Box authentication with API without user authorization

Question

Question about Box authentication with API:

We have a requirement where in we need to interact with Box from a headless (non web) script, to do operations like saving file to Box folder / retrieve file from Box folder / tag a file or folder in Box etc.

Recommended Standard OAuth 2.0 requires app authorization by redirecting user to Box authorization URI (https://developer.box.com/docs/authenticate-with-oauth-2). I don't want to use JWT for security reasons imposed by my organization.

Is there a way one can circumvent this approach. We need absolutely no user interaction (even for input of user ID and password) when interacting with Box using APIs.

Answer 1

I have automated interaction with the Box API using this method. A Box app will have to be created, then authorised by an admin. If it is of any use I wrote the process up here.

You could make use of the Box CLI which I've used to script bulk file uploads / manipulations.