Oauth2 issue with Home Assistant integration

[guzzzt]

I try to figure out how to get the fitbit integration in home assistant to work. The issue I have is that an link to my fitbit app is created and opened but the redirect_uri parameter is not accepted

Developer information: invalid_request - Invalid redirect_uri parameter value

The link is like this: https://www.fitbit.com/oauth2/authorize?response_type=code&client_id=********&redirect_uri=https://m...

Setting the redirect_uri to "https://my.home-assistant.io" is a home assistant feature to get https for a server that is hosted on the local network where TLS is not always setup. Why is that not accepted by the fitbit server?

[Gordon-C · Accepted solution]

Hi @guzzzt 

The redirect URL should be an open endpoint where the authorization code can be accepted and processed.   Is that the case with https://my.home-assistant.io or is there another endpoint?   Also, https://my.home-assistant.io needs to be listed in your application settings at https://dev.fitbit.com/apps.

[guzzzt]

Thank you, changing the redirect URL to https://my.home-assistant.io/redirect/oauth on https://dev.fitbit.com/apps fixed it for me.

[GodMode9]

An OAuth2 issue with Home Assistant integration could stem from incorrect client credentials, mismatched redirect URIs, or insufficient permissions granted during the authentication process.

[Sergeant82d]

Hey Gordon C. - your answer is mostly great... but if you can, please clarify exactly *where* the https://my.home-assistant.io/ URL needs to be listed on the https://dev.fitbit.com/apps page? Which field, of the five possible? For those of us simply taking advantage of the value added to our Fitbits by incorporating them (trying to!) into our smart home systems, I for one don't automatically know how to fill out the App Registration form. It's simple enough, but most of us are "enthusiasts", not "actual" developers... 🙂

BTW, the OAuth Tutorial page linked from the Registration page is excellent - very helpful. But still aimed at pros, not us wannabees. A little extra detail on the 5W's would be extremely helpful. Thanks! Brad

[guzzzt]

This is how I have it configured, so it is Redirect URL that should have value "https://my.home-assistant.io/redirect/oauth".

Application Name *: HA
Description *: Home assistant
Application Website URL *: https://home-assistant.io
Organization *: HA
Organization Website URL *: https://home-assistant.io
Terms of Service URL *: https://home-assistant.io
Privacy Policy URL *: https://home-assistant.io
OAuth 2.0 Application Type *: Server
Redirect URL *: https://my.home-assistant.io/redirect/oauth
Default Access Type *: Read Only

[GordonFitbit]

Thank you @guzzzt for providing your settings.

@Sergeant82d  - https://my.home-assistant.io/redirect/oauth, from the example provided, is the open endpoint where the authorization code can be accepted and processed.  You provide the URL in the redirect URL field.  We provided this information in the Getting Started guide.  We tried to write the content for all types of developers.  But, we will take another look at the content to see if we can clarify the information more.

Thanks for your feedback.