AZM

[ElliotAld]

I'm trying to access AZM data from the Web API, but I receive a 403 Permission denied Response:

{'error': {'code': 403,
  'message': 'The caller does not have permission',
  'status': 'PERMISSION_DENIED'}}

The App Scope is personal and the scope "activity" is included in my access token. Full List of my access token scopes:

weight sleep activity social irregular_rhythm_notifications nutrition respiratory_rate profile location electrocardiogram settings heartrate temperature cardio_fitness oxygen_saturation

I'm trying to access the following route: (note: [date] is replaced with a real yyyy-mm-dd value, but it's blocked in this forum)

'https://api.fitbit.com/1/user/-/activities/active-zone-minutes/date/[date]/1d/1min.json'

I have found several other users reporting the same issue last year, but couldn't find a solution to solve this.

• https://community.fitbit.com/t5/Web-API-Development/Getting-403-error-pulling-my-own-intraday-data-f...
• https://community.fitbit.com/t5/Web-API-Development/Personal-APP-Intraday-API-client-is-not-authoriz...

How can I access AZM data with my personal access token that should allow accessing everything?

Any help appreciated!

[Gordon-C]

Hi @ElliotAld 

I am able to successfully pull my personal AZM intraday data.  Therefore, I'm not certain the issues you referenced are the same thing.   When the "OAuth 2.0 Application Type" setting is personal, your application can only query the data of the application owner.  Otherwise, you will get a 403 error.  Are you able to query other intraday data, such as https://dev.fitbit.com/build/reference/web-api/intraday/get-activity-intraday-by-date/?  It would be good to double-check that when you go through the authorization flow to share your data, you sign into the same Google account as the developer account.

[ElliotAld · Accepted solution]

Apologies, for some reason the application type changed to server. After changing it back to personal, the requests for the azm endpoint works now.