01-09-2015 01:54
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post

01-09-2015 01:54
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post
Over the last few days I've been recieving oauth error messages when trying to authenticate with a users access token. I'm using a node.js app to connect. The message I recieve is as below (I've obfuscated the tokens).
Invalid signature or token 'xxxx' or token 'xxxx'

- Labels:
-
JavaScript
-
OAuth 1.0a
01-09-2015 13:08
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post


01-09-2015 13:08
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post
Hello, the only possible reason for message
[Invalid signature or token 'xxxx' or token 'xxxx']
can be either invalid signature or invalid token. Please check your signature or token that you're using.
Senior Software Developer at Fitbit

01-09-2015 13:10
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post

01-09-2015 13:10
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post
Yes, I understand the error message, the problem is that the same set of credentials will sometimes work, and sometimes not. I've even used your API debugging tool with the same results.

01-09-2015 13:13
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post


01-09-2015 13:13
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post
Please check endpoints you're using. Some api endpoints do not require user's token.
This is the only reason I can see that it sometimes work and sometimes is not.
Try to figure out what are conditions when credentials work and when they don't
Senior Software Developer at Fitbit

06-28-2016 10:45
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post

06-28-2016 10:45
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post
I'm not sure if you've already solved this problem, but I've also been experiencing it. For the record, it was happening because of non-urlencoded characters in my generated oauth_signature parameter. Occasionally a signature would be generated with only alphanumeric characters, and these would succeed; the rest would not. Properly encoding the signature solved the problem!

