Generate Spotify Access Tokens

\n This app uses{\" \"}\n \n Authorization Code Flow\n {\" \"}\n to authenticate users:\n

\n This project sets the CLIENT_ID and CLIENT_SECRET environment variables for the relevant Spotify App.\n
\n We generate a unique code that you will use to authenticate to us: {c.get(\"state\")}\n
You can pick which scopes to authorize.
We construct a URL to redirect you to, which will ask you to authorize the app on Spotify.
You are redirected back here, with a code in the URL.
We exchange the code for an access token and refresh token, which we save.
\n You can request your access token at{\" \"}\n \n https://{new URL(c.req.url).hostname}/token?state={c.get(\"state\")}\n \n
If your access token expires, we use the refresh token to get a new one.
Use your access token to make requests to the Spotify API by importing `getSpotifyToken` in your other vals.

\n\n

\n Get started\n

\n\n

\n

\n If you get in a broken state, you can always{\" \"}\n \n remove access to this app from your Spotify account\n or clear your cookies and begin the token generation process again.\n

\n ))\n .get(\"/scopes\", c =>\n c.html(\n

Choose your Spotify Scopes

\n \n

\n ))\n .get(\"/login\", async (c) => {\n const state = c.get(\"state\");\n const scopes = c.req.queries(\"scopes[]\").join(\" \");\n\n await insertPendingCallback({ id: state });\n const params = new URLSearchParams({\n response_type: 'code',\n client_id: Deno.env.get(\"CLIENT_ID\"),\n scope: scopes,\n redirect_uri,\n state,\n })\n return c.redirect(\n `https://accounts.spotify.com/authorize?${params}`);\n}).get(\"/callback\", async (c) => {\n const code = c.req.query(\"code\");\n const state = c.req.query(\"state\") as string;\n\n if (state !== c.get(\"state\")) {\n return c.html(\"State mismatch 1\");\n }\n\n const rowInitial = getRow(state)\n if (!rowInitial) {\n return c.html(\"State mismatch 2\");\n }\n if (rowInitial.data) {\n return c.html(\"Already authenticated for that state\");\n }\n\n const data = await spotifyRequestToken({\n code,\n client_id: Deno.env.get(\"CLIENT_ID\"),\n client_secret: Deno.env.get(\"CLIENT_SECRET\"),\n redirect_uri,\n });\n\n if (data.error) return c.json(data.error);\n if (!data.access_token) return c.json(\"No access token\");\n await updateRow(state, { data })\n if (data.refresh_token) await updateRow(state, { refresh_token });\n\n return c.redirect(\"/token?state=\" + state);\n})\n .get(\"/token\", async (c) => {\n const state = c.req.query(\"state\") as string;\n try {\n const token = await getSpotifyToken(state);\n return c.json(token);\n } catch (e) {\n if (e === \"NO_DATA\") return c.json(\"No auth data found for supplied state\");\n if (e === \"NO_TOKEN\") return c.json(\"No refresh access token\");\n if (e.startsWith(\"REFRESH_ERROR: \")) return c.json(\"Refresh error: \" + e.split(\" : \")[1]);\n throw e;\n }\n});\n\nexport default app.fetch;","deleted","label",[111],"ba3303de-e342-11ef-8ff1-e6cdfca9ef9f","getSpotifyToken","726e71c8-e342-11ef-9c89-e6cdfca9ef9f",23,["D",1738706120298],2,"script","import { getRow, getLatestRefreshRow, updateRow } from\"./db\";\n\nexport async function getSpotifyToken(state: string) {\n const authData = await getRow(state);\n if (!authData) throw \"NO_DATA\";\n\n const data = JSON.parse(authData.data);\n let expiresAt = data.now + (data.expires_in * 1000);\n if (expiresAt > Date.now()) {\n return data.access_token;\n }\n const refreshData = await getLatestRefreshRow(state);\n if (!refreshData) throw \"NO_DATA\";\n let refresh = await spotifyRefreshToken({\n refresh_token: refreshData.refresh_token,\n client_id: Deno.env.get(\"CLIENT_ID\"),\n client_secret: Deno.env.get(\"CLIENT_SECRET\"),\n });\n if (refresh.error) {\n console.error(refresh.error, refresh.error_description);\n throw \"REFRESH_ERROR: \" + refresh.error;\n }\n if (!refresh.access_token) throw \"NO_TOKEN\";\n await updateRow(state, { data: refresh })\n if (refresh.refresh_token) await updateRow(state, { refresh_token: refresh.refresh_token });\n return refresh.access_token\n}",[128],"c4d4c0f2-e342-11ef-ac12-e6cdfca9ef9f","db","fda971c0-e33d-11ef-b257-e6cdfca9ef9f",24,["D",1738706138130],7,"import { sqlite } from \"https://esm.town/v/std/sqlite?v=4\";\nimport { eq, sql, and, isNotNull } from \"npm:drizzle-orm\";\nimport { drizzle } from \"npm:drizzle-orm/libsql\";\nimport { sqliteTable, text } from \"npm:drizzle-orm/sqlite-core\";\n\nawait sqlite.execute(\"CREATE TABLE IF NOT EXISTS spotify_auth (id text primary_key, data text, refresh_token text)\")\n\nexport const db = drizzle(sqlite as any);\nexport const table = sqliteTable(\"spotify_auth\", {\n id: text(\"id\").primaryKey(),\n data: text(\"data\"),\n refresh_token: text(\"refresh_token\"),\n});\n\nexport const insertPendingCallback = (id: string) =>\n db.insert(table).values([{ id }]);\n\nexport const getRow = async (id: string) => {\n const [row] = await db.select().from(table).where(eq(table.id, id)).limit(1);\n return row\n}\nexport const getLatestRefreshRow = async (id: string) => {\n const [row] = await db.select().from(table).where(and(eq(table.id, id), isNotNull(table.refresh_token))).limit(1);\n return row;\n}\n\nexport const updateRow = async (id: string, data: Partial<{ data: object, refresh_token: string }>) => {\n if (data.data) {\n data.data.now = Date.now()\n data.data = JSON.stringify(data.data);\n }\n await db.update(table).set(...data).where(eq(table.id, id));\n}",[137],"ed58e7dc-e343-11ef-8a44-e6cdfca9ef9f","README.md","bd4e58c4-e343-11ef-9bbe-e6cdfca9ef9f",["D",1738706635603],1,"# spotifyOauthServer\n\nInstantly handle Spotify access with this server!\n\nHandles the token generation and refreshing as required.\n\nMake sure to set the CLIENT_ID and CLIENT_SECRET environment variables, as well as the URL of the server in the code.",[145],"pulls","branches","forks","envVars",{"_158":40,"_160":40},"connections",{"_158":40,"_159":40},"count","unfilledCount","emptyCount",{"_18":144,"_20":145,"_112":146,"_113":-5,"_114":66,"_115":64,"_117":101,"_22":175,"_63":148,"_120":94,"_122":149,"_124":26,"_125":-5,"_166":176,"_83":177},{"_18":136,"_20":137,"_112":138,"_113":-5,"_114":66,"_115":139,"_117":101,"_22":172,"_63":141,"_120":133,"_122":142,"_124":26,"_125":-5,"_166":173,"_83":174},{"_18":127,"_20":128,"_112":129,"_113":-5,"_114":66,"_115":130,"_117":101,"_22":169,"_63":132,"_120":133,"_122":134,"_124":26,"_125":-5,"_166":170,"_83":171},{"_18":110,"_20":111,"_112":35,"_113":-5,"_114":66,"_115":116,"_117":101,"_22":165,"_63":119,"_120":121,"_122":123,"_124":26,"_125":-5,"_166":167,"_83":168},["D",1738706446949],"children",[],[111],["D",1738706120298],[],[128],["D",1738706138130],[],[137],["D",1738706635603],[],[145],["D",1738703804472],{"_16":17,"_81":77},{"_16":17,"_75":-5,"_76":77,"_32":33,"_78":79,"_80":26},{"_63":64,"_20":65,"_18":66,"_67":19,"_68":-5,"_69":-5,"_70":-5,"_71":-5,"_72":-5,"_73":21,"_74":17},"ctx",{"_56":-5,"_103":215,"_216":217,"_218":219,"_220":26,"_221":26,"_222":26,"_223":101,"_224":-5,"_225":-7,"_226":-7,"_227":40,"_228":26,"_229":26,"_230":-5,"_231":26,"_232":26,"_233":26,"_234":-5},"ENV",{"_186":187,"_188":189,"_190":65,"_191":192,"_193":194,"_195":196,"_197":198,"_199":200,"_201":202,"_203":204,"_205":206,"_207":208,"_209":210,"_211":212,"_213":214},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","fdb67791413f4386b4dbf18f354029a617f6160f","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]