I created a service to track my peloton rides over time. I used the fact that “friends” can see your rides using their undocumented api. So my app just requires

I created a service to track my peloton rides over time. I used the fact that “friends” can see your rides using their undocumented api. So my app just requires you to “friend” a special user in peloton, then that user will “friend” you back automatically. That way I can pull your stats without your peloton username and password. Kind of a poor man’s oauth flow. You can always revoke the “friendship” later.