help menu

Join us on the Community Forums!

  • Community Guidelines

    The Fitbit Community is a gathering place for real people who wish to exchange ideas, solutions, tips, techniques, and insight about the Fitbit products and services they love. By joining our Community, you agree to uphold these guidelines, so please take a moment to look them over.

  • Learn the Basics

    Check out our Frequently Asked Questions page for information on Community features, and tips to make the most of your time here.

  • Join the Community!

    Join an existing conversation, or start a new thread to ask your question. Creating your account is completely free, and takes about a minute.

Not finding your answer on the Community Forums?

Cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 

OAuth 2.0 authentication in JavaScript examples?

‎12-20-2015 23:07

‎12-20-2015 23:07

Hi dev community,

I'm just getting started learning how to write web applications in general and I'd really appreciate some guidance. To start things off I'd like to write a simple program with the Fitbit API in HTML and JavaScript in which the user presses a button to go through the OAuth 2.0 authentication flow, and is then shown their username. Now that OAuth 1.0 is deprecated and about to be removed, I'm having a hard time finding example code using 2.0. Does anyone have any examples or this, or could at least point me in the right direction? I'm just trying to go with the simplest possible code. Thanks!

Best Answer
Labels:
1 REPLY 1

‎12-23-2015 14:48

‎12-23-2015 14:48

Send the user through the OAuth 2.0 Implicit Grant flow. This ends with the user being redirected to your HTML page with an access_token in the URL fragment. You can use JavaScript to get the access_token value out of the fragment. Then, make XHRs to the URL of the resource you want to access with an "Authorization: Bearer TODO_put_your_access_token_here" header.

Best Answer
0 Votes