Login with Box account

Question

Is it possible to implement a "login with your Box account" feature similar to what we have with Facebook and others oauth providers?

I've tried to build something like that following Box's oauth tutorial, but every time the user authenticates, it asks not only for login and password but also for granting access for my application even if the app has been already granted access.

Is there a way to make Box remember that the user has already granted access for my application?

Answer 1

This is not going to be possible: I have been in touch with Box's Product and Platform team and this is the response I got:

It's unlikely that we're going to support persistent login in the near future. This is related to our implementation of OAuth2. It's possible for clients to have their secrets hijacked, and requiring a handshake request with that secret plus a one-time auth token provides added security.

Answer 2

This is entirely under Box's control. They currently force you to go through the authentication process every time and there's no way around this.

Your best bet is to post something to the developer forum and ask them if they can remember if a logged in user as approved your app and skip the authentication process.

http://developers.box.com/forum/