To use the Box APIs it is important that your application and users have access to the following domains, where needed.
The following API domains are used to download files via the Box API.
api.box.comto initially request a file to download
dl.boxcloud.comto actually download files for authenticated users
public.boxcloud.comto actually download files for unauthenticated users
The following API domains are used to upload files via the Box API.
api.box.comto start a file upload
upload.box.comto upload the file to Box