Generate Spotify Access Tokens

\n This app uses{\" \"}\n \n Authorization Code Flow\n {\" \"}\n to authenticate users:\n

\n This project sets the CLIENT_ID and CLIENT_SECRET environment variables for the relevant Spotify App.\n
\n We generate a unique code that you will use to authenticate to us: {c.get(\"state\")}\n
You can pick which scopes to authorize.
We construct a URL to redirect you to, which will ask you to authorize the app on Spotify.
You are redirected back here, with a code in the URL.
We exchange the code for an access token and refresh token, which we save.
\n You can request your access token at{\" \"}\n \n https://{new URL(c.req.url).hostname}/token?state={c.get(\"state\")}\n \n
If your access token expires, we use the refresh token to get a new one.
Use your access token to make requests to the Spotify API by importing `getSpotifyToken` in your other vals.

\n\n

\n Get started\n

\n\n

\n

\n If you get in a broken state, you can always{\" \"}\n \n remove access to this app from your Spotify account\n or clear your cookies and begin the token generation process again.\n

\n ))\n .get(\"/scopes\", c =>\n c.html(\n

Choose your Spotify Scopes

\n \n

\n ))\n .get(\"/login\", async (c) => {\n const state = c.get(\"state\");\n const scopes = c.req.queries(\"scopes[]\").join(\" \");\n\n await insertPendingCallback({ id: state });\n const params = new URLSearchParams({\n response_type: 'code',\n client_id: Deno.env.get(\"CLIENT_ID\"),\n scope: scopes,\n redirect_uri,\n state,\n })\n return c.redirect(\n `https://accounts.spotify.com/authorize?${params}`);\n}).get(\"/callback\", async (c) => {\n const code = c.req.query(\"code\");\n const state = c.req.query(\"state\") as string;\n\n if (state !== c.get(\"state\")) {\n return c.html(\"State mismatch 1\");\n }\n\n const rowInitial = getRow(state)\n if (!rowInitial) {\n return c.html(\"State mismatch 2\");\n }\n if (rowInitial.data) {\n return c.html(\"Already authenticated for that state\");\n }\n\n const data = await spotifyRequestToken({\n code,\n client_id: Deno.env.get(\"CLIENT_ID\"),\n client_secret: Deno.env.get(\"CLIENT_SECRET\"),\n redirect_uri,\n });\n\n if (data.error) return c.json(data.error);\n if (!data.access_token) return c.json(\"No access token\");\n await updateRow(state, { data })\n if (data.refresh_token) await updateRow(state, { refresh_token });\n\n return c.redirect(\"/token?state=\" + state);\n})\n .get(\"/token\", async (c) => {\n const state = c.req.query(\"state\") as string;\n try {\n const token = await getSpotifyToken(state);\n return c.json(token);\n } catch (e) {\n if (e === \"NO_DATA\") return c.json(\"No auth data found for supplied state\");\n if (e === \"NO_TOKEN\") return c.json(\"No refresh access token\");\n if (e.startsWith(\"REFRESH_ERROR: \")) return c.json(\"Refresh error: \" + e.split(\" : \")[1]);\n throw e;\n }\n});\n\nexport default app.fetch;","deleted","label",[98],"permalink","https://www.val.town/x/neverstew/spotifyOauthServer/code/server","extension","actionData","errors"]