Allow local IP Address Range as Redirect URI

moarhof — Tue, 16 Sep 2025 15:21:58 GMT

The new policy for redirect URIs only allows using the local host IP 127.0.0.1. with an unencrypted http call.

This is nice and sufficient for many use cases.

Unfortunately this isn't a solution for devices like ESP32 or ESP8266 because they don't support this local host IP address. For these devices it would be necessary to use the specific local IP address or an mdns address "xxxx.local" with a simple unencrypted http call.

Could at least the range of private IP-Addresses (192.168.0.0..., 172.16.0.0....., 10.0.0.0...) be re-enabled as redirect URIs or are there severe security issues preventing this?

topic Allow local IP Address Range as Redirect URI in Spotify for Developers

Allow local IP Address Range as Redirect URI