Cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

People sharing a computer and not logging out

ANSWERED

My app links to the FitBit API. The users (via my portal) give my app access permission via FitBit's OAUTH API to grab data for the users. All works fine EXCEPT many of my users use a shared computer. FitBit is remembering credentials from the previous user and not prompting for a password when they request permission for access. The end result is that I get the previous user's fitbit associated with the current user. Is there a way to force the actual fitbit login screen (by erasing cookies?) instead of having fitbit remember them? Does anyone know how to do this? I'm using php with the net.manuellemos.oauth oauth package if that matters.

 

Best Answer
0 Votes
1 BEST ANSWER

Accepted Solutions

found it ... i just added requestCredentials=true to the URL and it works fine. that's what your "Not You" button does. that's what i needed.

thanks much!

don

View best answer in original post

Best Answer
3 REPLIES 3

Hello,

 

If you application will redirect users to https://www.fitbit.com/oauth/authorize?oauth_token={YOUR_TOKEN}

then they will see log in screen regardless, if they are already logged in they will see windows that ask them to confirm that they logged in with valid account.

 Screen Shot 2014-11-07 at 1.40.01 PM.png

 

Ivan Bahdanau
Senior Software Developer at Fitbit
Best Answer
0 Votes

to be clear this is the screen they are seeing. they are NOT noticing the "not you" link. what i would like is to show the user id/password prompt instead of just showing the allow/deny buttons. or if i could forceably logout whomever is logged in on  a computer that would be fine too.

Best Answer
0 Votes

found it ... i just added requestCredentials=true to the URL and it works fine. that's what your "Not You" button does. that's what i needed.

thanks much!

don

Best Answer