Windows SDK for v2 of the Box API. The SDK is built upon the Portable Class Library and targets the following frameworks: .NET for Windows Store apps, .NET Framework 4.0.3, Silverlight 4 and higher, Windows Phone 7.5 and higher.
Latest commit 0ac3e1b Feb 24, 2017 @coolboy coolboy committed on GitHub Merge pull request #284 from box/mupload-p1
MultiPut upload part1

Project Status Build status

Box Windows V2 SDK

Windows .NET SDK for V2 of the Box API that is usable from the following frameworks:

  • .NET Framework 4.0.3 and higher
  • .NET for Windows Store apps
  • Silverlight 4 and higher
  • Windows Phone 7.5 and higher
  • .NET Core 1.0 or above


  • Visual Studio 2012 w/ Update 2 CTP (or higher)
  • Windows Phone SDK 8.0 (if running Windows Phone samples)
  • Windows Store SDK (if running Windows Store samples)
  • .NET Core SDK (if running .NET Core samples)

Quick Start


Install the SDK using Nuget

PM> Install-Package Box.V2

For use with Box Platform Developer or Box Platform Enterprise, also install JWT support using Nuget

PM> Install-Package Box.V2.JWTAuth

If you want to use .NET Core, which has JWT support build in already.

PM> Install-Package Box.V2.Core

If you haven't already created an app in Box go to and click 'Sign Up'


Using a Developer Token (generate one in your app admin console; they last for 60 minutes)

var config = new BoxConfig(<Client_Id>, <Client_Secret>, new Uri("http://localhost"));
var session = new OAuthSession(<Developer_Token>, "NOT_NEEDED", 3600, "bearer");
client = new BoxClient(config, session);

Using with Box Platform Developer or Box Platform Enterprise

var boxConfig = new BoxConfig(<Client_Id>, <Client_Secret>, <Enterprise_Id>, <Private_Key>, <JWT_Private_Key_Password>, <JWT_Public_Key_Id>);
var boxJWT = new BoxJWTAuth(boxConfig);
var adminToken = boxJWT.AdminToken(); //valid for 60 minutes so should be cached and re-used
var adminClient = boxJWT.AdminClient(adminToken);
Create an App User
//NOTE: you must set IsPlatformAccessOnly=true for an App User
var userRequest = new BoxUserRequest() { Name = "test appuser", IsPlatformAccessOnly = true };
var appUser = await adminClient.UsersManager.CreateEnterpriseUserAsync(userRequest);

//get a user client
var userToken = boxJWT.UserToken(appUser.Id); //valid for 60 minutes so should be cached and re-used
var userClient = boxJWT.UserClient(userToken, appUser.Id);

//for example, look up the app user's details
var userDetails = await userClient.UsersManager.GetCurrentUserInformationAsync();

Using with OAuth2


Set your configuration parameters and initialize the client:

var config = new BoxConfig(<Client_Id>, <Client_Secret>, <Redirect_Uri>);
var client = new BoxClient(config);

Bundled with the SDK are sample applications for both Windows 8 and Windows Phone which include sample OAuth2 Workflows. The authentication workflow is a 2-step process that first retrieves an Auth Code and then exchanges it for an Access/Refresh Token

Windows 8

string authCode = await OAuth2Sample.GetAuthCode(config.AuthCodeUri, new Uri(config.RedirectUri));
await client.Auth.AuthenticateAsync(authCode);

Windows Phone

// Ensure the OAuth2Sample control is placed at the root level of the application page xaml and named "oAuth2Sample"
// Subscribe to the received call back 
oAuth2Sample.AuthCodeReceived += async (s, e) =>
    var auth = s as OAuth2Sample;
    await client.Auth.AuthenticateAsync(auth.AuthCode);
// Navigate and show the login page
oauth.GetAuthCode(config.AuthCodeUri, config.RedirectUri);

Other (ASP.NET)

Alternatively, a completely custom OAuth2 authentication process can be used in place of the provided workflows, for example, in a custom web application. In this scenario, a fully formed OAuthSession object should be passed in when instantiating the BoxClient.

OAuthSession session = // Create session from custom implementation
var client = new BoxClient(config, session);


Get Folder Items

// Get root folder with default properties
var items = await client.FoldersManager.GetFolderItemsAsync("0", 500);

Get File Information

BoxFile f = await client.FilesManager.GetInformationAsync(fileId);

Update a Files Information

// Create request object with new property values
BoxFileRequest request = new BoxFileRequest()
    Id = fileId,
    Name = "NewName",
    Description = "New Description"
BoxFile f = await client.FilesManager.UpdateInformationAsync(request );

Upload a New File

BoxFile newFile;

// Create request object with name and parent folder the file should be uploaded to
using (FileStream stream = new FileStream(@"C:\\example.pdf", FileMode.Open))
    BoxFileRequest req = new BoxFileRequest()
        Name = "example.pdf",
        Parent = new BoxRequestEntity() { Id = "0" }
    newFile = await client.FilesManager.UploadAsync(req, stream);

Upload a New File with Content MD5 hash

BoxFile newFile;

// Create request object with name and parent folder the file should be uploaded to
using (FileStream stream = new FileStream(@"C:\\example.pdf", FileMode.Open))
using (SHA1 sha1 = SHA1.Create())
    BoxFileRequest req = new BoxFileRequest()
        Name = "example.pdf",
        Parent = new BoxRequestEntity() { Id = "0" }

    byte[] md5Bytes = sha1.ComputeHash(fs);

    newFile = await client.FilesManager.UploadAsync(req, stream, contentMD5: md5Bytes);

Perform Preflight Check for a new file upload

    var req = new BoxPreflightCheckRequest() { Name = "example.pdf", 
                                               Parent = new BoxRequestEntity() { Id = "0" },
                                               Size = 10000 //set the size if known, otherwise don't set (i.e. for a stream)

    //exception will be thrown if name collision or storage limit would be exceeded by upload                                    
    await userClient.FilesManager.PreflightCheck(req);
catch (BoxPreflightCheckConflictException<BoxFile> bex)
    //Handle file name collision error  
catch (BoxException bex)
    //Handle storage limit error 

Perform Preflight Check for a new version of file

    var req = new BoxPreflightCheckRequest() { Size=10926 };

    //exception will be thrown if storage limit would be exceeded by uploading new version of file
    await userClient.FilesManager.PreflightCheckNewVersion(existingFile.Id, req);                                    
catch (BoxException bex)
    //Handle storage limit error

Download a File

Stream stream = await client.FilesManager.DownloadStreamAsync(fileId);

Get Temporary Download Uri for a file

This method will retrieve a temporary (15 minute) Uri for a file that can be used, for example, to send as a redirect to a browser, causing the browser to download the file directly from Box.

var downloadUri = await client.FilesManager.GetDownloadUriAsync(fileId);

Search using Metadata

var filter = new 
    someKey = "blah", 
    expiresOn = new {gt = new DateTime(2015,1,1), 
             lt = new DateTime(2015,9,1)},
    count = new {gt = 5, lt = 10},
    option = "value1"

var mdFilter = new BoxMetadataFilterRequest() 
    TemplateKey = "yourTemplate", 
    Scope = "enterprise", 
    Filters = filter 

//currently only one BoxMetadataFilterRequest element is supported; in the future multiple will be supported (hence the List)
var results = await client.SearchManager.SearchAsync(mdFilters: new List<BoxMetadataFilterRequest>() { mdFilter });

Make API calls with As-User

If you have an admin token with appropriate permissions, you can make API calls in the context of a managed user. In order to do this you must request to activate As-User functionality for your API key (see developer site for instructions).

var config = new BoxConfig(<Client_Id>, <Client_Secret>, <Redirect_Uri);
var auth = new OAuthSession(<Your_Access_Token>, <Your_Refresh_Token>, 3600, "bearer");

var userId = "12345678"
var userClient = new BoxClient(config, auth, asUser: userId);

//returns root folder items for the user with ID '12345678'
var items  = await userClient.FoldersManager.GetFolderItemsAsync("0", 500);

Suppressing Notifications

If you are making administrative API calls (that is, your application has “Manage an Enterprise” scope, and the user making the API call is a co-admin with the correct "Edit settings for your company" permission) then you can suppress both email and webhook notifications.

var config = new BoxConfig(<Client_Id>, <Client_Secret>, <Redirect_Uri);
var auth = new OAuthSession(<Your_Access_Token>, <Your_Refresh_Token>, 3600, "bearer");

var adminClient = new BoxClient(config, auth, suppressNotifications: true);

File/Folder Picker

The Box Windows SDK includes a user control that allows developers an easy way to drop in a file and or folder picker in just one line of code

File Picker

<controls:BoxItemPickerLauncher Client="{Binding Client}" />

Folder Picker

<controls:BoxItemPickerLauncher Client="{Binding Client}" ItemPickerType="Folder" />

You can attach an event handler to the ItemSelected event to handle when an Item is selected. Please see sample apps for additional detail on how the controls look and work.


Unit tests are included that use Moq to simulate network requests and responses. These tests can be found in the Box.V2.Test project


Documentation of all classes and methods are provided through the standard <summary></summary> xml tags. The easiest way to view these is through Visual Studio's built in "Object Browser" (VIEW -> Object Browser, or CTRL+W, J).

Other Resources

Known Issues

Windows 8 Sample OAuth2 uses desktop login screen instead of mobile. Pending fix from platform team.

Copyright and License

Copyright 2014 Box, Inc. All rights reserved.

Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.