Fitbit Api Returning 403 for Profile Calls

[akacool]

Hello,

  I'm facing an issue where I'm getting the following error:

"errorType": "insufficient_scope","message": "This application does not have permission to access profile data. Visit https://dev.fitbit.com/docs/oauth2 for more information on the Fitbit Web API authorization process."

  I received the access_token (which was working before) through the normal OAuth2 process (basically I placed a breakpoint in my code, copied that access token, and pasted it in hurl.it.

  This process was working for me a few days ago, so I'm not quite sure if something has changed.

  Details:

GET https://api.fitbit.com/1/user/-/profile.json

Accept: */*

Accept-Encoding: gzip, deflate

Authorization: Bearer <Insert Access Token Here>

User-Agent: runscope/0.1

I have confirmed that for the user account I'm accessing has the correct permissions:

Access & Write
activity and exercise

I can provide more details/information if needed.

[SunsetRunner · Accepted solution]

It doesnt appear that you have the profile scope from your post. Can you confirm?

https://dev.fitbit.com/docs/oauth2/#scope

[akacool]

Ah, yes, I seem to only have had the activity scope set.  You just saved me hours of debugging.  Thanks!

[SunsetRunner]

---

@akacool wrote:

Ah, yes, I seem to only have had the activity scope set.  You just saved me hours of debugging.  Thanks!

---

Excellent, glad that helped! As a future troubleshooting tip, take a look at the body of the error response, it usually includes more information.