Public API

AUTHENTICATION

FitBark API uses the OAuth 2.0 protocol to authenticate incoming requests. A client_id and client_secret are assigned to each application created by a Developer. The Developer can then request authorization from the user to access user’s data and obtain an Access Token, which will be used for further requests. This token will have an extended expiration time, and the Developer can store the token and use it for multiple calls. To make calls on behalf of the user, the Developer needs to get explicit permission from the user via a 3-legged authentication mechanism.

Step 1

User is redirected to the authentication page (GEThttps://app.fitbark.com/oauth/authorize) passing:

• response_type=code: must have the value “client_credentials” to obtain the authorization code
• client_id: unique identifier obtained from the developer portal
• redirect_uri: URI where to redirect the user after he/she grants permissions. This URI must match one of the URI prefixes defined when setting up API access

Step 2

If the user is not logged in, then he/she will be asked to enter their user and password. After the user logs in, he’ll see the list of permissions being asked, and needs to accept the request.

Step 3

If the user accepts, then he/she is redirected back to the Developer’s site, using the redirect_uri, and passing the authorization code in the query parameter. For example:http://your_web.com/access?code=ABC123/. This authorization code has an expiration of 10 minutes.

Step 4

Last step, is for the Developer to exchange the authorization code with an access token. To this extent, the Developer must make an HTTP call (server to server) to obtain the access token (POSThttps://app.fitbark.com/oauth/token) passing:

• client_id: unique identifier obtained from the dev portal
• client_secret: secret key obtained from the dev portal
• grant_type=authorization_code: must have the value “authorization_code” to exchange the token
• redirect_uri: URI where to redirect the user after he/she grants permissions. This URI must match one of the URI prefixes defined when setting up API access
• code: the authorization code sent by FitBark on the previous step

Step 5

The server will return a JSON object with the access token. This token will have an expiration of 1 year. It will also return a refresh token used to request a new access token for the user when the current access token issued expires.

Step 6

With the access token, the Developer can make API calls on behalf of the user, by passing the code in the Authorization: Bearer header.

GET /api/user HTTP/1.1
Host: app.fitbark.com
Authorization: Bearer DCEOB729f3i5CuLCyZCkX_5slG_fpc1IhNqf0FnfK_YDmmc7bZ

SETTING OAUTH 2.0 REDIRECT URI'S VIA API

All callbacks to the developers API for user authentification must have a registered redirect URI as specified by the OAuth 2 specification. The developer can set the redirect URI via the FitBark API.

The process to set the URI’s is below:

Step 1

Get your client access token using oauth and request the fitbark_open_api_2745H78RVS scope

Curl

curl -X POST -H "Content-Type: application/json" -H "Cache-Control: no-cache" -d '{
"grant_type": "client_credentials",
"client_id": "",
"client_secret": "",
"scope" :"fitbark_open_api_2745H78RVS"
}' "https://app.fitbark.com/oauth/token"

Response

{
  "access_token": "db73736bc5713e986415fd22345678e2a1f0d8f84eefee3d78515b643db329c341679",
  "token_type": "bearer",
  "expires_in": 31557600,
  "scope": "fitbark_open_api_2745H78RVS"
}

Step 2

Call API to read current redirect URI’s

Curl

curl -X GET -H "Authorization: Bearer " "https://app.fitbark.com/api/v2/redirect_urls"

Response

{"redirect_uri": "urn:ietf:wg:oauth:2.0:oob" }

Note that there can be multiple redirect URI’s, each one is separated by ‘\r”

Step 3

Create a string that is the new redirect URI’s and post it via the fitBark API
Curl

curl -X POST -H "Authorization: Bearer " -H "Content-Type: application/json" -d '{
   "redirect_uri":"urn:ietf:wg:oauth:2.0:oob\rhttp://wellcome.com/auth\rhttp://another.com/auth://"
}' "https://app.fitbark.com/api/v2/redirect_urls"