Unsubscribe from notification when I don't have user credentials

[hsalbi]

I have an issue that I cannot unsubscribe users from notification because I only have SubscriptionId and UserVendorId received from the notification. I don't have user token and secret. 

Any suggestion on how to unsubscribe the user ?

[Gondwana]

(Post moved to Web API forum.)

[Gordon-C]

Hi @hsalbi 

It's a requirement that you keep the access token and refresh token for each user so you can call the endpoints for that user.   Unfortunately, there are not a lot of options for you if you do not have the tokens.   To revoke the token, which would also unsubscriber the user, still requires the access token.  See Revoke Token.  

I think you have only 2 options

1. You can reach out to the user and ask them to revoke consent to your application.
2. Revoke the tokens for all users from your application.  This can be done at dev.fitbit.com in your client ID settings.  This is a more drastic approach and not recommended unless you have a method to request your users to reconsent to your application.

[hsalbi]

I revoked the client access token, but that didn't stop the notifications

[Gordon-C]

Thanks for confirming.   I will reach out to you directly to get some more information to debug the issue.