help menu

Join us on the Community Forums!

  • Community Guidelines

    The Fitbit Community is a gathering place for real people who wish to exchange ideas, solutions, tips, techniques, and insight about the Fitbit products and services they love. By joining our Community, you agree to uphold these guidelines, so please take a moment to look them over.

  • Learn the Basics

    Check out our Frequently Asked Questions page for information on Community features, and tips to make the most of your time here.

  • Join the Community!

    Join an existing conversation, or start a new thread to ask your question. Creating your account is completely free, and takes about a minute.

Not finding your answer on the Community Forums?

Cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Automatic Authentication

ANSWERED

‎04-28-2015 11:10

‎04-28-2015 11:10

I am developing an application, which can read many different user's data, which are registered with us. How can my application uses API with user's login ID and password to be authenticated, then read the user's data.?

Best Answer
0 Votes
1 BEST ANSWER

Accepted Solutions

‎04-28-2015 11:14

‎04-28-2015 11:14

@RobertZh wrote:

I am developing an application, which can read many different user's data, which are registered with us. How can my application uses API with user's login ID and password to be authenticated, then read the user's data.?

You have to use OAuth 1.0 to authorize your application to be able to access the account's data. After that, you can use the token that is granted to indefinitely retrieve the user's data.

View best answer in original post

Best Answer
0 Votes
5 REPLIES 5

‎04-28-2015 11:14

‎04-28-2015 11:14

@RobertZh wrote:

I am developing an application, which can read many different user's data, which are registered with us. How can my application uses API with user's login ID and password to be authenticated, then read the user's data.?

You have to use OAuth 1.0 to authorize your application to be able to access the account's data. After that, you can use the token that is granted to indefinitely retrieve the user's data.

Best Answer
0 Votes

‎04-28-2015 15:04

In response to SunsetRunner

‎04-28-2015 15:04

Yes, I have done that. successfully authenticate my app and get the token and secret. Next step, I like to use user login id and password through the Fitbit API not the WEB login url to get the user data access token (so no login Fitbit screen popup). can you do this and how?

 

Thanks

Robert

Best Answer
0 Votes

‎04-28-2015 15:18

In response to RobertZh

‎04-28-2015 15:18

@RobertZh wrote:

Yes, I have done that. successfully authenticate my app and get the token and secret. Next step, I like to use user login id and password through the Fitbit API not the WEB login url to get the user data access token (so no login Fitbit screen popup). can you do this and how?

 

Thanks

Robert

That isn't possible. For the protection of the user, we don't allow anyone else to intercept their username/password. I understand that you maybe doing this for accounts you directly control, however we cannot verify that.

Best Answer
0 Votes

‎05-03-2015 00:32

In response to SunsetRunner

‎05-03-2015 00:32

Please include APIs to access user details without OAuth (with direct username/password).

Best Answer
0 Votes

‎05-04-2015 10:35

In response to kalyan

‎05-04-2015 10:35

@kalyan wrote:

Please include APIs to access user details without OAuth (with direct username/password).

We will never do this. This would allow third-party developers to access user credentials and would be a significant security risk.

 

OAuth 1.0a and OAuth 2.0 are designed specifically for faciliating access to data on a user's behalf with their permission and security in mind.

Best Answer