Downloading a file is not always the desired solution, especially if the file is
only being downloaded for the user to preview, comment, or annotate. In those
cases we recommend using one of the ways to embed the Box experience straight
into your application.
It is important to realize that the application needs to have access to the
file that is to be downloaded. When the application is a authenticated through
JWT or App Tokens, the user is authenticated as a Service Account. This service
account does not have access to files besides their own.If this user does not have access to the file the application will receive a
404 Not Found error.