AppToken as authorization

https://api.box.com/2.0/events
{"type":"error","status":403,"code":"forbidden","help_url":"http:\/\/developers.box.com\/docs\/#errors","message":"Forbidden","request_id":"1bqnjcgjq1bum4nw"}

How to give access to my app with app token to use events API,?

0

• 正式なコメント

  

  Kourtney

  • 2020年10月15日 15:52

  It looks like you've selected AppToken Authorization. This type of authentication is only for use with our preview services and has limited API capabilities. The accessible endpoints can be found here: https://developer.box.com/guides/authentication/app-token/endpoints/

  In order to interact with the events API you will need to select a different authentication type. 

  コメントアクション パーマリンク
• 

  Chrissy

  • 2020年10月20日 17:53
  • 編集済み

  Kourtney, will you please be more specific on which kind of auth methods that the Event API support?

  What about JWT?

  0

  コメントアクション パーマリンク
• 

  Kourtney

  • 2020年10月20日 20:07

  Hey Christina! Happy to elaborate here. You can use either Standard OAuth2 or JWT with the events endpoint. The only authentication method that will not work is app token auth. 

  0

  コメントアクション パーマリンク
• 

  Chrissy

  • 2020年10月21日 08:14
  • 編集済み

  Thanks!
  Hope I'm not hijacking the post, but maybe others will find my question related to this helpful;
  I get the same 403 forbidden error while using JWT auth with my application (authenticating as the service account of my app via the .json file) on the events endpoint. But using other endpoints with my app goes fine. Then, when I use the developer token (and authenticate as my current user) the events endpoint returns successfully.

  Are you sure about the JWT support? Or are there any prereqs. for this auth method combined with this endpoint?

  1

  コメントアクション パーマリンク
• 

  Kourtney

  • 2020年10月21日 14:51

  When you generate a developer token it will be associated with whatever user is logged into the developer console when you click the generate button. The events endpoint can only be used by admins or co-admins with proper permissions, so if this user does not have those privileges you'll receive a 403. This is noted here: https://developer.box.com/reference/get-events/. 

  Hope that helps! 

  1

  コメントアクション パーマリンク
• 

  ashwant

  • 2020年10月28日 12:36

  So there is no way to use events API with a non expiring token,
  What is the easiest way to refresh the tokens programmatically without app tokens?

  0

  コメントアクション パーマリンク

サインインしてコメントを残してください。