topic OEmbed API missing CORS headers in Spotify for Developers

OEmbed API missing CORS headers

cdrini — Sun, 20 Jun 2021 23:11:02 GMT

It's not possible to hit the oembed endpoint from client-side JS. Try running this in your browser console on any non-Spotify domain:

await fetch('https://open.spotify.com/oembed?url=https://open.spotify.com/track/6fHxL22apYBSywdSSZlp6h').then(r => r.json())

You will get a CORS error. For reference, YouTube, SoundCloud, Vimeo have CORS-enabled oembed endpoints.

kopiro — Wed, 22 Sep 2021 11:55:08 GMT

Hello @cdrini, thanks for reporting this bug.

Your issue should be resolved now, we have added CORS support to the "/oembed" endpoint.

SWR3 — Tue, 12 Oct 2021 13:16:32 GMT

Hi,

it still doesn't work for playlists. The following example gives the same error.

await fetch('https://embed.spotify.com/oembed?url=https://open.spotify.com/playlist/5uHTCYBvcpQfP234BQwzqT').then(r => r.json())

cdrini — Tue, 19 Oct 2021 02:34:05 GMT

Awesome! Thank you for the fix, dev team 🙂