{ "info": { "_postman_id": "81335bbe-8761-45de-b6b6-4062daac875d", "name": "Box Authorize Authorization Oauth2 API", "description": "Needs a description.", "schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json", "createdAt": "2026-07-28T01:16:50.000Z", "updatedAt": "2026-07-28T01:16:50.000Z", "lastUpdatedBy": "35240", "uid": "35240-81335bbe-8761-45de-b6b6-4062daac875d" }, "item": [ { "name": "oauth2", "item": [ { "name": "token", "item": [ { "name": "Box Request access token", "id": "407ee998-b177-4dc8-a3b4-c9b07601f4ce", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/x-www-form-urlencoded" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "urlencoded", "urlencoded": [ { "key": "value", "value": "reference #/components/schemas/PostOAuth2Token not found in the OpenAPI spec" } ] }, "url": { "raw": "https://api.box.com/oauth2/token", "protocol": "https", "host": [ "api", "box", "com" ], "path": [ "oauth2", "token" ] }, "description": "Request an Access Token using either a client-side obtained OAuth 2.0\nauthorization code or a server-side JWT assertion.\n\nAn Access Token is a string that enables Box to verify that a\nrequest belongs to an authorized session. In the normal order of\noperations you will begin by requesting authentication from the\n[authorize](#get-authorize) endpoint and Box will send you an\nauthorization code.\n\nYou will then send this code to this endpoint to exchange it for\nan Access Token. The returned Access Token can then be used to to make\nBox API calls." }, "response": [ { "id": "25409e11-41be-4812-b117-d422e51a28bb", "name": "Returns a new Access Token that can be used to make authenticated\nAPI calls by passing along the token in a authorization header as\nfollows `Authorization: Bearer `.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/x-www-form-urlencoded" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "urlencoded", "urlencoded": [ { "key": "value", "value": "reference #/components/schemas/PostOAuth2Token not found in the OpenAPI spec" } ] }, "url": { "raw": "https://api.box.com/oauth2/token", "protocol": "https", "host": [ "api", "box", "com" ], "path": [ "oauth2", "token" ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"access_token\": \"\",\n \"expires_in\": \"\",\n \"token_type\": \"bearer\",\n \"restricted_to\": [\n {\n \"value\": \"reference #/components/schemas/FileOrFolderScope not found in the OpenAPI spec\"\n },\n {\n \"value\": \"reference #/components/schemas/FileOrFolderScope not found in the OpenAPI spec\"\n }\n ],\n \"refresh_token\": \"\",\n \"issued_token_type\": \"urn:ietf:params:oauth:token-type:access_token\"\n}", "createdAt": "2026-07-28T01:16:50.000Z", "updatedAt": "2026-07-28T01:16:50.000Z", "uid": "35240-25409e11-41be-4812-b117-d422e51a28bb" }, { "id": "c657df48-9c77-4e5a-bd54-4767d21ce11b", "name": "An authentication error.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/x-www-form-urlencoded" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "urlencoded", "urlencoded": [ { "key": "value", "value": "reference #/components/schemas/PostOAuth2Token not found in the OpenAPI spec" } ] }, "url": { "raw": "https://api.box.com/oauth2/token", "protocol": "https", "host": [ "api", "box", "com" ], "path": [ "oauth2", "token" ] } }, "status": "Bad Request", "code": 400, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": \"\",\n \"error_description\": \"\"\n}", "createdAt": "2026-07-28T01:16:50.000Z", "updatedAt": "2026-07-28T01:16:50.000Z", "uid": "35240-c657df48-9c77-4e5a-bd54-4767d21ce11b" }, { "id": "da77cc1a-1b20-446b-80f6-9ff037f2cb41", "name": "An authentication error.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/x-www-form-urlencoded" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "urlencoded", "urlencoded": [ { "key": "value", "value": "reference #/components/schemas/PostOAuth2Token not found in the OpenAPI spec" } ] }, "url": { "raw": "https://api.box.com/oauth2/token", "protocol": "https", "host": [ "api", "box", "com" ], "path": [ "oauth2", "token" ] } }, "status": "Internal Server Error", "code": 500, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": \"\",\n \"error_description\": \"\"\n}", "createdAt": "2026-07-28T01:16:50.000Z", "updatedAt": "2026-07-28T01:16:50.000Z", "uid": "35240-da77cc1a-1b20-446b-80f6-9ff037f2cb41" } ], "createdAt": "2026-07-28T01:16:50.000Z", "updatedAt": "2026-07-28T01:16:50.000Z", "uid": "35240-407ee998-b177-4dc8-a3b4-c9b07601f4ce" } ], "id": "23091131-9544-4d0c-a3c6-2803d25234ed", "createdAt": "2026-07-28T01:16:50.000Z", "updatedAt": "2026-07-28T01:16:50.000Z", "uid": "35240-23091131-9544-4d0c-a3c6-2803d25234ed" }, { "name": "token#refresh", "item": [ { "name": "Box Refresh access token", "id": "924d3f2f-a83a-4037-99a8-73bfbfa607c0", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/x-www-form-urlencoded" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "urlencoded", "urlencoded": [ { "key": "value", "value": "reference #/components/schemas/PostOAuth2Token--RefreshAccessToken not found in the OpenAPI spec" } ] }, "url": { "raw": "https://api.box.com/oauth2/token#refresh", "protocol": "https", "host": [ "api", "box", "com" ], "path": [ "oauth2", "token" ], "hash": "refresh" }, "description": "Refresh an Access Token using its client ID, secret, and refresh token." }, "response": [ { "id": "d01aaf55-417c-4f31-a46a-070ca5d0d4ef", "name": "Returns a new Access Token that can be used to make authenticated\nAPI calls by passing along the token in a authorization header as\nfollows `Authorization: Bearer `.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/x-www-form-urlencoded" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "urlencoded", "urlencoded": [ { "key": "value", "value": "reference #/components/schemas/PostOAuth2Token--RefreshAccessToken not found in the OpenAPI spec" } ] }, "url": { "raw": "https://api.box.com/oauth2/token#refresh", "protocol": "https", "host": [ "api", "box", "com" ], "path": [ "oauth2", "token" ], "hash": "refresh" } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"access_token\": \"\",\n \"expires_in\": \"\",\n \"token_type\": \"bearer\",\n \"restricted_to\": [\n {\n \"value\": \"reference #/components/schemas/FileOrFolderScope not found in the OpenAPI spec\"\n },\n {\n \"value\": \"reference #/components/schemas/FileOrFolderScope not found in the OpenAPI spec\"\n }\n ],\n \"refresh_token\": \"\",\n \"issued_token_type\": \"urn:ietf:params:oauth:token-type:access_token\"\n}", "createdAt": "2026-07-28T01:16:50.000Z", "updatedAt": "2026-07-28T01:16:50.000Z", "uid": "35240-d01aaf55-417c-4f31-a46a-070ca5d0d4ef" }, { "id": "b55f58c0-f8d8-4f53-bc77-f4f0b52ffb67", "name": "An authentication error.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/x-www-form-urlencoded" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "urlencoded", "urlencoded": [ { "key": "value", "value": "reference #/components/schemas/PostOAuth2Token--RefreshAccessToken not found in the OpenAPI spec" } ] }, "url": { "raw": "https://api.box.com/oauth2/token#refresh", "protocol": "https", "host": [ "api", "box", "com" ], "path": [ "oauth2", "token" ], "hash": "refresh" } }, "status": "Bad Request", "code": 400, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": \"\",\n \"error_description\": \"\"\n}", "createdAt": "2026-07-28T01:16:50.000Z", "updatedAt": "2026-07-28T01:16:50.000Z", "uid": "35240-b55f58c0-f8d8-4f53-bc77-f4f0b52ffb67" }, { "id": "9b16ae91-4d12-46b0-9af1-d35fc02b7c6b", "name": "An authentication error.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/x-www-form-urlencoded" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "urlencoded", "urlencoded": [ { "key": "value", "value": "reference #/components/schemas/PostOAuth2Token--RefreshAccessToken not found in the OpenAPI spec" } ] }, "url": { "raw": "https://api.box.com/oauth2/token#refresh", "protocol": "https", "host": [ "api", "box", "com" ], "path": [ "oauth2", "token" ], "hash": "refresh" } }, "status": "Internal Server Error", "code": 500, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": \"\",\n \"error_description\": \"\"\n}", "createdAt": "2026-07-28T01:16:50.000Z", "updatedAt": "2026-07-28T01:16:50.000Z", "uid": "35240-9b16ae91-4d12-46b0-9af1-d35fc02b7c6b" } ], "createdAt": "2026-07-28T01:16:50.000Z", "updatedAt": "2026-07-28T01:16:50.000Z", "uid": "35240-924d3f2f-a83a-4037-99a8-73bfbfa607c0" } ], "id": "83c4762c-929b-442f-a9b8-6b1da3a06359", "createdAt": "2026-07-28T01:16:50.000Z", "updatedAt": "2026-07-28T01:16:50.000Z", "uid": "35240-83c4762c-929b-442f-a9b8-6b1da3a06359" }, { "name": "revoke", "item": [ { "name": "Box Revoke access token", "id": "1877c4db-8962-4635-a6e5-f8b4341e322a", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/x-www-form-urlencoded" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "urlencoded", "urlencoded": [ { "key": "value", "value": "reference #/components/schemas/PostOAuth2Revoke not found in the OpenAPI spec" } ] }, "url": { "raw": "https://api.box.com/oauth2/revoke", "protocol": "https", "host": [ "api", "box", "com" ], "path": [ "oauth2", "revoke" ] }, "description": "Revoke an active Access Token, effectively logging a user out\nthat has been previously authenticated." }, "response": [ { "id": "5074ded8-a329-49c5-9da8-8ff96ab3c93a", "name": "Returns an empty response when the token was successfully revoked.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/x-www-form-urlencoded" } ], "body": { "mode": "urlencoded", "urlencoded": [ { "key": "value", "value": "reference #/components/schemas/PostOAuth2Revoke not found in the OpenAPI spec" } ] }, "url": { "raw": "https://api.box.com/oauth2/revoke", "protocol": "https", "host": [ "api", "box", "com" ], "path": [ "oauth2", "revoke" ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "text", "header": [], "cookie": [], "responseTime": null, "body": null, "createdAt": "2026-07-28T01:16:50.000Z", "updatedAt": "2026-07-28T01:16:50.000Z", "uid": "35240-5074ded8-a329-49c5-9da8-8ff96ab3c93a" }, { "id": "bdf3f98b-8119-434e-8f40-5b0a743f1fab", "name": "An authentication error.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/x-www-form-urlencoded" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "urlencoded", "urlencoded": [ { "key": "value", "value": "reference #/components/schemas/PostOAuth2Revoke not found in the OpenAPI spec" } ] }, "url": { "raw": "https://api.box.com/oauth2/revoke", "protocol": "https", "host": [ "api", "box", "com" ], "path": [ "oauth2", "revoke" ] } }, "status": "Bad Request", "code": 400, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": \"\",\n \"error_description\": \"\"\n}", "createdAt": "2026-07-28T01:16:50.000Z", "updatedAt": "2026-07-28T01:16:50.000Z", "uid": "35240-bdf3f98b-8119-434e-8f40-5b0a743f1fab" }, { "id": "82b72cfc-5c70-46b1-818d-5b6f7c8eb8fe", "name": "An authentication error.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/x-www-form-urlencoded" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "urlencoded", "urlencoded": [ { "key": "value", "value": "reference #/components/schemas/PostOAuth2Revoke not found in the OpenAPI spec" } ] }, "url": { "raw": "https://api.box.com/oauth2/revoke", "protocol": "https", "host": [ "api", "box", "com" ], "path": [ "oauth2", "revoke" ] } }, "status": "Internal Server Error", "code": 500, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": \"\",\n \"error_description\": \"\"\n}", "createdAt": "2026-07-28T01:16:50.000Z", "updatedAt": "2026-07-28T01:16:50.000Z", "uid": "35240-82b72cfc-5c70-46b1-818d-5b6f7c8eb8fe" } ], "createdAt": "2026-07-28T01:16:50.000Z", "updatedAt": "2026-07-28T01:16:50.000Z", "uid": "35240-1877c4db-8962-4635-a6e5-f8b4341e322a" } ], "id": "461c5056-425c-4d3f-84e5-e03ed85b37c8", "createdAt": "2026-07-28T01:16:50.000Z", "updatedAt": "2026-07-28T01:16:50.000Z", "uid": "35240-461c5056-425c-4d3f-84e5-e03ed85b37c8" } ], "id": "1454cfc5-ad0f-486f-8834-3cbd617901b8", "createdAt": "2026-07-28T01:16:50.000Z", "updatedAt": "2026-07-28T01:16:50.000Z", "uid": "35240-1454cfc5-ad0f-486f-8834-3cbd617901b8" } ], "variable": [ { "key": "baseUrl", "value": "/" } ] }