OAuth 2.0 "Client Credentials Grant" planned?

[etmmiko]

Hi,

Are there any plans to also implement the "Client Credentials Grant" for OAuth 2.0? This grant is suitable for machine-to-machine authentication.

A usecase could be that data from FitBit (e.g. together with data form other devices) would be retrieved by a Java application. This means that it's not able to fill in the consent page.

Thanks in advance.

[JeremiahFitbit]

1. It's Fitbit, not FitBit 🙂

2. We are considering this or the ability to generate a never expiring access token. The restriction would be that only the application owner would be able to authenticate the application in this manner. We don't want third-party applications ever handling people's primary credentials.

[metalzack]

any updates here?  I want to sync my intra day data and having to click authorize every single time would be ridiculous.