Generate Spotify Access Tokens

\n This app uses{\" \"}\n \n Authorization Code Flow\n {\" \"}\n to authenticate users:\n

\n This project sets the CLIENT_ID and CLIENT_SECRET environment variables for the relevant Spotify App.\n
\n We generate a unique code that you will use to authenticate to us: {c.get(\"state\")}\n
You can pick which scopes to authorize.
We construct a URL to redirect you to, which will ask you to authorize the app on Spotify.
You are redirected back here, with a code in the URL.
We exchange the code for an access token and refresh token, which we save.
\n You can request your access token at{\" \"}\n \n https://{new URL(c.req.url).hostname}/token?state={c.get(\"state\")}\n \n
If your access token expires, we use the refresh token to get a new one.
Use your access token to make requests to the Spotify API by importing `getSpotifyToken` in your other vals.

\n\n

\n Get started\n

\n\n

\n

\n If you get in a broken state, you can always{\" \"}\n \n remove access to this app from your Spotify account\n or clear your cookies and begin the token generation process again.\n

\n ))\n .get(\"/scopes\", c =>\n c.html(\n

Choose your Spotify Scopes

\n \n

\n ))\n .get(\"/login\", async (c) => {\n const state = c.get(\"state\");\n const scopes = c.req.queries(\"scopes[]\").join(\" \");\n\n await insertPendingCallback({ id: state });\n const params = new URLSearchParams({\n response_type: 'code',\n client_id: Deno.env.get(\"CLIENT_ID\"),\n scope: scopes,\n redirect_uri,\n state,\n })\n return c.redirect(\n `https://accounts.spotify.com/authorize?${params}`);\n}).get(\"/callback\", async (c) => {\n const code = c.req.query(\"code\");\n const state = c.req.query(\"state\") as string;\n\n if (state !== c.get(\"state\")) {\n return c.html(\"State mismatch 1\");\n }\n\n const rowInitial = getRow(state)\n if (!rowInitial) {\n return c.html(\"State mismatch 2\");\n }\n if (rowInitial.data) {\n return c.html(\"Already authenticated for that state\");\n }\n\n const data = await spotifyRequestToken({\n code,\n client_id: Deno.env.get(\"CLIENT_ID\"),\n client_secret: Deno.env.get(\"CLIENT_SECRET\"),\n redirect_uri,\n });\n\n if (data.error) return c.json(data.error);\n if (!data.access_token) return c.json(\"No access token\");\n await updateRow(state, { data })\n if (data.refresh_token) await updateRow(state, { refresh_token });\n\n return c.redirect(\"/token?state=\" + state);\n})\n .get(\"/token\", async (c) => {\n const state = c.req.query(\"state\") as string;\n try {\n const token = await getSpotifyToken(state);\n return c.json(token);\n } catch (e) {\n if (e === \"NO_DATA\") return c.json(\"No auth data found for supplied state\");\n if (e === \"NO_TOKEN\") return c.json(\"No refresh access token\");\n if (e.startsWith(\"REFRESH_ERROR: \")) return c.json(\"Refresh error: \" + e.split(\" : \")[1]);\n throw e;\n }\n});\n\nexport default app.fetch;","deleted","children",[],[78],"d17837a6-e344-11ef-bf1c-e6cdfca9ef9f","getSpotifyToken","f0f86901-b73e-4809-a525-b6d3534e42e0",["D",1738707018209],"import { getRow, getLatestRefreshRow, updateRow } from\"./db\";\n\nexport async function getSpotifyToken(state: string) {\n const authData = await getRow(state);\n if (!authData) throw \"NO_DATA\";\n\n const data = JSON.parse(authData.data);\n let expiresAt = data.now + (data.expires_in * 1000);\n if (expiresAt > Date.now()) {\n return data.access_token;\n }\n const refreshData = await getLatestRefreshRow(state);\n if (!refreshData) throw \"NO_DATA\";\n let refresh = await spotifyRefreshToken({\n refresh_token: refreshData.refresh_token,\n client_id: Deno.env.get(\"CLIENT_ID\"),\n client_secret: Deno.env.get(\"CLIENT_SECRET\"),\n });\n if (refresh.error) {\n console.error(refresh.error, refresh.error_description);\n throw \"REFRESH_ERROR: \" + refresh.error;\n }\n if (!refresh.access_token) throw \"NO_TOKEN\";\n await updateRow(state, { data: refresh })\n if (refresh.refresh_token) await updateRow(state, { refresh_token: refresh.refresh_token });\n return refresh.access_token\n}",[],[90],["D",1738707018209],[],[19],"d1782eaa-e344-11ef-bf1c-e6cdfca9ef9f","README.md","9f4216e6-e1ec-431b-94cc-7620fdc390f4",["D",1738707018209],"# spotifyOauthServer\n\nInstantly handle Spotify access with this server!\n\nHandles the token generation and refreshing as required.\n\nMake sure to set the CLIENT_ID and CLIENT_SECRET environment variables, as well as the URL of the server in the code.",[],[100],"d16859c6-e344-11ef-bf1c-e6cdfca9ef9f",["D",1738707018209],"legacyEnvVars","httpPrivacy","description","imageUrl","userId","c156eb0e-8b9d-4104-a055-502e9a0eb441","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","2019e55b-c541-4c51-bef0-008eef10ef88","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_148":144},"org",{"_11":12,"_142":-5,"_143":144,"_112":113,"_145":146,"_147":50},"branch",{"_17":70,"_13":16,"_35":60,"_41":106,"_44":36,"_45":43,"_139":52,"_140":42,"_141":56,"_57":14,"_53":12},"forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvdXBsb2FkZWQvaW1nXzJ4cFpFME5pSXNZamJNd296dlZSYVJ0OVF1RSJ9","tier","pro","canRestrictVals","profileImageUrl","adoptOrgId",{"_35":106,"_13":14,"_37":197,"_48":-5,"_108":50,"_51":52,"_109":52,"_110":-5,"_111":-5,"_112":113,"_114":79,"_115":81,"_116":81,"_117":-5,"_118":32,"_55":119,"_120":-5,"_121":-5,"_122":-5,"_123":-5,"_124":125,"_126":125,"_127":128,"_129":128,"_130":128,"_131":125,"_132":125,"_133":198,"_135":199,"_137":200,"_49":50},[185,186,187,188],"files",[185,186,187,188],"counts",{"_176":32,"_177":70,"_178":32,"_34":179,"_180":181},[],{"_35":58,"_13":19,"_61":62,"_67":-5,"_59":60,"_69":70,"_80":81,"_37":174,"_17":32,"_65":66,"_63":64,"_85":50,"_71":-5,"_18":175},"upstreamProject",{"_35":42,"_13":14,"_110":-5,"_111":-5,"_51":52,"_133":172},"upstreamBranch",{"_35":36,"_37":170,"_39":171,"_13":16,"_41":42,"_17":43,"_44":-5,"_45":-5,"_46":47,"_48":-5,"_49":50,"_51":52,"_53":54,"_55":56,"_57":14},"emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1738703804472],["D",1738706635603],{"_11":54,"_148":173},"https://secure.gravatar.com/avatar/109fa713caf4e083c57622b7c6dad365.jpg?s=200&d=identicon",["D",1738707018209],[19],"pulls","branches","forks",{"_182":32,"_184":32},"connections",{"_182":32,"_183":32},"count","unfilledCount","emptyCount",{"_35":99,"_13":100,"_61":101,"_67":-5,"_59":60,"_69":70,"_80":81,"_37":102,"_17":32,"_65":24,"_63":103,"_85":50,"_71":-5,"_86":195,"_18":196},{"_35":58,"_13":19,"_61":62,"_67":-5,"_59":60,"_69":70,"_80":81,"_37":96,"_17":32,"_65":66,"_63":64,"_85":50,"_71":-5,"_86":193,"_18":194},{"_35":89,"_13":90,"_61":91,"_67":-5,"_59":60,"_69":70,"_80":81,"_37":92,"_17":32,"_65":66,"_63":93,"_85":50,"_71":-5,"_86":191,"_18":192},{"_35":77,"_13":78,"_61":79,"_67":-5,"_59":60,"_69":70,"_80":81,"_37":82,"_17":32,"_65":83,"_63":84,"_85":50,"_71":-5,"_86":189,"_18":190},[],[78],[],[90],[],[19],[],[100],["D",1738707018209],{"_11":12,"_148":144},{"_11":12,"_142":-5,"_143":144,"_112":113,"_145":146,"_147":50},{"_17":70,"_13":16,"_35":60,"_41":106,"_44":36,"_45":43,"_139":52,"_140":42,"_141":56,"_57":14,"_53":12},"ctx",{"_133":-5,"_167":234,"_235":236,"_237":238,"_239":50,"_240":50,"_241":50,"_242":81,"_243":-5,"_244":-7,"_245":-7,"_246":32,"_247":50,"_248":50,"_249":-5,"_250":50,"_251":50,"_252":50,"_253":-5},"ENV",{"_205":206,"_207":208,"_209":16,"_210":211,"_212":213,"_214":215,"_216":217,"_218":219,"_220":221,"_222":223,"_224":225,"_226":227,"_228":229,"_230":231,"_232":233},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","811aa22498c9b0b5a47e8d778de579cdb990f332","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]