Generate Spotify Access Tokens

\n This app uses{\" \"}\n \n Authorization Code Flow\n {\" \"}\n to authenticate users:\n

\n This project sets the CLIENT_ID and CLIENT_SECRET environment variables for the relevant Spotify App.\n
\n We generate a unique code that you will use to authenticate to us: {c.get(\"state\")}\n
You can pick which scopes to authorize.
We construct a URL to redirect you to, which will ask you to authorize the app on Spotify.
You are redirected back here, with a code in the URL.
We exchange the code for an access token and refresh token, which we save.
\n You can request your access token at{\" \"}\n \n https://{new URL(c.req.url).hostname}/token?state={c.get(\"state\")}\n \n
If your access token expires, we use the refresh token to get a new one.
Use your access token to make requests to the Spotify API by importing `getSpotifyToken` in your other vals.

\n\n

\n Get started\n

\n\n

\n

\n If you get in a broken state, you can always{\" \"}\n \n remove access to this app from your Spotify account\n or clear your cookies and begin the token generation process again.\n

\n ))\n .get(\"/scopes\", c =>\n c.html(\n

Choose your Spotify Scopes

\n \n

\n ))\n .get(\"/login\", async (c) => {\n const state = c.get(\"state\");\n const scopes = c.req.queries(\"scopes[]\").join(\" \");\n\n await insertPendingCallback({ id: state });\n const params = new URLSearchParams({\n response_type: 'code',\n client_id: Deno.env.get(\"CLIENT_ID\"),\n scope: scopes,\n redirect_uri,\n state,\n })\n return c.redirect(\n `https://accounts.spotify.com/authorize?${params}`);\n}).get(\"/callback\", async (c) => {\n const code = c.req.query(\"code\");\n const state = c.req.query(\"state\") as string;\n\n if (state !== c.get(\"state\")) {\n return c.html(\"State mismatch 1\");\n }\n\n const rowInitial = getRow(state)\n if (!rowInitial) {\n return c.html(\"State mismatch 2\");\n }\n if (rowInitial.data) {\n return c.html(\"Already authenticated for that state\");\n }\n\n const data = await spotifyRequestToken({\n code,\n client_id: Deno.env.get(\"CLIENT_ID\"),\n client_secret: Deno.env.get(\"CLIENT_SECRET\"),\n redirect_uri,\n });\n\n if (data.error) return c.json(data.error);\n if (!data.access_token) return c.json(\"No access token\");\n await updateRow(state, { data })\n if (data.refresh_token) await updateRow(state, { refresh_token });\n\n return c.redirect(\"/token?state=\" + state);\n})\n .get(\"/token\", async (c) => {\n const state = c.req.query(\"state\") as string;\n try {\n const token = await getSpotifyToken(state);\n return c.json(token);\n } catch (e) {\n if (e === \"NO_DATA\") return c.json(\"No auth data found for supplied state\");\n if (e === \"NO_TOKEN\") return c.json(\"No refresh access token\");\n if (e.startsWith(\"REFRESH_ERROR: \")) return c.json(\"Refresh error: \" + e.split(\" : \")[1]);\n throw e;\n }\n});\n\nexport default app.fetch;","label",[18],"pulls","branches","forks","envVars",{"_147":26,"_149":26},"connections",{"_147":26,"_148":26},"count","unfilledCount","emptyCount",{"_37":173,"_13":174,"_31":175,"_131":-5,"_132":79,"_133":78,"_134":51,"_39":176,"_77":26,"_33":21,"_136":177,"_35":24,"_138":-5,"_155":178,"_17":179},{"_37":166,"_13":167,"_31":168,"_131":-5,"_132":79,"_133":78,"_134":51,"_39":169,"_77":26,"_33":162,"_136":170,"_35":24,"_138":-5,"_155":171,"_17":172},{"_37":158,"_13":159,"_31":160,"_131":-5,"_132":79,"_133":78,"_134":51,"_39":161,"_77":26,"_33":162,"_136":163,"_35":24,"_138":-5,"_155":164,"_17":165},{"_37":130,"_13":18,"_31":32,"_131":-5,"_132":79,"_133":78,"_134":51,"_39":154,"_77":26,"_33":34,"_136":137,"_35":24,"_138":-5,"_155":156,"_17":157},["D",1738707018209],"children",[],[18],"d17837a6-e344-11ef-bf1c-e6cdfca9ef9f","getSpotifyToken","f0f86901-b73e-4809-a525-b6d3534e42e0",["D",1738707018209],"script","import { getRow, getLatestRefreshRow, updateRow } from\"./db\";\n\nexport async function getSpotifyToken(state: string) {\n const authData = await getRow(state);\n if (!authData) throw \"NO_DATA\";\n\n const data = JSON.parse(authData.data);\n let expiresAt = data.now + (data.expires_in * 1000);\n if (expiresAt > Date.now()) {\n return data.access_token;\n }\n const refreshData = await getLatestRefreshRow(state);\n if (!refreshData) throw \"NO_DATA\";\n let refresh = await spotifyRefreshToken({\n refresh_token: refreshData.refresh_token,\n client_id: Deno.env.get(\"CLIENT_ID\"),\n client_secret: Deno.env.get(\"CLIENT_SECRET\"),\n });\n if (refresh.error) {\n console.error(refresh.error, refresh.error_description);\n throw \"REFRESH_ERROR: \" + refresh.error;\n }\n if (!refresh.access_token) throw \"NO_TOKEN\";\n await updateRow(state, { data: refresh })\n if (refresh.refresh_token) await updateRow(state, { refresh_token: refresh.refresh_token });\n return refresh.access_token\n}",[],[159],"d178342c-e344-11ef-bf1c-e6cdfca9ef9f","db","1a4dc579-e332-4c5a-a21f-0b5c51ee4dc1",["D",1738707018209],"import { sqlite } from \"https://esm.town/v/std/sqlite?v=4\";\nimport { eq, sql, and, isNotNull } from \"npm:drizzle-orm\";\nimport { drizzle } from \"npm:drizzle-orm/libsql\";\nimport { sqliteTable, text } from \"npm:drizzle-orm/sqlite-core\";\n\nawait sqlite.execute(\"CREATE TABLE IF NOT EXISTS spotify_auth (id text primary_key, data text, refresh_token text)\")\n\nexport const db = drizzle(sqlite as any);\nexport const table = sqliteTable(\"spotify_auth\", {\n id: text(\"id\").primaryKey(),\n data: text(\"data\"),\n refresh_token: text(\"refresh_token\"),\n});\n\nexport const insertPendingCallback = (id: string) =>\n db.insert(table).values([{ id }]);\n\nexport const getRow = async (id: string) => {\n const [row] = await db.select().from(table).where(eq(table.id, id)).limit(1);\n return row\n}\nexport const getLatestRefreshRow = async (id: string) => {\n const [row] = await db.select().from(table).where(and(eq(table.id, id), isNotNull(table.refresh_token))).limit(1);\n return row;\n}\n\nexport const updateRow = async (id: string, data: Partial<{ data: object, refresh_token: string }>) => {\n if (data.data) {\n data.data.now = Date.now()\n data.data = JSON.stringify(data.data);\n }\n await db.update(table).set(...data).where(eq(table.id, id));\n}",[],[167],"d1782eaa-e344-11ef-bf1c-e6cdfca9ef9f","README.md","9f4216e6-e1ec-431b-94cc-7620fdc390f4",["D",1738707018209],"# spotifyOauthServer\n\nInstantly handle Spotify access with this server!\n\nHandles the token generation and refreshing as required.\n\nMake sure to set the CLIENT_ID and CLIENT_SECRET environment variables, as well as the URL of the server in the code.",[],[174],["D",1738707018209],{"_11":12,"_98":94},{"_11":12,"_92":-5,"_93":94,"_30":48,"_95":96,"_97":24},{"_77":78,"_13":16,"_37":79,"_80":38,"_81":82,"_83":84,"_85":44,"_86":87,"_88":89,"_90":14,"_91":12},"ctx",{"_70":-5,"_119":217,"_218":219,"_220":221,"_222":24,"_223":24,"_224":24,"_225":51,"_226":-5,"_227":-7,"_228":-7,"_229":26,"_230":24,"_231":24,"_232":-5,"_233":24,"_234":24,"_235":24,"_236":-5},"ENV",{"_188":189,"_190":191,"_192":16,"_193":194,"_195":196,"_197":198,"_199":200,"_201":202,"_203":204,"_205":206,"_207":208,"_209":210,"_211":212,"_213":214,"_215":216},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","811aa22498c9b0b5a47e8d778de579cdb990f332","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

History · server