My app links to the FitBit API. The users (via my portal) give my app access permission via FitBit's OAUTH API to grab data for the users. All works fine EXCEPT many of my users use a shared computer. FitBit is remembering credentials from the previous user and not prompting for a password when they request permission for access. The end result is that I get the previous user's fitbit associated with the current user. Is there a way to force the actual fitbit login screen (by erasing cookies?) instead of having fitbit remember them? Does anyone know how to do this? I'm using php with the net.manuellemos.oauth oauth package if that matters.
11-07-2014 13:35
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post

Accepted Solutions
11-10-2014 05:06
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post

11-10-2014 05:06
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post
- Who Voted for this post?
found it ... i just added requestCredentials=true to the URL and it works fine. that's what your "Not You" button does. that's what i needed.
thanks much!
don
11-07-2014 13:41 - edited 11-07-2014 13:42
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post


11-07-2014 13:41 - edited 11-07-2014 13:42
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post
Hello,
If you application will redirect users to https://www.fitbit.com/oauth/authorize?oauth_token={YOUR_TOKEN}
then they will see log in screen regardless, if they are already logged in they will see windows that ask them to confirm that they logged in with valid account.
Senior Software Developer at Fitbit

11-10-2014 04:50
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post

11-10-2014 04:50
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post
to be clear this is the screen they are seeing. they are NOT noticing the "not you" link. what i would like is to show the user id/password prompt instead of just showing the allow/deny buttons. or if i could forceably logout whomever is logged in on a computer that would be fine too.

11-10-2014 05:06
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post

11-10-2014 05:06
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post
- Who Voted for this post?
found it ... i just added requestCredentials=true to the URL and it works fine. that's what your "Not You" button does. that's what i needed.
thanks much!
don
