Cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Personal application and refresh tokens

I’m trying to use the web api with an app called Shortcuts.
I don't have much experience of api:s, so I used the authorization process from this shortcut to get an access key. 

The shortcut I linked uses the “personal” application setting in application settings.

My question is: Will i need to refresh that access token sometime?

I hope you understand what I meant, and sorry for my bad english.

Best Answer
0 Votes
1 REPLY 1

Hi @Hugo1 

 

To answer your question, it really depends on the authorization flow you use.   We advertise the authorization code grant flow [with PKCE] because most of our users are building corporate applications and this method provides the most secure access to user data.   However, for personal projects where you are querying your own data, the Implicit Grant Flow will be sufficient.   This authorization flow doesn't use a refresh token and the access token can last up to 1 year.   More information on the Implicit Grant Flow can be found in our documentation at https://dev.fitbit.com/build/reference/web-api/developer-guide/authorization/#Other-Supported-Author...  

 

Gordon

Gordon Crenshaw
Senior Technical Solutions Consultant
Fitbit Partner Engineering & Web API Support | Google
Best Answer
0 Votes