Authorization Code Grant
This is the first step in the process, the granting of a single-use authorization code.
GET /oauth2/auth
Request Query Parameters
| Name | Description | Required |
|---|---|---|
| response_type | Indicates the desired response type. Must be set to code. | Y |
| client_id | Your app’s client id | Y |
| redirect_uri | The URL to redirect to when the user completes the authorization flow. This URL will receive the results of the authorization request as query parameters. | Y |
| scope | A spacedelimited list of permission scopes requested by your app. Must be limited to scopes that have not previously been authorized. (See below for a list of scope.) | Y |
| state | An opaque string used to maintain state between requests. MyFitnessPal will include this string unchanged as a query parameter appended to redirect_uri. Useful for protecting against Cross-site Request Forgery (CSRF) attacks. If used, it should be an arbitrary string unique to each authentication request. | N |
Available permission scopes:
● measurements
● diary
● privateexercises
● subscriptions