11-07-2014 12:33
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post

11-07-2014 12:33
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post
Hello,
I'm currently writing a Fitbit app for Ubuntu, which would allow for the same app to be used on multiple devices (for example, its on my phone and on my desktop). The problem is that when I log in with my account on the second device (say, my PC), it seems to remove access from my first device (my phone). Is this expected? Is there any way around this?

- Labels:
-
OAuth 1.0a
11-07-2014 12:34 - edited 11-07-2014 12:37
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post


11-07-2014 12:34 - edited 11-07-2014 12:37
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post
Yes.This is expected behavior.
For security reasons you can not authorize more then one application per consumer key.
The workarounds would be:
1) create two applications on dev.fitbit.com
2) Alternatively you may have a way to let your web application and mobile application to re-use the same access token and access token secret.
Senior Software Developer at Fitbit

11-07-2014 12:36 - edited 11-07-2014 12:37
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post

SunsetRunner
11-07-2014 12:36 - edited 11-07-2014 12:37
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post
@cwayne18 wrote:
Hello,
I'm currently writing a Fitbit app for Ubuntu, which would allow for the same app to be used on multiple devices (for example, its on my phone and on my desktop). The problem is that when I log in with my account on the second device (say, my PC), it seems to remove access from my first device (my phone). Is this expected? Is there any way around this?
One possible work around is to have your app store the credentials on the server and make those API calls from the server or securely pass the credentials from the server to the client.
This is something that will be addressed with OAuth 2.

11-07-2014 12:37
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post

11-07-2014 12:37
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post
Ah, okay.. So I'll just need to register each form-factor as a different app then (certainly less than ideal, but I suppose it makes sense)

11-07-2014 12:39
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post

11-07-2014 12:39
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post
Do you have an ETA on when the switch to OAuth2 will occur?

11-07-2014 12:41
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post

SunsetRunner
11-07-2014 12:41
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post
@cwayne18 wrote:
Do you have an ETA on when the switch to OAuth2 will occur?
In the coming months. https://community.fitbit.com/t5/Web-API/October-2014-Fitbit-API-Updates-and-Deprecations/m-p/564226

