Fitbit web API question

[Healthcarechan]

organized the question details regarding the implementation of Fitbit web API.

1. What is the maximum setting of expires_in when requesting RefreshToken?
    Setting expires_in to 3153600 does not apply.

2. What should I use for unsubscribe token?
    Token when subscribing? The latest token?

[Gordon-C]

Hi @Healthcarechan 

1. Access tokens maximum lifespan is 8 hours (28800) when requesting a refresh token.   See https://dev.fitbit.com/build/reference/web-api/oauth2/#access-token-request.   

2. When the access token expires it becomes invalid.   You'll use the refresh token to obtain a new access token/refresh token pair.   Once the refresh token is used, it becomes invalid.   The new access token and refresh token provided will become the current tokens for the user. See https://dev.fitbit.com/build/reference/web-api/oauth2/#refreshing-tokens.   As long as you maintain the current active access token and refresh token, you will retain access to the user's data.   If you decide you want to revoke the access token, See https://dev.fitbit.com/build/reference/web-api/oauth2/#revoking-tokens