02-06-2025 14:43 - edited 02-06-2025 14:49
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post

02-06-2025 14:43 - edited 02-06-2025 14:49
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post
https://www.fitbit.com/oauth2/authorize?response_type=code&client_id=#&redirect_uri=#%2F&scope=activity%20heartrate%20settings%20sleep%20oxygen_saturation%20profile%20respiratory_rate&code_challenge=#&code_challenge_method=S256
Here is my URL with 7 scopes added. When I include only 6 scopes, it works fine, but with 7 scopes, one of them gets skipped.
I want to know if Fitbit has a limitation on the number of scopes or if there is a bug on my end.
02-07-2025 12:06
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post



02-07-2025 12:06
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post
Hi @usamaa
You can add all of the scopes in your authorization URL. I'll reach out to you directly to get some more information from you.
Senior Technical Solutions Consultant
Fitbit Partner Engineering & Web API Support | Google

03-10-2025 15:48
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post

03-10-2025 15:48
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post
I'm still facing the same issue. Can you please help me?
When I select the scopes manually, the last one i select is ignored.
For example ==> if i click on profile's checkbox in the last the it gets ignored.
and if is click on allow all then the settings gets ignored
Here is the URL I am using:
https://www.fitbit.com/oauth2/authorize?response_type=code&client_id=&redirect_uri=https%3A%2F%2Ffit...

03-12-2025 06:18
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post



03-12-2025 06:18
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post
What do you mean by the last checkbox gets ignored?

03-12-2025 13:22
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post

03-12-2025 13:22
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post
For example if i select sleep in the last from this list in the screenshot then it gets skipped

03-13-2025 07:16
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post



03-13-2025 07:16
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post
How do you know it gets skipped? When you use the /oauth2/token endpoint to exchange the authorization code for the access token and refresh token, do you see all the scopes listed in the response. For example
If you're getting an error when calling the endpoint for sleep, what is the syntax you are calling and the error message received?

