# Box.com API authentication

**URL:** <https://forum.bubble.io/t/box-com-api-authentication/157142>\
**Category:** APIs\
**Created:** [June 24, 2021, 5:10am UTC](https://forum.bubble.io/t/box-com-api-authentication/157142 "2021-06-24T05:10:22Z")\
**Posts on this page:** 1\
**Showing post:** 4

<div class="post-metadata">

**Author:** ![davis.systems](https://sea1.discourse-cdn.com/bubble/user_avatar/forum.bubble.io/davis.systems/32/37665_2.png) [@davis.systems](https://forum.bubble.io/u/davis.systems)\
**Post date:** [June 26, 2021, 5:33am UTC](https://forum.bubble.io/t/box-com-api-authentication/157142/4 "2021-06-26T05:33:46Z")

</div>

Sound advice @johnny. I went through the [box.com](http://box.com) authentication guide and focussed on the JWT Auth ([https://developer.box.com/guides/authentication/jwt/](https://developer.box.com/guides/authentication/jwt/)) as this is what I have already the Bubble published plugin uses ( [BOX Plugin Instructions - Tips - Bubble Forum](http://forum.bubble.io/t/box-plugin-instructions/13310)) as per the screenshot below.

As you can see from the [Box.com](http://Box.com) documentation, the first decision is whether we are using the SDK or not. I’m guessing not SDK as the SDK method seem to read the entire JWT config in and provide methods to generate a token without needing to do much more, but the API Connector plugin requires more detail as per this screenshot:

 ![image](https://us1.discourse-cdn.com/bubble/original/3X/7/7/77639bbed221863b838a6beb360960439c3ed78c.png)

So, assuming we need to following the [non-SDK path](https://developer.box.com/guides/authentication/jwt/without-sdk/) we need to provide either a public and private keypair OR a client id and client secret. As per the screenshot above, it looks like we are using the public/private keypair path.

So, as per the documentation:

 ![image](https://us1.discourse-cdn.com/bubble/original/3X/7/e/7eed91b1b60328a656be46fcd9dc3bd0a5351acf.png)

…all prereqs have been met in order to configure the [Box.com](http://Box.com) plugin!!

The question is how to apply the fields in the config.json file to our API Connector JWT auth?

Private Key is the only really obvious field.

How about:

- Scope? Is this the same as publicKeyId?
- Iss (account email)? Am guessing this is the same email as used on the admin account the owns the JWT application in [Box.com](http://Box.com)?
- Access token endpoint? Am guessing this is the URL of the Bubble application I am building?

I’ve tried lots of different combinations in these fields without much luck and I’m finding the [Box.com](http://Box.com) API guide not much help from here as it offers a lot of coding examples and I don’t really know how the API Connector plugin is coded…

Any ideas? Anyone interested in helping me solve this? Would be happy to pay for time at this point.

---

_[View the full topic](https://forum.bubble.io/t/box-com-api-authentication/157142)._