strava oauth approval_prompt

[Dilhan973]

Hello, I have a problem with strava authentication. When the user logs in for the first time everything goes well. However, during subsequent connections it still requires authorization to connect to the Strava account instead of directly connecting it to my application. The approval_prompt parameter is of course "auto". I don't see where the problem could be. Thanks in advance

[maheshw]

@Dilhan973 Did you figure it out? Running into the same issue on localhost.

[maheshw · Accepted solution]

Never mind, figured it out, You need to request the "read" scope as well. 
In my case:
Before: query.Add("scope", "activity:read");
After: query.Add("scope", "read,activity:read");

[Yooperjb]

Excellent. I was having the same issue. Looks like this was my problem as well. For those using Node.js Passport StravaStrategy use:

scope: 'read,activity:read_all''

[Dilhan973]

Thank you very much, that was exactly it.

[lopey66]

authorization lasts 6 hours or so, meaning the token issued lasts 6 hours (7a), that last token (refresh token) issued is used again to re-authorize and issue a new refresh token  https://developers.strava.com/docs/getting-started/#oauth  

[Jan_Mantau]

<Deleted>

[Jan_Mantau]

From the very sparse info you provided it would seem that you let known users every time connect to Strava instead of skipping this step on subsequent logins by using saved access tokens.

[Dilhan973]

Every time a user logs in using strava to my site. It must each time authorize as above instead of being directly connected.

[lopey66]

I see your using localhost, is your website redirecting localhost ? when it should be your website if so go to https://www.strava.com/settings/api and then edit and add your website, as when other users will be redirected after they accept using your API, I don't think localhost is allowed(does not work ?). also you may need to revoke access your in apps https://www.strava.com/settings/apps . what should happen is the refresh token authenticates in the background. your authentication should only happen once and then it will appear in the apps of every user who is using your app/api