Developers & API

I'm working on a browser-based app using the Strava API that I hope to eventually make publicly available. Originally, I was planning on having all of the communication take place in Javascript in the user's browser. However, since the POST that exchanges the auth code for an access token requires the client secret, so far I have needed to hard-code my client secret in the browser-side JS.This doesn't seem secure, but I'm not sure what the easiest method to secure it is. My first thought was to host a separate API to retrieve access tokens. Once the browser gets an auth code back from Strava, it sends it to the API, and the API talks to Strava to exchange the code for a token, and then sends the token back to the browser.This seems a little convoluted, and even more so if I would need to implement TLS on my new API to secure that communication channel. Is there another recommended way to keep my client secret secure?

I have a few "Currently connected athletes".The problem is that they got deleted in my app's database. Meaning that I'm not able to access their refresh token or short lived access token, even though I have their permission.Is there a way to retrieve or regenerate their refresh token?So that I can create their profiles in my db again.Second option is having them "create a user" again in my app.Thanks for any suggestion!

Hey, I submitted a question through email to the developers inbox 3 weeks ago and still no answer. Does anyone know what kind of response time I should prepare for? And, if someone on the developers team at Strava reads this, it is regarding ticket #6141Thanks,Johan

Hello. I created a dashboard. I'm using API /clubs/{id}/activities .All is good, but i can't separate two people because they have same name and surname start with same letter. Therefore i got an issue. Pavel S. - it's a two different people.Could you add any id, guid or something else for separate two persons near with firstname?

Something I noticed some time back has been emoji changing from color to shadow/black & white. below is some code I have used in my web applications to enable color emoji to appear as we expect them, like country flags.<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin><link rel="stylesheet" href="https://fonts.googleapis.com/icon?family=Noto+Color+Emoji"><style>@font-face {font-family:Noto Color Emoji;unicode-range:U+1F1E6-1F1FF;}</style>

I am trying to upload an activity via the API with a custom name that contains special utf8 characters like an emoji. It seems that this is blocked by the API. Once I try that the whole activity won't be processed - but I don't get an API error back. or is something wrong on my side? I am using a standard multipart/form-data upload in Swift

oauth/callback/strava&state=ba59db78-5afc-4e45-bdf3-9f4b3ecbf1ed

I have developed a webapp ride analysis using advanced ECP-ExRec models. ECP = Extended Critical Power, ExRec = Acute anaerobic Exhaustion and Recovery.In this stand-alone app, the athlete browses for and uploads his data file in .fit formatI would like to integrate it into Strava as an authorized app. Is it possible to read the full content of a strava data file, such as timestamp, hr, power, alt, cad, etc...?To get an idea of the webapp https://glitch.typhooncycling.me 

HelloI have applied for API limit rate for 3 weeks, but there has been no feedback. Now it has caused a lot of user complaints. Please review and respond as soon as possibleThanks

Como contornar quando esquecer de aposentar um componente em uma determinada data e já tiver feito várias atividades posterior a data de aposentar o componente? TRANSLATION: How to get around when you forget to retire a component on a certain date and you have already carried out several activities after the component's retirement date?

In addition to my question below I am also unable to use the dev playground when copying my correct client id and client secret. I have seen another with this issue, is it my side or strava's?Thanks

Hello! We are a Chinese company, and we have applied for Strava's developer API. We aim to use Strava user's exercise data through authorization and generate exercise trajectory videos on our Tooolive product, making this a very exciting endeavor.However, we have a few questions that we would like Strava to address:Can Chinese Strava users authenticate through OAuth2? We have received feedback from users about this issue. How can we resolve it?Is it possible to download exercise data from Strava's API in FIT format, or is it limited to GPX format? If FIT format export is possible, could you please provide guidance on how to do it?Thank you!.

Hi! I have a problem with my Telegram bot which uploads activity files to your Strava accounts.I've made it so you first publish the activity through the bot, and then you can change it's name/description/type etc.And here lies the problem: when the bot changes the type of an activity through the API, the default gear doesn't set automatically, so you have to log in the Strava app and change it manually.Is there a way to set shoes/bikes for the activity via the API?Also, I remember previously gear items had "primary" parameter, which, i think, corresponded with the Default equipment in the UI. But now, since developers added the default sports list to the gear, the "primary" parameter is always set to "false" and cannot be changed, hence the gear can't be set automatically when editing activity via API. Am I right or missing something?

Hello,I would want to implement a feature in my app that would allow athletes to share their activity to other accounts automatically based on the activity title. However I was disappointed to see that there is no endpoint on the open api for that. I was wondering if there is any plan to add this feature in the near future? Thanks

Good Day,I can not figure out how to get a list of Segments that an athlete has ridden. I can get the list of Activities in a given time period using the below. But, how do I then see if those Activities contain a certain segment? I can't figure out where/how to link an activity to a segment or link a segment to an activity or just search for a segment across an athlete's activities within a start/end date. https://www.strava.com/api/v3/athlete/activities?access_token=xxxxxxx&per_page=1&page=1&before=1704067200&after=1672531199The goal is that I want to see if an athlete has ever ridden a segment within a specified start/end date.  So,  " Did Bobby ride Segment A between StartDate and EndDate". Any guidance

I am unable to update the scope to activity:read of my Application as there seems to be a CORS error when the when a new auth token and refresh token are requested!  Any help would be appreciated!

I am currently doing a group distance charity and tracking through strava - i've allowed workouts to be apart of the challenge, however they don't take any distance off, how can we change this or calculate to distance

I am trying to build something around `athlete_count` and `star_count` based on the top segments returned here: https://developers.strava.com/docs/reference/#api-models-ExplorerSegmentWith the API limits, even for one of these explore responses I'd need to make 10 additional calls to get the `counts` and would run into the 200 calls limit immediately.Is there any other way to get these counts? Could they be added to the model?

I'm trying to use the API to discover local cycle routes to try out. I'm trying with a GET request on "explore segments":https://developers.strava.com/docs/reference/#api-Segments-exploreSegmentsBut it always returns an empty segments array []Here's a sample query (enclosing roughly the entire UK in the bounds):https://www.strava.com/api/v3/segments/explore?bounds=[50,-6,60,2]&activity_type=riding&min_cat=4&max_cat=1 Am I wrong to expect data back? I've only just signed up to Strava so I have no data of my own yet - does "explore segments" not return "public" data? Thanks,A

Hello, I have developed a web app. It requires people to connect with Strava. The current flow is the following: when the users click on "Connect with Strava", I redirect them to https://www.strava.com/oauth/authorize with all the query parameters. It works fine on mobile and desktop browsers. I'm now looking to implement another flow when users are using my web app on their mobile phone. I want to open the Strava app instead of the Strava web version when the user has the Strava app installed. For this, I'm following the guidelines here: https://developers.strava.com/docs/authentication/ On iOS, I redirect the users to strava://oauth/mobile/authorize (with the exact same query parameters than my current working flow with the Strava web version). It properly opens the St

I am trying to utilize the Export GPX endpoint for a feature in a mobile application. However I am running into a 404 error when I actually go to use the endpoint. I know that this endpoint requires a read_all scope for private parameters which I already included in my webform urlscope=activity:read_all,profile:read_all,read_all This is how I have my exportGPX endpoint set up as well..https://www.strava.com/api/v3/routes/{route_id}/export_gpx Am I missing anything? 

Hi guys, playing around with strava api and authorization using next.auth. I found out, that my account has username equal 'null' (e.g. curl -G https://www.strava.com/api/v3/athlete). Is it normal?

When we upload elliptical activity data to Strava as FIT file with cadence data, the cadence data is not visible in the Strava app. As soon as the activity type is changed to for example 'walking' in the Strava app, the cadence graph appears for the activity. So the cadence data is present in Strava, but it seems that by default it won't show for elliptical activities. Is this something you could consider to add? Other fitness apps show cadence data with the elliptical activities.

Hello,When I try to get a list of athlete activities, I get the following error: { "message": "Authorization Error", "errors": [ { "resource": "AccessToken", "field": "activity:read_permission", "code": "missing" } ] } Endpoint: https://www.strava.com/api/v3/athlete/activities?before=1689465600&after=1690070400&page=1&per_page=30 read,read_all,activity:read,activity:read_allI haven't worked on my app in a few months, but am picking it back up to get things finalized and cannot figure this issue out. Everything in the docs seems the same and this setup was working before. Any help is apprecia

Hi everyone,As mentioned here in the documentation https://developers.strava.com/docs/uploads/part Device Mapping, strava maintains an official UNIQUE_DEVICE_NAME list for each wearable device.Where can we find this list?especially for Xiaomi: Xiaomi Smart Band 7, Xiaomi Smart Band 7 Pro, Xiaomi Smart Band 8, Xiaomi Smart Band 8 Pro, etc... ?Thank you