Authorize user

GET https://{{account.box.com}}/api/oauth2/authorize?response_type=code&client_id={{client_id}}

Authorize a user by sending them through the Box

https://developer.box.com/reference/get-authorize

Request Params

KeyDatatypeRequiredDescription
response_typestringThe type of response we'd like to receive.
client_idstringThe Client ID of the application that is requesting to authenticate
the user. To get the Client ID for your application, log in to your
Box developer console and click the Edit Application link for
the application you're working with. In the OAuth 2.0 Parameters section
of the configuration page, find the item labelled client_id. The
text of that item is your application's Client ID.
redirect_uristringThe URI to which Box redirects the browser after the user has granted
or denied the application permission. This URI match one of the redirect
URIs in the configuration of your application. It must be a
valid HTTPS URI and it needs to be able to handle the redirection to
complete the next step in the OAuth 2.0 flow.
Although this parameter is optional, it must be a part of the
authorization URL if you configured multiple redirect URIs
for the application in the developer console. A missing parameter causes
a redirect_uri_missing error after the user grants application access.
statestringA custom string of your choice. Box will pass the same string to
the redirect URL when authentication is complete. This parameter
can be used to identify a user on redirect, as well as protect
against hijacked sessions and other exploits.
scopestringA space-separated list of application scopes you'd like to
authenticate the user for. This defaults to all the scopes configured
for the application in its configuration page.

RESPONSES

status: OK