Webhook event from when user rekoves access for an app

[slilian]

Hi,

I was looking in the documentation, but I couldn't find any info about events for when an user revokes access for an app.

Is there any communication about this event?

Thank you,

Simone

[blasbike]

Yes, I know how deauthorization works.

I have two strava apps with webhooks, different implementation not the copy paste code.

In both apps sometimes I receive deauthorization webhook event and a user confirms they did not click revoke in Strava, any ideas?

[blasbike]

I have related question. Is it possible that Strava sends authorize:false event several days AFTER revoking? Or maybe is repeating that webhook event? I had a case I revoked on my test user, then connected again. All worked as expected and then after a week I am receiving authorize:false again and my user is deauthorized!

Is it possible? That case happened for two users and both events was send in the same batch from Strava and processed together within my 2 minutes interval.

I have checked my security flow and I am sure there is no way for someone else to push such event to my app.

[slilian]

I'm trying to test this, but it doesn't look like a notification is sent when the user revoke access to an app.

I can't seen to find any more info, would anyone be able to help?

Thanks

[slilian]

I think I found something here: https://developers.strava.com/docs/webhooks/

---

 "For app deauthorization events, there is always an "authorized" : "false" key-value pair."

---