OAuth 2.0 Redirect URL Updates

Today, we released a new feature to the Box Developer Console, allowing developers to add multiple redirect URIs for an OAuth 2.0 application.

Starting November 29, 2021, new applications using OAuth 2.0 will require the URIs set in the configuration tab of the Developer Console to strictly match the one used during redirect. In addition, both new and existing applications, will gain the ability to add multiple redirect URIs.

For existing applications, the deadline to make changes to this URL and avoid service disruption is May 13, 2022.

Updates

• The Box Developer Console OAuth 2.0 application configuration section has a new button to add multiple redirect URIs
• Redirect URIs now force strict checking to match the URI passed in and URIs configured in the OAuth 2.0 application configuration
• Updated the redirect_uri query parameter wording on the GET /authorize endpoint page
• Updated the OAuth 2.0 setup, with SDK, and without SDK guide pages

Where to get support

Should you have any issues or need further guidance, please post a request to our developer forum for any help needed.

Box Java SDK v2.58.0 released

New Features and Enhancements:

• SDK support for new GET /events stream_type: admin_logs_streaming (#938)
• Adding BoxDeveloperEditionAPIConnection#getUserConnection to indicate that we can use this connection for managed users or app users (#940)

Bug Fixes:

• Fix for deprecated enums still being used (#931)

New Shield Download Event

Today, we released a new event_type to the Enterprise Event stream for downloads that are restricted based on a Shield access policy.

If an admin creates a shield access policy that restricts downloads and an end user is blocked from downloading a file, an event is produced within the enterprise event stream. Events will also be generated when a user is viewing a folder with a file restricted from download, viewing a file in preview that is restricted from download, and when a user requests to download a file through the API that is restricted from download. These events follow the standard event object schema and the event_type value set to SHIELD_DOWNLOAD_BLOCKED.

Updates

• Added a new section to the Smart Access event trigger documentation
• Added SHIELD_DOWNLOAD_BLOCKED to the enterprise event list

Where to get support

Should you have any issues or need further guidance, please post a request to our developer forum for any help needed.

New Event Stream Live Monitoring stream_type

Today, we released a new stream_type for the GET /events API called admin_logs_streaming. This allows for near real time monitoring of events after they happen in Box.

We recommend that applications subscribing to live events through admin_logs migrate to admin_logs_streaming for the lowest and most consistent latency. This stream_type requires the user to be an enterprise admin or co-admin with the permission to Run new reports and access existing reports.

Updates

We have made several documentation updates to help you learn about the new option

• Completely reorganized the events guide section for easier understanding, including adding additional information to all pages in the various sections
• Updated the OpenAPI specification for the GET /events endpoint to include the new stream_type option of admin_logs_streaming
• Added a new how to migrate stream_type page with steps on switching

Where to get support

Should you have any issues or need further guidance, please post a request to our developer forum for any help needed.

Added Retention Policy Marker Based Pagination

Our OpenAPI specification has been updated for retention policy and retention policy assignment endpoints to show use of marker based pagination and fields query parameters.

Updates

The following updates were made:

• Added fields, limit, and marker query parameters to the GET /retention-policies and GET /retention-policies-id-assignments endpoints.
• Added limit and next_marker to the response object for retention policies and retention policy assignments

Where to get support

Should you have any issues or need further guidance, please create a post on our developer forum for any help needed.

Extend Retention Via Files API

Now, you can extend the retention date for a file that is already under retention using the new disposition_at field. If the date is extended, it cannot be reverted or updated to a date prior to the new date.

Updates

• Added a disposition_at field to the File(Full) resource
• Added a disposition_at parameter to the PUT file endpoint
• Added a note in the retention policy guide section

Where to get support

Should you have any issues or need further guidance, please post a request to our developer forum for any help needed.

Box Windows SDK v4.0.0 released

Breaking changes:

• Extract interfaces for BoxClient and Managers to improve testability (#603)
• Add BoxConfigBuilder and make BoxConfig immutable (#737)
• Expose tasks from async methods (#742)
• Use DateTimeOffset instead of DateTime (#749)
• Rework returned exceptions (#753)
• Upgrade .NET Standard to 2.0 (#755)

New Features and Enhancements:

• Add ability to get files under retention for assignment and file versions under retention for assignment (#734)
• Add is_collaboration_restricted_to_enterprise flag support for Folder update (#732)
• Replace insensitive language (#738)
• Add new, easier to use method for create terms of service user status (#740)
• Allow sort and direction parameter to be passed in when getting trashed items (#754)
• Add support for Task completion_rule field (#758)
• Add BoxSign API support (#765)

Bug Fixes:

• Fix Cannot access a closed Stream.Request exception during upload (#739) (#757)

https://www.nuget.org/packages/Box.V2/4.0.0

https://www.nuget.org/packages/Box.V2.Core/4.0.0

Box iOS SDK v5.0.0 released

Breaking Changes:

• Update PagingIterator to return pages and simplify logic (#737)
• Remove insensitive language field collaborationWhiteList in BoxClient. Use collaborationAllowList instead. (#790)

New Features and Enhancements:

• Replace insensitive event types (#785)
• Add SignAPI support (#792)

Box Sign Enterprise Events

Box Sign events are now available via the enterprise events stream. For full details, please see our Box Sign events guide.

Updates

• Add sign request document events: created, converted, completed, cancelled and expired
• Add sign request signer events: assigned, viewed by signer, downloaded, forwarded, signed and declined
• Add two new statuses: downloaded and downloaded and signed

App Diagnostics Report Feedback

We recently started releasing the new App Diagnostics Report to customers, and we would love to hear your thoughts! Visit the forum post to provide any feedback.