Does Revoking a User Token Also Remove Any Subscriptions for the User?

[Jeff_New_Ocean]

Does revoking a user token (using https://dev.fitbit.com/build/reference/web-api/oauth2/#revoking-tokens) also remove any subscriptions for the user?

I want to provide an option in my app for the user to "Disconnect" data feed from Fitbit. I'm assuming I need to

1. Remove any Subscriptions for the user
2. Revoke the user's token

Thanks!

[JohnFitbit]

Hi @Jeff_New_Ocean.

When a user revokes consent to an application, Fitbit automatically deletes any subscriptions associated with that user and application. This prevents the application from receiving notifications for tokens that were invalidated.

Just so I understand, in addition to providing your Fitbit users an option to revoke consent to your application, you also want these users to have control of when your application is being alerted of new data available on their account? 

[Jeff_New_Ocean]

Hi @JohnFitbit,

I was looking to give the users the ability to disconnect their Fitbit data consent from within our app (if they are connected), in the same location that they can decide to connect their Fitbit to our app (if they are not connected yet). I just assumed for completeness that if the user decided to revoke consent to our application (from within our app), we needed to also remove any subscriptions that were created for them.

[Gordon-C · Accepted solution]

hi @Jeff_New_Ocean 

When the user revokes consent, we can sent you a notification stating the revoked occurred, and we should be deleting the subscription.   If you want to execute the Delete Subscription endpoint to confirm the subscriptions are removed, you can.   However, it should not be neccessary.

Gordon