How to Integrate Bolt.new with Garmin Connect API

1# .env file — all Garmin credentials server-side only
2GARMIN_CONSUMER_KEY=your_consumer_key
3GARMIN_CONSUMER_SECRET=your_consumer_secret
4GARMIN_API_BASE_URL=https://apis.garmin.com
5GARMIN_REQUEST_TOKEN_URL=https://connectapi.garmin.com/oauth-service/oauth/request_token
6GARMIN_AUTHORIZE_URL=https://connect.garmin.com/oauthConfirm
7GARMIN_ACCESS_TOKEN_URL=https://connectapi.garmin.com/oauth-service/oauth/access_token
8# Your deployed callback URL — update after deployment
9GARMIN_CALLBACK_URL=https://your-app.netlify.app/api/auth/garmin/callback

1// app/api/auth/garmin/start/route.ts
2import { NextResponse } from 'next/server';
3import OAuth from 'oauth-1.0a';
4import crypto from 'crypto';
5
6const oauth = new OAuth({
7  consumer: {
8    key: process.env.GARMIN_CONSUMER_KEY ?? '',
9    secret: process.env.GARMIN_CONSUMER_SECRET ?? '',
10  },
11  signature_method: 'HMAC-SHA1',
12  hash_function(base_string, key) {
13    return crypto.createHmac('sha1', key).update(base_string).digest('base64');
14  },
15});
16
17export async function GET(request: Request) {
18  try {
19    const requestTokenUrl = process.env.GARMIN_REQUEST_TOKEN_URL!;
20    const callbackUrl = process.env.GARMIN_CALLBACK_URL!;
21
22    const requestData = {
23      url: requestTokenUrl,
24      method: 'POST' as const,
25      data: { oauth_callback: callbackUrl },
26    };
27    const authHeader = oauth.toHeader(oauth.authorize(requestData));
28
29    const response = await fetch(requestTokenUrl, {
30      method: 'POST',
31      headers: { ...authHeader, 'Content-Type': 'application/x-www-form-urlencoded' },
32      body: new URLSearchParams({ oauth_callback: callbackUrl }),
33    });
34
35    if (!response.ok) throw new Error(`Request token failed: ${response.status}`);
36
37    const body = await response.text();
38    const params = new URLSearchParams(body);
39    const oauthToken = params.get('oauth_token');
40
41    if (!oauthToken) throw new Error('No oauth_token in response');
42
43    // Store oauth_token_secret temporarily (session/db) — needed in callback
44    const oauthTokenSecret = params.get('oauth_token_secret');
45    // TODO: save oauthTokenSecret associated with oauthToken in your session/db
46
47    const authorizeUrl = `${process.env.GARMIN_AUTHORIZE_URL}?oauth_token=${oauthToken}`;
48    return NextResponse.redirect(authorizeUrl);
49  } catch (error) {
50    console.error('Garmin OAuth start error:', error);
51    return NextResponse.redirect(new URL('/?error=garmin_auth_failed', request.url));
52  }
53}

1// app/api/garmin/daily-summary/route.ts
2import { NextResponse } from 'next/server';
3import { garminRequest } from '@/lib/garmin-auth';
4
5export async function GET(request: Request) {
6  const url = new URL(request.url);
7  const startDate = url.searchParams.get('startDate') ?? new Date(Date.now() - 7 * 86400000).toISOString().split('T')[0];
8  const endDate = url.searchParams.get('endDate') ?? new Date().toISOString().split('T')[0];
9
10  // Get user's Garmin OAuth tokens from session/database
11  // Replace with your actual token retrieval
12  const userTokens = { token: 'USER_OAUTH_TOKEN', secret: 'USER_OAUTH_SECRET' };
13
14  try {
15    const apiUrl = `${process.env.GARMIN_API_BASE_URL}/wellness-api/rest/dailies?uploadStartTimeInSeconds=&uploadEndTimeInSeconds=`;
16    // Garmin uses upload time ranges for daily summaries
17    // Convert dates to epoch seconds for the API
18    const startEpoch = Math.floor(new Date(startDate).getTime() / 1000);
19    const endEpoch = Math.floor(new Date(endDate + 'T23:59:59').getTime() / 1000);
20
21    const summariesUrl = `${process.env.GARMIN_API_BASE_URL}/wellness-api/rest/dailies?uploadStartTimeInSeconds=${startEpoch}&uploadEndTimeInSeconds=${endEpoch}`;
22
23    const data = await garminRequest('GET', summariesUrl, userTokens.token, userTokens.secret);
24
25    const summaries = (data?.dailies ?? []).map((day: Record<string, unknown>) => ({
26      date: day.calendarDate,
27      steps: day.totalSteps ?? 0,
28      activeKilocalories: day.activeKilocalories ?? 0,
29      floorsClimbed: day.floorsClimbed ?? 0,
30      intensityMinutes: (Number(day.moderateIntensityMinutes ?? 0) + Number(day.vigorousIntensityMinutes ?? 0) * 2),
31      averageStressLevel: day.averageStressLevel ?? null,
32    }));
33
34    return NextResponse.json({ summaries });
35  } catch (error) {
36    console.error('Garmin daily summary error:', error);
37    return NextResponse.json({ error: 'Failed to fetch Garmin data' }, { status: 500 });
38  }
39}

1// app/api/webhooks/garmin/route.ts
2import { NextResponse } from 'next/server';
3
4// GET — Garmin sends this to verify your webhook URL during registration
5export async function GET(request: Request) {
6  const url = new URL(request.url);
7  const challenge = url.searchParams.get('challenge');
8  // Return the challenge value as plain text to verify domain ownership
9  if (challenge) {
10    return new Response(challenge, {
11      status: 200,
12      headers: { 'Content-Type': 'text/plain' },
13    });
14  }
15  return new Response('Garmin webhook endpoint active', { status: 200 });
16}
17
18// POST — Garmin sends fitness data when users sync their devices
19export async function POST(request: Request) {
20  try {
21    const body = await request.json();
22
23    // Process each data type Garmin pushes
24    if (body.dailies) {
25      for (const daily of body.dailies) {
26        console.log('Daily summary push:', daily.userId, daily.calendarDate);
27        // Save to database: upsert by userId + calendarDate
28      }
29    }
30    if (body.activities) {
31      for (const activity of body.activities) {
32        console.log('Activity push:', activity.userId, activity.activityId);
33        // Save activity summary to database
34      }
35    }
36    if (body.sleeps) {
37      for (const sleep of body.sleeps) {
38        console.log('Sleep data push:', sleep.userId, sleep.calendarDate);
39        // Save sleep record to database
40      }
41    }
42
43    // CRITICAL: Return 200 immediately
44    // Garmin retries if response takes too long
45    return NextResponse.json({ status: 'received' }, { status: 200 });
46  } catch (error) {
47    console.error('Garmin webhook error:', error);
48    return NextResponse.json({ status: 'error' }, { status: 200 });
49  }
50}