Fitbit HTTPS Authentication

Hi,

Nice simple use case for once:
- I am using the provided login_with_fitbit.php page and the 22/12/2014 software version
- When I run the page (after inputting my application's id and secret) I get the following message:

OAuth client result

It was not possible to use the application access token.
Error: it was not possible to access the OAuth request token: it was returned an unexpected response status 400 Response: {"errors":[{"errorType":"request","fieldName":"n/a","message":"This request should use https protocol."}],"success":false}

The server is definitely running on https, as is the page itself.

Sorry for the delay.

Yes, Fitbit seems to require https in the endpoint URLs to obtain the tokens. I have fixed the oauth_configuration.json file to address this. I will update the class soon but you can make the change yourself too.

Hi,
I know I am expecting too much favor from yours, but could you please mail me a working copy of Fitbit PHP code. I am not able to resolve this error -

OAuth client error

Error: it was not possible to access the OAuth request token: it was returned an unexpected response status 400 Response: {"errors":[{"errorType":"request","fieldName":"n/a","message":"This request should use https protocol."}],"success":false}


Please help me. My Email Id- sanyogbarve@gmail.com

The example that comes with the class works perfectly. You just need to use the latest version of the oauth_configuration.json file because it makes the class use the HTTPS endpoint URLs instead of the HTTP old ones that used to work in the past but not anymore.

phpclasses.org/package/7700-PHP-Aut ...

phpclasses.org/package/7700-PHP-Aut ...

Hi Manuel,
Thanks for the reply. Sorry to say but still I am facing the same error. I really would appreciate if you could spend your precious time in looking into my shared code. If possible please review and correct the code.

Link with edit rights-
drive.google.com/folderview?id=0B9s ...


Thanks in advance.

Regards,
Sanyog Barve

Sorry, the files in the site were updated. You may try again now using the new oauth_configuration.json file.

Hi Manuel,
No problem at all. Thanks for the update, it really worked. Cheers!!!

Hi Manuel,
Pardon me for asking so many question.

Is it possible to pass login credentials from php code itself rather then asking user to fill the user/password.

Scenario - when I call "login_with_fitbit.php" from browser, the page redirects to a login page asking for user credentials.

Without asking user to fill the details, can we manage it internally(at code level).

Regards,
Sanyog Barve

OAuth supports authentication with a username and password or with just the client credentials as explained by this article:

phpclasses.org/blog/package/7700/po ...

However, looking at Fitbit OAuth documentation it seems it does not support these types of OAuth flows.

You can still try and see if it works. If not, you may need to ask to FitBit developer support.

wiki.fitbit.com/display/API/OAuth+A ...

It seems to support PIN based authentication, which still may be used for non-Web based OAuth flows.

What is your use case? Why do you need to access the API without user interaction?

Hi Manuel,
Thanks for providing the very useful information.I actually was looking for "Application Only Access with client_credentials".

I am trying to create a wrapper over fitbit, with some extra features for the user.