Spotify Auth API

Use:

/login?id=alice
/u/alice

\n `,\n { headers: { \"Content-Type\": \"text/html\" } },\n );\n }\n\n // ---------------- LOGIN ----------------\n if (path === \"/login\") {\n const clientId = Deno.env.get(\"SPOTIFY_CLIENT_ID\")!;\n const userId = url.searchParams.get(\"id\");\n\n if (!userId) {\n return new Response(\"Missing ?id\", { status: 400 });\n }\n\n const params = new URLSearchParams({\n response_type: \"code\",\n client_id: clientId,\n scope: \"user-read-email user-read-private\",\n redirect_uri: redirectUri,\n state: userId,\n });\n\n return Response.redirect(\n `https://accounts.spotify.com/authorize?${params.toString()}`,\n );\n }\n\n // ---------------- CALLBACK ----------------\n if (path === \"/callback\") {\n const code = url.searchParams.get(\"code\");\n const userId = url.searchParams.get(\"state\");\n\n if (!code || !userId) {\n return new Response(\"Missing code or state\", { status: 400 });\n }\n\n const body = new URLSearchParams({\n grant_type: \"authorization_code\",\n code,\n redirect_uri: redirectUri,\n client_id: Deno.env.get(\"SPOTIFY_CLIENT_ID\")!,\n client_secret: Deno.env.get(\"SPOTIFY_CLIENT_SECRET\")!,\n });\n\n const tokenRes = await fetch(\"https://accounts.spotify.com/api/token\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n },\n body,\n });\n\n const tokenData = await tokenRes.json();\n\n if (!tokenData.access_token) {\n return new Response(JSON.stringify(tokenData), { status: 500 });\n }\n\n // 🔴 IMPORTANT: ensure DB write completes\n await sqlite.execute({\n sql: `\n insert or replace into spotify_tokens (user_id, token)\n values (?, ?)\n `,\n args: [userId, JSON.stringify(tokenData)],\n });\n\n // optional verification log\n const check = await sqlite.execute({\n sql: `select user_id from spotify_tokens where user_id = ?`,\n args: [userId],\n });\n\n console.log(\"STORED USER:\", check.rows);\n\n return Response.redirect(`${BASE_URL}/u/${userId}`);\n }\n\n // ---------------- USER PAGE ----------------\n if (path.startsWith(\"/u/\")) {\n const userId = path.split(\"/u/\")[1];\n\n const result = await sqlite.execute({\n sql: `select token from spotify_tokens where user_id = ?`,\n args: [userId],\n });\n\n const tokenData = result.rows[0]?.token\n ? JSON.parse(result.rows[0].token)\n : null;\n\n if (!tokenData?.access_token) {\n return new Response(\"User not logged in\", { status: 404 });\n }\n\n const meRes = await fetch(\"https://api.spotify.com/v1/me\", {\n headers: {\n Authorization: `Bearer ${tokenData.access_token}`,\n },\n });\n\n return Response.json(await meRes.json());\n }\n\n // ---------------- FALLBACK ----------------\n return Response.redirect(BASE_URL);\n}",[135],"pulls","branches",1,"forks","envVars",{"_151":153,"_154":59},"connections",{"_151":59,"_152":59},"count","unfilledCount",4,"emptyCount",{"_42":134,"_32":135,"_30":136,"_129":-5,"_40":41,"_39":137,"_130":26,"_37":161,"_13":139,"_33":140,"_35":141,"_23":26,"_132":-5,"_158":162,"_27":163},{"_42":128,"_32":28,"_30":31,"_129":-5,"_40":41,"_39":14,"_130":26,"_37":157,"_13":59,"_33":34,"_35":36,"_23":26,"_132":-5,"_158":159,"_27":160},["D",1780200775470],"children",[],[28],["D",1780194109529],[],[135],["D",1780190209970],["D",1789515657103],{"_96":95,"_104":100},{"_96":95,"_97":98,"_99":100,"_18":53,"_101":102,"_103":26},{"_13":85,"_32":86,"_42":41,"_87":43,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":44,"_94":95},"ctx",{"_78":-5,"_123":202,"_203":204,"_205":206,"_207":26,"_208":26,"_209":26,"_210":24,"_211":-5,"_212":-7,"_213":-7,"_214":59,"_215":26,"_216":26,"_217":-5,"_218":26,"_219":26,"_220":26,"_221":-5},"ENV",{"_173":174,"_175":176,"_177":86,"_178":179,"_180":181,"_182":183,"_184":185,"_186":187,"_188":189,"_190":191,"_192":193,"_194":195,"_196":197,"_198":199,"_200":201},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","fdb67791413f4386b4dbf18f354029a617f6160f","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v38