Spotify Auth API

Use:

/login?id=alice
/u/alice

\n `,\n { headers: { \"Content-Type\": \"text/html\" } },\n );\n }\n\n // ---------------- LOGIN ----------------\n if (path === \"/login\") {\n const clientId = Deno.env.get(\"SPOTIFY_CLIENT_ID\")!;\n const userId = url.searchParams.get(\"id\");\n\n if (!userId) {\n return new Response(\"Missing ?id\", { status: 400 });\n }\n\n const params = new URLSearchParams({\n response_type: \"code\",\n client_id: clientId,\n scope: \"user-read-email user-read-private\",\n redirect_uri: redirectUri,\n state: userId,\n });\n\n return Response.redirect(\n `https://accounts.spotify.com/authorize?${params.toString()}`,\n );\n }\n\n // ---------------- CALLBACK ----------------\n if (path === \"/callback\") {\n const code = url.searchParams.get(\"code\");\n const userId = url.searchParams.get(\"state\");\n\n if (!code || !userId) {\n return new Response(\"Missing code or state\", { status: 400 });\n }\n\n const body = new URLSearchParams({\n grant_type: \"authorization_code\",\n code,\n redirect_uri: redirectUri,\n client_id: Deno.env.get(\"SPOTIFY_CLIENT_ID\")!,\n client_secret: Deno.env.get(\"SPOTIFY_CLIENT_SECRET\")!,\n });\n\n const tokenRes = await fetch(\"https://accounts.spotify.com/api/token\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n },\n body,\n });\n\n const tokenData = await tokenRes.json();\n\n if (!tokenData.access_token) {\n return new Response(JSON.stringify(tokenData), { status: 500 });\n }\n\n // 🔴 IMPORTANT: ensure DB write completes\n await sqlite.execute({\n sql: `\n insert or replace into spotify_tokens (user_id, token)\n values (?, ?)\n `,\n args: [userId, JSON.stringify(tokenData)],\n });\n\n // optional verification log\n const check = await sqlite.execute({\n sql: `select user_id from spotify_tokens where user_id = ?`,\n args: [userId],\n });\n\n console.log(\"STORED USER:\", check.rows);\n\n return Response.redirect(`${BASE_URL}/u/${userId}`);\n }\n\n // ---------------- USER PAGE ----------------\n if (path.startsWith(\"/u/\")) {\n const userId = path.split(\"/u/\")[1];\n\n const result = await sqlite.execute({\n sql: `select token from spotify_tokens where user_id = ?`,\n args: [userId],\n });\n\n const tokenData = result.rows[0]?.token\n ? JSON.parse(result.rows[0].token)\n : null;\n\n if (!tokenData?.access_token) {\n return new Response(\"User not logged in\", { status: 404 });\n }\n\n const meRes = await fetch(\"https://api.spotify.com/v1/me\", {\n headers: {\n Authorization: `Bearer ${tokenData.access_token}`,\n },\n });\n\n return Response.json(await meRes.json());\n }\n\n // ---------------- FALLBACK ----------------\n return Response.redirect(BASE_URL);\n}","label",[131],"0bd7f242-5ca7-11f1-82dd-1607ee4eb77e",["D",1780200795308],1,[28],"pulls","branches","forks","envVars",{"_153":155,"_156":60},"connections",{"_153":60,"_154":60},"count","unfilledCount",4,"emptyCount",{"_42":142,"_32":28,"_30":31,"_133":-5,"_40":41,"_39":14,"_135":123,"_37":163,"_13":144,"_34":35,"_36":-5,"_24":25,"_140":-5,"_160":164,"_27":165},{"_42":130,"_32":131,"_30":132,"_133":-5,"_40":41,"_39":134,"_135":25,"_37":159,"_13":137,"_34":138,"_36":139,"_24":25,"_140":-5,"_160":161,"_27":162},["D",1780194109529],"children",[],[131],["D",1780200795308],[],[28],["D",1780190209970],["D",1789515657103],{"_97":96,"_105":101},{"_97":96,"_98":99,"_100":101,"_18":54,"_102":103,"_104":25},{"_13":86,"_32":87,"_42":41,"_88":43,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":44,"_95":96},"ctx",{"_79":-5,"_125":204,"_205":206,"_207":208,"_209":25,"_210":25,"_211":25,"_212":123,"_213":-5,"_214":-7,"_215":-7,"_216":60,"_217":25,"_218":25,"_219":-5,"_220":25,"_221":25,"_222":25,"_223":-5},"ENV",{"_175":176,"_177":178,"_179":87,"_180":181,"_182":183,"_184":185,"_186":187,"_188":189,"_190":191,"_192":193,"_194":195,"_196":197,"_198":199,"_200":201,"_202":203},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","fdb67791413f4386b4dbf18f354029a617f6160f","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v41