PHPackages hwd/oauth2-fitbit - PHPackages - PHPackages [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register) 1. [Directory](/) 2. / 3. [Authentication & Authorization](/categories/authentication) 4. / 5. hwd/oauth2-fitbit ActiveLibrary[Authentication & Authorization](/categories/authentication) hwd/oauth2-fitbit ================= Fitbit OAuth 2.0 Client Provider for The PHP League OAuth2-Client 1.0.1(10y ago)015MITPHPPHP >=5.4.0 Since Nov 16Pushed 10y ago1 watchersCompare [ Source](https://github.com/HealthyWebDeveloper/oauth2-fitbit)[ Packagist](https://packagist.org/packages/hwd/oauth2-fitbit)[ RSS](/packages/hwd-oauth2-fitbit/feed)WikiDiscussions master Synced 1mo ago READMEChangelog (2)Dependencies (4)Versions (4)Used By (0) Fitbit Provider for OAuth 2.0 Client ==================================== [](#fitbit-provider-for-oauth-20-client) This is a fork of for the purposes of having a non dev version available for composer install. This package provides Fitbit OAuth 2.0 support for the PHP League's [OAuth 2.0 Client](https://github.com/thephpleague/oauth2-client). This package is compliant with [PSR-1](https://github.com/php-fig/fig-standards/blob/master/accepted/PSR-1-basic-coding-standard.md), [PSR-2](https://github.com/php-fig/fig-standards/blob/master/accepted/PSR-2-coding-style-guide.md), [PSR-4](https://github.com/php-fig/fig-standards/blob/master/accepted/PSR-4-autoloader.md), and [PSR-7](https://github.com/php-fig/fig-standards/blob/master/accepted/PSR-7-http-message.md). If you notice compliance oversights, please send a patch via pull request. Requirements ------------ [](#requirements) The following versions of PHP are supported. - PHP 5.5 - PHP 5.6 - PHP 7.0 - HHVM Installation ------------ [](#installation) To install, use composer: ``` composer require hwd/oauth2-fitbit ``` Usage ----- [](#usage) ### Authorization Code Grant [](#authorization-code-grant) ``` $provider = new hwd\OAuth2\Client\Provider\Fitbit([ 'clientId' => '{fitbit-oauth2-client-id}', 'clientSecret' => '{fitbit-client-secret}', 'redirectUri' => 'https://example.com/callback-url' ]); // start the session session_start(); // If we don't have an authorization code then get one if (!isset($_GET['code'])) { // Fetch the authorization URL from the provider; this returns the // urlAuthorize option and generates and applies any necessary parameters // (e.g. state). $authorizationUrl = $provider->getAuthorizationUrl(); // Get the state generated for you and store it to the session. $_SESSION['oauth2state'] = $provider->getState(); // Redirect the user to the authorization URL. header('Location: ' . $authorizationUrl); exit; // Check given state against previously stored one to mitigate CSRF attack } elseif (empty($_GET['state']) || ($_GET['state'] !== $_SESSION['oauth2state'])) { unset($_SESSION['oauth2state']); exit('Invalid state'); } else { try { // Try to get an access token using the authorization code grant. $accessToken = $provider->getAccessToken('authorization_code', [ 'code' => $_GET['code'] ]); // We have an access token, which we may use in authenticated // requests against the service provider's API. echo $accessToken->getToken() . "\n"; echo $accessToken->getRefreshToken() . "\n"; echo $accessToken->getExpires() . "\n"; echo ($accessToken->hasExpired() ? 'expired' : 'not expired') . "\n"; // Using the access token, we may look up details about the // resource owner. $resourceOwner = $provider->getResourceOwner($accessToken); var_export($resourceOwner->toArray()); // The provider provides a way to get an authenticated API request for // the service, using the access token; it returns an object conforming // to Psr\Http\Message\RequestInterface. $request = $provider->getAuthenticatedRequest( 'GET', 'https://api.fitbit.com/1/user/-/profile.json', $accessToken ); // Make the authenticated API request and get the response. //$response = $provider->getResponse($request); } catch (\League\OAuth2\Client\Provider\Exception\IdentityProviderException $e) { // Failed to get the access token or user details. exit($e->getMessage()); } } ``` ### Refreshing a Token [](#refreshing-a-token) Once your application is authorized, you can refresh an expired token using a refresh token rather than going through the entire process of obtaining a brand new token. To do so, simply reuse this refresh token from your data store to request a refresh. ``` $provider = new hwd\OAuth2\Client\Provider\Fitbit([ 'clientId' => '{fitbit-oauth2-client-id}', 'clientSecret' => '{fitbit-client-secret}', 'redirectUri' => 'https://example.com/callback-url' ]); $existingAccessToken = getAccessTokenFromYourDataStore(); if ($existingAccessToken->hasExpired()) { $newAccessToken = $provider->getAccessToken('refresh_token', [ 'refresh_token' => $existingAccessToken->getRefreshToken() ]); // Purge old access token and store new access token to your data store. } ``` Testing ------- [](#testing) ``` $ ./vendor/bin/phpunit ``` Contributing ------------ [](#contributing) Please see [CONTRIBUTING](https://github.com/djchen/oauth2-fitbit/blob/master/CONTRIBUTING.md) for details. License ------- [](#license) The MIT License (MIT). Please see [License File](https://github.com/djchen/oauth2-fitbit/blob/master/LICENSE) for more information. ### Health Score 26 — LowBetter than 43% of packages Maintenance20 Infrequent updates — may be unmaintained Popularity6 Limited adoption so far Community9 Small or concentrated contributor base Maturity60 Established project with proven stability Bus Factor1 Top contributor holds 66.7% of commits — single point of failure How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window. **Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores. **Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement. **Maturity (30%)** — Project age, version count, PHP version support, and release stability. ### Release Activity Cadence Every ~41 days Total 3 Last Release 3745d ago Major Versions 0.1.0 → 1.0.02016-02-06 ### Community Maintainers ![](https://www.gravatar.com/avatar/465cf3eff9a7e41c06618a5a29ff812c1b874c50fbfa6d1dc69b70cba8d2e5af?d=identicon)[bradmkjr](/maintainers/bradmkjr) --- Top Contributors [![djchen](https://avatars.githubusercontent.com/u/826556?v=4)](https://github.com/djchen "djchen (6 commits)")[![bradmkjr](https://avatars.githubusercontent.com/u/2095566?v=4)](https://github.com/bradmkjr "bradmkjr (3 commits)") --- Tags clientAuthenticationoauthoauth2authorizationfitbit ### Code Quality TestsPHPUnit Code StylePHP\_CodeSniffer ### Embed Badge ![Health badge](/badges/hwd-oauth2-fitbit/health.svg) ``` [![Health](https://phpackages.com/badges/hwd-oauth2-fitbit/health.svg)](https://phpackages.com/packages/hwd-oauth2-fitbit) ``` ### Alternatives [league/oauth2-google Google OAuth 2.0 Client Provider for The PHP League OAuth2-Client 41721.2M117](/packages/league-oauth2-google)[cakedc/oauth2-cognito Cognito OAuth 2.0 Client Provider for The PHP League OAuth2-Client 18597.7k](/packages/cakedc-oauth2-cognito) PHPackages © 2026 [Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)