Generate Spotify Access Tokens

\n This app uses{\" \"}\n \n Authorization Code Flow\n {\" \"}\n to authenticate users:\n

\n This project sets the CLIENT_ID and CLIENT_SECRET environment variables for the relevant Spotify App.\n
\n We generate a unique code that you will use to authenticate to us: {c.get(\"state\")}\n
You can pick which scopes to authorize.
We construct a URL to redirect you to, which will ask you to authorize the app on Spotify.
You are redirected back here, with a code in the URL.
We exchange the code for an access token and refresh token, which we save.
\n You can request your access token at{\" \"}\n \n https://{new URL(c.req.url).hostname}/token?state={c.get(\"state\")}\n \n
If your access token expires, we use the refresh token to get a new one.
Use your access token to make requests to the Spotify API by importing `getSpotifyToken` in your other vals.

\n\n

\n Get started\n

\n\n

\n

\n If you get in a broken state, you can always{\" \"}\n \n remove access to this app from your Spotify account\n or clear your cookies and begin the token generation process again.\n

\n ))\n .get(\"/scopes\", c =>\n c.html(\n

Choose your Spotify Scopes

\n \n

\n ))\n .get(\"/login\", async (c) => {\n const state = c.get(\"state\");\n const scopes = c.req.queries(\"scopes[]\").join(\" \");\n\n await insertPendingCallback({ id: state });\n const params = new URLSearchParams({\n response_type: 'code',\n client_id: Deno.env.get(\"CLIENT_ID\"),\n scope: scopes,\n redirect_uri,\n state,\n })\n return c.redirect(\n `https://accounts.spotify.com/authorize?${params}`);\n}).get(\"/callback\", async (c) => {\n const code = c.req.query(\"code\");\n const state = c.req.query(\"state\") as string;\n\n if (state !== c.get(\"state\")) {\n return c.html(\"State mismatch 1\");\n }\n\n const rowInitial = getRow(state)\n if (!rowInitial) {\n return c.html(\"State mismatch 2\");\n }\n if (rowInitial.data) {\n return c.html(\"Already authenticated for that state\");\n }\n\n const data = await spotifyRequestToken({\n code,\n client_id: Deno.env.get(\"CLIENT_ID\"),\n client_secret: Deno.env.get(\"CLIENT_SECRET\"),\n redirect_uri,\n });\n\n if (data.error) return c.json(data.error);\n if (!data.access_token) return c.json(\"No access token\");\n await updateRow(state, { data })\n if (data.refresh_token) await updateRow(state, { refresh_token });\n\n return c.redirect(\"/token?state=\" + state);\n})\n .get(\"/token\", async (c) => {\n const state = c.req.query(\"state\") as string;\n try {\n const token = await getSpotifyToken(state);\n return c.json(token);\n } catch (e) {\n if (e === \"NO_DATA\") return c.json(\"No auth data found for supplied state\");\n if (e === \"NO_TOKEN\") return c.json(\"No refresh access token\");\n if (e.startsWith(\"REFRESH_ERROR: \")) return c.json(\"Refresh error: \" + e.split(\" : \")[1]);\n throw e;\n }\n});\n\nexport default app.fetch;","children",[],[145],"ba3303de-e342-11ef-8ff1-e6cdfca9ef9f","getSpotifyToken","726e71c8-e342-11ef-9c89-e6cdfca9ef9f",23,["D",1738706120298],2,"import { getRow, getLatestRefreshRow, updateRow } from\"./db\";\n\nexport async function getSpotifyToken(state: string) {\n const authData = await getRow(state);\n if (!authData) throw \"NO_DATA\";\n\n const data = JSON.parse(authData.data);\n let expiresAt = data.now + (data.expires_in * 1000);\n if (expiresAt > Date.now()) {\n return data.access_token;\n }\n const refreshData = await getLatestRefreshRow(state);\n if (!refreshData) throw \"NO_DATA\";\n let refresh = await spotifyRefreshToken({\n refresh_token: refreshData.refresh_token,\n client_id: Deno.env.get(\"CLIENT_ID\"),\n client_secret: Deno.env.get(\"CLIENT_SECRET\"),\n });\n if (refresh.error) {\n console.error(refresh.error, refresh.error_description);\n throw \"REFRESH_ERROR: \" + refresh.error;\n }\n if (!refresh.access_token) throw \"NO_TOKEN\";\n await updateRow(state, { data: refresh })\n if (refresh.refresh_token) await updateRow(state, { refresh_token: refresh.refresh_token });\n return refresh.access_token\n}",[],[155],["D",1738706138130],[],[18],"ed58e7dc-e343-11ef-8a44-e6cdfca9ef9f","README.md","bd4e58c4-e343-11ef-9bbe-e6cdfca9ef9f",["D",1738706635603],"# spotifyOauthServer\n\nInstantly handle Spotify access with this server!\n\nHandles the token generation and refreshing as required.\n\nMake sure to set the CLIENT_ID and CLIENT_SECRET environment variables, as well as the URL of the server in the code.",[],[167],["D",1738703804472],{"_11":12,"_94":90},{"_11":12,"_88":-5,"_89":90,"_30":48,"_91":92,"_93":24},{"_77":78,"_13":16,"_37":79,"_80":38,"_81":-5,"_82":-5,"_83":-5,"_84":-5,"_85":-5,"_86":14,"_87":12},"ctx",{"_70":-5,"_114":210,"_211":212,"_213":214,"_215":24,"_216":24,"_217":24,"_218":112,"_219":-5,"_220":-7,"_221":-7,"_222":26,"_223":24,"_224":24,"_225":-5,"_226":24,"_227":24,"_228":24,"_229":-5},"ENV",{"_181":182,"_183":184,"_185":16,"_186":187,"_188":189,"_190":191,"_192":193,"_194":195,"_196":197,"_198":199,"_200":201,"_202":203,"_204":205,"_206":207,"_208":209},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

History · db