help menu

Join us on the Community Forums!

  • Community Guidelines

    The Fitbit Community is a gathering place for real people who wish to exchange ideas, solutions, tips, techniques, and insight about the Fitbit products and services they love. By joining our Community, you agree to uphold these guidelines, so please take a moment to look them over.

  • Learn the Basics

    Check out our Frequently Asked Questions page for information on Community features, and tips to make the most of your time here.

  • Join the Community!

    Join an existing conversation, or start a new thread to ask your question. Creating your account is completely free, and takes about a minute.

Not finding your answer on the Community Forums?

Cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 

FCrDNS alternative

‎07-19-2020 22:59

‎07-19-2020 22:59

We are trying to whitelist Fitbit source IPs based on recommended approach FCrDNS. But AWS API Gateway appears not to be supporting this. Is there any other way to have some access control to the updates API with AWS API Gateway?

Best Answer
Labels:
0 Votes
4 REPLIES 4

‎07-20-2020 09:17

‎07-20-2020 09:17

I brought up a similar question a while back in this thread.  It doesn't seem like an alternative will be provided.

Best Answer

‎07-28-2020 02:01

In response to LifeOmic-Dev

‎07-28-2020 02:01

Thanks for the advise. Using the signature header is one way but, the point of doing this earlier at the gateway level is to potentially block malicious attackers from hitting the backend with many invalid requests. So I am still looking for a viable alternative.

Best Answer
0 Votes

‎09-01-2020 01:47

In response to g.siang

‎09-01-2020 01:47

I would appreciate if FitBit support team can advise.

Best Answer
0 Votes

‎09-03-2020 05:31

In response to g.siang

‎09-03-2020 05:31

This wasn't a blocker for my team, but we also would have appreciated the additional layer of security.  I was just made aware of feature requests recently and created a request to address this issue: FCrDNS Alternative - Add API Keys to Subscriptions.

Best Answer
0 Votes