How to Integrate Replit with Garmin Connect

1// check-garmin-secrets.js
2const required = [
3  'GARMIN_CONSUMER_KEY',
4  'GARMIN_CONSUMER_SECRET',
5  'GARMIN_OAUTH_REQUEST_URL',
6  'GARMIN_OAUTH_AUTHORIZE_URL',
7  'GARMIN_OAUTH_ACCESS_URL'
8];
9for (const key of required) {
10  if (!process.env[key]) {
11    throw new Error(`Missing secret: ${key}. Set it in Replit Secrets (lock icon 🔒).`);
12  }
13}
14console.log('Garmin OAuth secrets verified.');
15console.log('Consumer key:', process.env.GARMIN_CONSUMER_KEY.substring(0, 8) + '...');

1// garmin.js — Garmin Health API with OAuth 1.0a for Node.js on Replit
2const OAuth = require('oauth').OAuth;
3const express = require('express');
4const axios = require('axios');
5
6const app = express();
7app.use(express.json());
8
9const CALLBACK_URL = `${process.env.REPLIT_URL || 'http://localhost:3000'}/auth/callback`;
10
11// Initialize OAuth 1.0a client
12const oauth = new OAuth(
13  process.env.GARMIN_OAUTH_REQUEST_URL,
14  process.env.GARMIN_OAUTH_ACCESS_URL,
15  process.env.GARMIN_CONSUMER_KEY,
16  process.env.GARMIN_CONSUMER_SECRET,
17  '1.0',
18  CALLBACK_URL,
19  'HMAC-SHA1'
20);
21
22// In-memory store for request tokens (use DB in production)
23const tokenStore = {};
24
25// Step 1: Get request token and redirect to Garmin authorization
26app.get('/auth/login', (req, res) => {
27  oauth.getOAuthRequestToken((err, requestToken, requestTokenSecret) => {
28    if (err) return res.status(500).json({ error: err.message });
29    tokenStore[requestToken] = requestTokenSecret;
30    const authUrl = `${process.env.GARMIN_OAUTH_AUTHORIZE_URL}?oauth_token=${requestToken}`;
31    res.redirect(authUrl);
32  });
33});
34
35// Step 2: OAuth callback — exchange request token + verifier for access token
36app.get('/auth/callback', (req, res) => {
37  const { oauth_token, oauth_verifier } = req.query;
38  const requestTokenSecret = tokenStore[oauth_token];
39  
40  if (!requestTokenSecret) return res.status(400).send('Request token not found');
41  
42  oauth.getOAuthAccessToken(
43    oauth_token, requestTokenSecret, oauth_verifier,
44    (err, accessToken, accessTokenSecret, results) => {
45      if (err) return res.status(500).json({ error: err.message });
46      delete tokenStore[oauth_token];
47      
48      // In production: save to database keyed by user ID
49      // For single-user: store in Secrets as GARMIN_USER_TOKEN and GARMIN_USER_TOKEN_SECRET
50      console.log('Garmin OAuth complete.');
51      console.log('User display name:', results?.display_name);
52      res.json({ success: true, displayName: results?.display_name });
53    }
54  );
55});
56
57// Get daily wellness summaries
58app.get('/api/wellness/daily', async (req, res) => {
59  const token = process.env.GARMIN_USER_TOKEN;
60  const tokenSecret = process.env.GARMIN_USER_TOKEN_SECRET;
61  const { startDate, endDate } = req.query;
62  
63  if (!token || !tokenSecret) {
64    return res.status(401).json({ error: 'Run OAuth flow first to get user token' });
65  }
66  
67  const apiUrl = `https://healthapi.garmin.com/wellness-api/rest/dailies`;
68  const params = `uploadStartTimeInSeconds=${startDate}&uploadEndTimeInSeconds=${endDate}`;
69  
70  oauth.get(`${apiUrl}?${params}`, token, tokenSecret, (err, data) => {
71    if (err) return res.status(err.statusCode || 500).json({ error: err.data });
72    try {
73      res.json(JSON.parse(data));
74    } catch {
75      res.json({ raw: data });
76    }
77  });
78});
79
80app.listen(3000, '0.0.0.0', () => console.log('Garmin server running on port 3000'));

1# garmin_api.py — Garmin Health API with OAuth 1.0a for Python on Replit
2import os
3from requests_oauthlib import OAuth1Session
4from flask import Flask, request, redirect, jsonify, session
5import secrets
6
7app = Flask(__name__)
8app.secret_key = secrets.token_hex(32)
9
10CONSUMER_KEY = os.environ['GARMIN_CONSUMER_KEY']
11CONSUMER_SECRET = os.environ['GARMIN_CONSUMER_SECRET']
12REQUEST_URL = os.environ['GARMIN_OAUTH_REQUEST_URL']
13AUTHORIZE_URL = os.environ['GARMIN_OAUTH_AUTHORIZE_URL']
14ACCESS_URL = os.environ['GARMIN_OAUTH_ACCESS_URL']
15CALLBACK_URL = os.environ.get('GARMIN_CALLBACK_URL', 'http://localhost:3000/auth/callback')
16
17@app.route('/auth/login')
18def login():
19    oauth = OAuth1Session(CONSUMER_KEY, client_secret=CONSUMER_SECRET,
20                         callback_uri=CALLBACK_URL)
21    fetch_response = oauth.fetch_request_token(REQUEST_URL)
22    session['request_token'] = fetch_response.get('oauth_token')
23    session['request_token_secret'] = fetch_response.get('oauth_token_secret')
24    auth_url = oauth.authorization_url(AUTHORIZE_URL)
25    return redirect(auth_url)
26
27@app.route('/auth/callback')
28def callback():
29    oauth_verifier = request.args.get('oauth_verifier')
30    oauth_token = request.args.get('oauth_token')
31    
32    oauth = OAuth1Session(
33        CONSUMER_KEY,
34        client_secret=CONSUMER_SECRET,
35        resource_owner_key=session.get('request_token'),
36        resource_owner_secret=session.get('request_token_secret'),
37        verifier=oauth_verifier
38    )
39    
40    tokens = oauth.fetch_access_token(ACCESS_URL)
41    # Store these securely (Secrets for single-user, DB for multi-user)
42    print('OAuth complete. Access token obtained.')
43    print('User:', tokens.get('displayName', 'unknown'))
44    return jsonify({'success': True, 'message': 'Store tokens in Secrets or DB'})
45
46@app.route('/api/activities')
47def get_activities():
48    access_token = os.environ.get('GARMIN_USER_TOKEN')
49    access_secret = os.environ.get('GARMIN_USER_TOKEN_SECRET')
50    
51    if not access_token or not access_secret:
52        return jsonify({'error': 'Run OAuth flow first — GARMIN_USER_TOKEN not set'}), 401
53    
54    oauth = OAuth1Session(
55        CONSUMER_KEY,
56        client_secret=CONSUMER_SECRET,
57        resource_owner_key=access_token,
58        resource_owner_secret=access_secret
59    )
60    
61    import time
62    end_time = int(time.time())
63    start_time = end_time - (7 * 24 * 3600)  # Last 7 days
64    
65    response = oauth.get(
66        'https://healthapi.garmin.com/wellness-api/rest/activities',
67        params={'uploadStartTimeInSeconds': start_time, 'uploadEndTimeInSeconds': end_time}
68    )
69    
70    if not response.ok:
71        return jsonify({'error': response.text}), response.status_code
72    return jsonify(response.json())
73
74if __name__ == '__main__':
75    app.run(host='0.0.0.0', port=3000)