Generate Spotify Access Tokens

\n This app uses{\" \"}\n \n Authorization Code Flow\n {\" \"}\n to authenticate users:\n

\n This project sets the CLIENT_ID and CLIENT_SECRET environment variables for the relevant Spotify App.\n
\n We generate a unique code that you will use to authenticate to us: {c.get(\"state\")}\n
You can pick which scopes to authorize.
We construct a URL to redirect you to, which will ask you to authorize the app on Spotify.
You are redirected back here, with a code in the URL.
We exchange the code for an access token and refresh token, which we save.
\n You can request your access token at{\" \"}\n \n https://{new URL(c.req.url).hostname}/token?state={c.get(\"state\")}\n \n
If your access token expires, we use the refresh token to get a new one.
Use your access token to make requests to the Spotify API by importing `getSpotifyToken` in your other vals.

\n\n

\n Get started\n

\n\n

\n

\n If you get in a broken state, you can always{\" \"}\n \n remove access to this app from your Spotify account\n or clear your cookies and begin the token generation process again.\n

\n ))\n .get(\"/scopes\", c =>\n c.html(\n

Choose your Spotify Scopes

\n \n

\n ))\n .get(\"/login\", async (c) => {\n const state = c.get(\"state\");\n const scopes = c.req.queries(\"scopes[]\").join(\" \");\n\n await insertPendingCallback({ id: state });\n const params = new URLSearchParams({\n response_type: 'code',\n client_id: Deno.env.get(\"CLIENT_ID\"),\n scope: scopes,\n redirect_uri,\n state,\n })\n return c.redirect(\n `https://accounts.spotify.com/authorize?${params}`);\n}).get(\"/callback\", async (c) => {\n const code = c.req.query(\"code\");\n const state = c.req.query(\"state\") as string;\n\n if (state !== c.get(\"state\")) {\n return c.html(\"State mismatch 1\");\n }\n\n const rowInitial = getRow(state)\n if (!rowInitial) {\n return c.html(\"State mismatch 2\");\n }\n if (rowInitial.data) {\n return c.html(\"Already authenticated for that state\");\n }\n\n const data = await spotifyRequestToken({\n code,\n client_id: Deno.env.get(\"CLIENT_ID\"),\n client_secret: Deno.env.get(\"CLIENT_SECRET\"),\n redirect_uri,\n });\n\n if (data.error) return c.json(data.error);\n if (!data.access_token) return c.json(\"No access token\");\n await updateRow(state, { data })\n if (data.refresh_token) await updateRow(state, { refresh_token });\n\n return c.redirect(\"/token?state=\" + state);\n})\n .get(\"/token\", async (c) => {\n const state = c.req.query(\"state\") as string;\n try {\n const token = await getSpotifyToken(state);\n return c.json(token);\n } catch (e) {\n if (e === \"NO_DATA\") return c.json(\"No auth data found for supplied state\");\n if (e === \"NO_TOKEN\") return c.json(\"No refresh access token\");\n if (e.startsWith(\"REFRESH_ERROR: \")) return c.json(\"Refresh error: \" + e.split(\" : \")[1]);\n throw e;\n }\n});\n\nexport default app.fetch;","label",[18],"pulls","branches",1,"forks","envVars",{"_136":26,"_138":26},"connections",{"_136":26,"_137":26},"count","unfilledCount","emptyCount",{"_37":166,"_13":167,"_31":168,"_117":-5,"_118":78,"_119":77,"_121":111,"_39":169,"_76":130,"_33":21,"_124":170,"_35":24,"_126":-5,"_144":171,"_17":172},{"_37":157,"_13":158,"_31":159,"_117":-5,"_118":78,"_119":160,"_121":111,"_39":161,"_76":162,"_33":153,"_124":163,"_35":24,"_126":-5,"_144":164,"_17":165},{"_37":147,"_13":148,"_31":149,"_117":-5,"_118":78,"_119":150,"_121":111,"_39":151,"_76":152,"_33":153,"_124":154,"_35":24,"_126":-5,"_144":155,"_17":156},{"_37":116,"_13":18,"_31":32,"_117":-5,"_118":78,"_119":120,"_121":111,"_39":143,"_76":123,"_33":34,"_124":125,"_35":24,"_126":-5,"_144":145,"_17":146},["D",1738706446949],"children",[],[18],"ba3303de-e342-11ef-8ff1-e6cdfca9ef9f","getSpotifyToken","726e71c8-e342-11ef-9c89-e6cdfca9ef9f",23,["D",1738706120298],2,"script","import { getRow, getLatestRefreshRow, updateRow } from\"./db\";\n\nexport async function getSpotifyToken(state: string) {\n const authData = await getRow(state);\n if (!authData) throw \"NO_DATA\";\n\n const data = JSON.parse(authData.data);\n let expiresAt = data.now + (data.expires_in * 1000);\n if (expiresAt > Date.now()) {\n return data.access_token;\n }\n const refreshData = await getLatestRefreshRow(state);\n if (!refreshData) throw \"NO_DATA\";\n let refresh = await spotifyRefreshToken({\n refresh_token: refreshData.refresh_token,\n client_id: Deno.env.get(\"CLIENT_ID\"),\n client_secret: Deno.env.get(\"CLIENT_SECRET\"),\n });\n if (refresh.error) {\n console.error(refresh.error, refresh.error_description);\n throw \"REFRESH_ERROR: \" + refresh.error;\n }\n if (!refresh.access_token) throw \"NO_TOKEN\";\n await updateRow(state, { data: refresh })\n if (refresh.refresh_token) await updateRow(state, { refresh_token: refresh.refresh_token });\n return refresh.access_token\n}",[],[148],"c4d4c0f2-e342-11ef-ac12-e6cdfca9ef9f","db","fda971c0-e33d-11ef-b257-e6cdfca9ef9f",24,["D",1738706138130],7,"import { sqlite } from \"https://esm.town/v/std/sqlite?v=4\";\nimport { eq, sql, and, isNotNull } from \"npm:drizzle-orm\";\nimport { drizzle } from \"npm:drizzle-orm/libsql\";\nimport { sqliteTable, text } from \"npm:drizzle-orm/sqlite-core\";\n\nawait sqlite.execute(\"CREATE TABLE IF NOT EXISTS spotify_auth (id text primary_key, data text, refresh_token text)\")\n\nexport const db = drizzle(sqlite as any);\nexport const table = sqliteTable(\"spotify_auth\", {\n id: text(\"id\").primaryKey(),\n data: text(\"data\"),\n refresh_token: text(\"refresh_token\"),\n});\n\nexport const insertPendingCallback = (id: string) =>\n db.insert(table).values([{ id }]);\n\nexport const getRow = async (id: string) => {\n const [row] = await db.select().from(table).where(eq(table.id, id)).limit(1);\n return row\n}\nexport const getLatestRefreshRow = async (id: string) => {\n const [row] = await db.select().from(table).where(and(eq(table.id, id), isNotNull(table.refresh_token))).limit(1);\n return row;\n}\n\nexport const updateRow = async (id: string, data: Partial<{ data: object, refresh_token: string }>) => {\n if (data.data) {\n data.data.now = Date.now()\n data.data = JSON.stringify(data.data);\n }\n await db.update(table).set(...data).where(eq(table.id, id));\n}",[],[158],"ed58e7dc-e343-11ef-8a44-e6cdfca9ef9f","README.md","bd4e58c4-e343-11ef-9bbe-e6cdfca9ef9f",["D",1738706635603],"# spotifyOauthServer\n\nInstantly handle Spotify access with this server!\n\nHandles the token generation and refreshing as required.\n\nMake sure to set the CLIENT_ID and CLIENT_SECRET environment variables, as well as the URL of the server in the code.",[],[167],["D",1738703804472],{"_11":12,"_93":89},{"_11":12,"_87":-5,"_88":89,"_30":48,"_90":91,"_92":24},{"_76":77,"_13":16,"_37":78,"_79":38,"_80":-5,"_81":-5,"_82":-5,"_83":-5,"_84":-5,"_85":14,"_86":12},"ctx",{"_69":-5,"_113":210,"_211":212,"_213":214,"_215":24,"_216":24,"_217":24,"_218":111,"_219":-5,"_220":-7,"_221":-7,"_222":26,"_223":24,"_224":24,"_225":-5,"_226":24,"_227":24,"_228":24,"_229":-5},"ENV",{"_181":182,"_183":184,"_185":16,"_186":187,"_188":189,"_190":191,"_192":193,"_194":195,"_196":197,"_198":199,"_200":201,"_202":203,"_204":205,"_206":207,"_208":209},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","811aa22498c9b0b5a47e8d778de579cdb990f332","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

History · server