An OmniAuth strategy for Box (OAuth v2)