<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Spotify Web API returns 403 Forbidden on library save despite user-library-modify scope in Spotify for Developers</title>
    <link>https://community.spotify.com/t5/Spotify-for-Developers/Spotify-Web-API-returns-403-Forbidden-on-library-save-despite/m-p/7446050#M21428</link>
    <description>&lt;P&gt;Hi team,&lt;BR /&gt;&lt;BR /&gt;I’m building a local browser app using Spotify Authorization Code with PKCE.&lt;BR /&gt;&lt;BR /&gt;Auth works, playback works, search works, and reading the user profile works. The access token includes both &lt;EM&gt;`user-library-read`&lt;/EM&gt; and &lt;EM&gt;`user-library-modify`.&lt;/EM&gt;&lt;BR /&gt;&lt;BR /&gt;Confirmed granted scopes from token response/local storage:&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;playlist-read-private playlist-read-collaborative streaming user-modify-playback-state user-library-read user-library-modify playlist-modify-private user-read-playback-state user-read-currently-playing user-read-email user-read-private&lt;/LI-CODE&gt;&lt;P&gt;&lt;BR /&gt;&lt;U&gt;Working:&lt;/U&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;&lt;EM&gt;- &lt;/EM&gt;&lt;STRONG&gt;GET &lt;/STRONG&gt;&lt;EM&gt;&lt;A href="https://api.spotify.com/v1/me" target="_blank"&gt;https://api.spotify.com/v1/me&lt;/A&gt; → &lt;/EM&gt;&lt;STRONG&gt;200&lt;/STRONG&gt;&lt;/LI&gt;&lt;LI&gt;&lt;EM&gt;- &lt;/EM&gt;&lt;STRONG&gt;GET &lt;/STRONG&gt;&lt;EM&gt;&lt;A href="https://api.spotify.com/v1/me/tracks?limit=1" target="_blank"&gt;https://api.spotify.com/v1/me/tracks?limit=1&lt;/A&gt; → &lt;/EM&gt;&lt;STRONG&gt;200&lt;/STRONG&gt;&lt;/LI&gt;&lt;LI&gt;- &lt;STRONG&gt;Playback&lt;/STRONG&gt; endpoints work&lt;/LI&gt;&lt;LI&gt;- &lt;STRONG&gt;Search&lt;/STRONG&gt; endpoints work&lt;/LI&gt;&lt;/UL&gt;&lt;P&gt;&lt;U&gt;Failing:&lt;/U&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;&lt;STRONG&gt;PUT &lt;/STRONG&gt;&lt;EM&gt;&lt;A href="https://api.spotify.com/v1/me/albums" target="_blank"&gt;https://api.spotify.com/v1/me/albums&lt;/A&gt; with JSON body `{ "ids": ["6T8ahpJA6ghTzviOvqoUdb"] }` → &lt;/EM&gt;&lt;STRONG&gt;403&lt;/STRONG&gt;&lt;/LI&gt;&lt;LI&gt;&lt;STRONG&gt;PUT &lt;/STRONG&gt;&lt;EM&gt;&lt;A href="https://api.spotify.com/v1/me/tracks" target="_blank"&gt;https://api.spotify.com/v1/me/tracks&lt;/A&gt; with JSON body `{ "ids": ["TRACK_ID"] }` → &lt;/EM&gt;&lt;STRONG&gt;403&lt;/STRONG&gt;&lt;/LI&gt;&lt;LI&gt;&lt;STRONG&gt;GET&lt;/STRONG&gt;&lt;EM&gt; &lt;A href="https://api.spotify.com/v1/me/albums/contains?ids=6T8ahpJA6ghTzviOvqoUdb" target="_blank"&gt;https://api.spotify.com/v1/me/albums/contains?ids=6T8ahpJA6ghTzviOvqoUdb&lt;/A&gt; → &lt;/EM&gt;&lt;STRONG&gt;403&lt;/STRONG&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;P&gt;Response body:&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;{ "error": { "status": 403, "message": "Forbidden" } }&lt;/LI-CODE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I’ve also tried removing app access, clearing local storage, forcing&lt;EM&gt; `show_dialog=true`,&lt;/EM&gt; reconnecting, and confirming the token still includes &lt;EM&gt;`user-library-modify`.&lt;BR /&gt;&lt;BR /&gt;&lt;/EM&gt;I know there have been some changes to the API recently, but from what I can tell, this shouldn't be affected?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Thu, 21 May 2026 23:19:11 GMT</pubDate>
    <dc:creator>Scott_Mac</dc:creator>
    <dc:date>2026-05-21T23:19:11Z</dc:date>
    <item>
      <title>Spotify Web API returns 403 Forbidden on library save despite user-library-modify scope</title>
      <link>https://community.spotify.com/t5/Spotify-for-Developers/Spotify-Web-API-returns-403-Forbidden-on-library-save-despite/m-p/7446050#M21428</link>
      <description>&lt;P&gt;Hi team,&lt;BR /&gt;&lt;BR /&gt;I’m building a local browser app using Spotify Authorization Code with PKCE.&lt;BR /&gt;&lt;BR /&gt;Auth works, playback works, search works, and reading the user profile works. The access token includes both &lt;EM&gt;`user-library-read`&lt;/EM&gt; and &lt;EM&gt;`user-library-modify`.&lt;/EM&gt;&lt;BR /&gt;&lt;BR /&gt;Confirmed granted scopes from token response/local storage:&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;playlist-read-private playlist-read-collaborative streaming user-modify-playback-state user-library-read user-library-modify playlist-modify-private user-read-playback-state user-read-currently-playing user-read-email user-read-private&lt;/LI-CODE&gt;&lt;P&gt;&lt;BR /&gt;&lt;U&gt;Working:&lt;/U&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;&lt;EM&gt;- &lt;/EM&gt;&lt;STRONG&gt;GET &lt;/STRONG&gt;&lt;EM&gt;&lt;A href="https://api.spotify.com/v1/me" target="_blank"&gt;https://api.spotify.com/v1/me&lt;/A&gt; → &lt;/EM&gt;&lt;STRONG&gt;200&lt;/STRONG&gt;&lt;/LI&gt;&lt;LI&gt;&lt;EM&gt;- &lt;/EM&gt;&lt;STRONG&gt;GET &lt;/STRONG&gt;&lt;EM&gt;&lt;A href="https://api.spotify.com/v1/me/tracks?limit=1" target="_blank"&gt;https://api.spotify.com/v1/me/tracks?limit=1&lt;/A&gt; → &lt;/EM&gt;&lt;STRONG&gt;200&lt;/STRONG&gt;&lt;/LI&gt;&lt;LI&gt;- &lt;STRONG&gt;Playback&lt;/STRONG&gt; endpoints work&lt;/LI&gt;&lt;LI&gt;- &lt;STRONG&gt;Search&lt;/STRONG&gt; endpoints work&lt;/LI&gt;&lt;/UL&gt;&lt;P&gt;&lt;U&gt;Failing:&lt;/U&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;&lt;STRONG&gt;PUT &lt;/STRONG&gt;&lt;EM&gt;&lt;A href="https://api.spotify.com/v1/me/albums" target="_blank"&gt;https://api.spotify.com/v1/me/albums&lt;/A&gt; with JSON body `{ "ids": ["6T8ahpJA6ghTzviOvqoUdb"] }` → &lt;/EM&gt;&lt;STRONG&gt;403&lt;/STRONG&gt;&lt;/LI&gt;&lt;LI&gt;&lt;STRONG&gt;PUT &lt;/STRONG&gt;&lt;EM&gt;&lt;A href="https://api.spotify.com/v1/me/tracks" target="_blank"&gt;https://api.spotify.com/v1/me/tracks&lt;/A&gt; with JSON body `{ "ids": ["TRACK_ID"] }` → &lt;/EM&gt;&lt;STRONG&gt;403&lt;/STRONG&gt;&lt;/LI&gt;&lt;LI&gt;&lt;STRONG&gt;GET&lt;/STRONG&gt;&lt;EM&gt; &lt;A href="https://api.spotify.com/v1/me/albums/contains?ids=6T8ahpJA6ghTzviOvqoUdb" target="_blank"&gt;https://api.spotify.com/v1/me/albums/contains?ids=6T8ahpJA6ghTzviOvqoUdb&lt;/A&gt; → &lt;/EM&gt;&lt;STRONG&gt;403&lt;/STRONG&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;P&gt;Response body:&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;{ "error": { "status": 403, "message": "Forbidden" } }&lt;/LI-CODE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I’ve also tried removing app access, clearing local storage, forcing&lt;EM&gt; `show_dialog=true`,&lt;/EM&gt; reconnecting, and confirming the token still includes &lt;EM&gt;`user-library-modify`.&lt;BR /&gt;&lt;BR /&gt;&lt;/EM&gt;I know there have been some changes to the API recently, but from what I can tell, this shouldn't be affected?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Thu, 21 May 2026 23:19:11 GMT</pubDate>
      <guid>https://community.spotify.com/t5/Spotify-for-Developers/Spotify-Web-API-returns-403-Forbidden-on-library-save-despite/m-p/7446050#M21428</guid>
      <dc:creator>Scott_Mac</dc:creator>
      <dc:date>2026-05-21T23:19:11Z</dc:date>
    </item>
    <item>
      <title>Re: Spotify Web API returns 403 Forbidden on library save despite user-library-modify scope</title>
      <link>https://community.spotify.com/t5/Spotify-for-Developers/Spotify-Web-API-returns-403-Forbidden-on-library-save-despite/m-p/7446708#M21435</link>
      <description>&lt;P&gt;Hi &lt;a href="https://community.spotify.com/t5/user/viewprofilepage/user-id/21662073"&gt;@Scott_Mac&lt;/a&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;You should give &lt;A href="https://developer.spotify.com/documentation/web-api/tutorials/february-2026-migration-guide" target="_self"&gt;the February 2026 Web API Dev Mode Changes - Migration Guide&lt;/A&gt; a look.&lt;/P&gt;
&lt;P&gt;I hope this helps.&lt;/P&gt;</description>
      <pubDate>Fri, 22 May 2026 14:58:59 GMT</pubDate>
      <guid>https://community.spotify.com/t5/Spotify-for-Developers/Spotify-Web-API-returns-403-Forbidden-on-library-save-despite/m-p/7446708#M21435</guid>
      <dc:creator>Ximzend</dc:creator>
      <dc:date>2026-05-22T14:58:59Z</dc:date>
    </item>
  </channel>
</rss>

