Hello,
i stored the user permanent accesstoken and tokensecret (and encoded userid) in my database.
As i read in the forum, this tokens are not expire, just when the user re-authenticate my app or revoke the rights.
This means, that i can use these token to access the user data without notifying the user?
My idea is:
I.) authenticating the user in the phone, then store the credentials in an azure database
II.) in a mobile services scheduled job (running once a day), download the last day summaryzed step data with the stored credentials
III.) send a push notification to the user (E.g. Yesterday you stepped x, well done etc.)
1.) Is there any problem with that workflow?
2.) In my app settings i setted the Default Access Type to read-only, is it okay?
3.) The callback url is my website, but i'm not calling the data request from there. That can be a problem?
4.) The application type is setted to browser, is there any difference with desktop (or just only that the verifier need to be typed manually, arent in the callback url)
I'm facing a problem, i can make request right after the authentication, but if i try with just the stored credentials (later, or after a server restart), i got "Invalid signature or token" error. Seems like i got only permanent tokens.
Thanks for your help.
