04-10-2017 01:17
04-10-2017 01:17
Dear Sir or Madam
This is Mr.Murakami of Neos Corp.
Our "Renobody" iOS app allows limited domain access only and allows "Fitbit.com" when using your API.
However, the following domain redirection has been confirmed from the most recent authentication screen.
(hen, we couldn't access to the authentication screen.)
cloudfront
fls.doubleclick.net
We would like to ask for one or more of the following to resolve the issue.
1. Stop redirection from the authentication screen
OR
2. Disclose domains that may redirect from the authentication screen
Sincerely
04-14-2017 08:34 - edited 04-14-2017 08:37
Fitbit Developers oversee the SDK and API forums. We're here to answer questions about Fitbit developer tools, assist with projects, and make sure your voice is heard by the development team.
04-14-2017 08:34 - edited 04-14-2017 08:37
renobody,
To better understand where redirection is happening, could you please post here the url for the [authentication screen] that you talk about in your post. Feel free to replace any security related data in it.
Could you also please PM to me you app id?
If you can post steps to reproduce here it would be delightful, as we can try following these steps to reproduce it on our end and be able to debug the issue.
Best Answer04-17-2017 18:49
04-17-2017 18:49
Service
Renobody App ID:2294P2
Current Status
When we access below URL from Renobody App to authenticate
https://www.fitbit.com/oauth2/authorize
Then a domain other than the Fitbit service is detected at that time,
it becomes a browser start to display that page
* in Renobody, domains other than "Fitbit.com" and "Api.fitbit.com" do not allow access.
Detected URL are below
https://4272175.fls.doubleclick.net/activity
https://20766817p.rfihub.com/ca.html
https://staticxx.facebook.com/connect/xd_arbiter/r/_dMxoUH0Bax.js
How to Replay
1. iOS Renobody app DL from Apple store
2. Register (required User name, e-mail address, and PW)
3. Setting
4. Select fitbit device and setting
5. Then, launch Safari and direct to below URL
https://4272175.fls.doubleclick.net
Best Answer04-27-2017 23:05
04-27-2017 23:05
Thank you for your reply We will inform you of URL details.
Best Answer