04-22-2016 17:07 - edited 04-22-2016 17:12
04-22-2016 17:07 - edited 04-22-2016 17:12
With Oauth1 if a user has given permission to the app and they go to the authorization url again then they are given the opportunity to Accept or Deny. If they Accept it goes to the callback url, if they Deny then it goes to the callback url and also removes the given permission.
Is this behavior different for Oauth2? When a user who already has permission goes to the authorlization url again (with a new code) does Fitbit simply redirect to the callback url? I was expecting to see the Authorization page again.
Thanks
EDIT: I see there is a "prompt" option I can specify. Based on my description if I was to keep the behavior the same I need to set the prompt to "consent" ?