topic Re: API retrieving my data not user data in Spotify for Developers

API retrieving my data not user data

turobiter — Thu, 22 Jun 2023 16:35:54 GMT

My Question or Issue

I created a small app. A part of it displays a list of a user's playlists for them to select from. First I had issues with users being able to log in again as I had a cache folder in my git repository that was pushing old tokens. I deleted that cache file along with the pycache folder. Since then, when a user is taken to the page to select one of their playlists, it is showing my personal spotify playlists rather than theirs! I have no idea what has happened! I haven't altered any code in the app.py file. About an hour ago, when a user first logged in, it was showing their playlists. Until I deleted the cache files. Any clues on what could be the issue?

Re: API retrieving my data not user data

Ximzend — Thu, 22 Jun 2023 17:01:52 GMT

Without any code provided, nobody can tell.

Re: API retrieving my data not user data

turobiter — Thu, 22 Jun 2023 17:59:10 GMT

Here is the code for the relevant pages:

@app.route('/toptracks')

def redirector():

sp_oauth= create_spotify_oauth()

session.clear()

code= request.args.get('code')

token_info= sp_oauth.get_access_token(code)

print(token_info)

session[TOKEN_INFO]= token_info

return redirect('/selectplaylist')

@app.route('/selectplaylist')

def selectPlaylist():

try:

token_info= get_token()

except:

print('try logging in again')

redirect('/')

sp= spotipy.Spotify(auth=token_info['access_token'])

user= sp.current_user()['id']

allPlaylists= sp.user_playlists(user=user,limit=50)['items']

playName= [[i.get('name'),i.get('id')] for i in allPlaylists]

playId= [i.get('id') for i in allPlaylists]

return render_template('selectPlaylist.html',playName=playName,playId=playId)

def get_token():

token_info= session.get(TOKEN_INFO, None)

if not token_info:

raise 'exception'

now = int(time.time())

is_expired= token_info['expires_at'] - now < 60

if (is_expired):

sp_oauth= create_spotify_oauth()

token_info= sp_oauth.refresh_access_token(token_info['refresh_token'])

return token_info

Re: API retrieving my data not user data

turobiter — Thu, 22 Jun 2023 18:26:13 GMT

@app.route('/toptracks')

def redirector():

sp_oauth= create_spotify_oauth()

session.clear()

code= request.args.get('code')

token_info= sp_oauth.get_access_token(code)

print(token_info)

session[TOKEN_INFO]= token_info

return redirect('/selectplaylist')

@app.route('/selectplaylist')

def selectPlaylist():

try:

token_info= get_token()

except:

print('try logging in again')

redirect('/')

sp= spotipy.Spotify(auth=token_info['access_token'])

user= sp.current_user()['id']

allPlaylists= sp.user_playlists(user=user,limit=50)['items']

playName= [[i.get('name'),i.get('id')] for i in allPlaylists]

playId= [i.get('id') for i in allPlaylists]

return render_template('selectPlaylist.html',playName=playName,playId=playId)

def get_token():

token_info= session.get(TOKEN_INFO, None)

if not token_info:

raise 'exception'

now = int(time.time())

is_expired= token_info['expires_at'] - now < 60

if (is_expired):

sp_oauth= create_spotify_oauth()

token_info= sp_oauth.refresh_access_token(token_info['refresh_token'])

return token_info

Re: API retrieving my data not user data

Ximzend — Thu, 22 Jun 2023 18:47:35 GMT

https://stackoverflow.com/questions/76534799/why-is-spotify-api-displaying-my-data-to-other-users

Re: API retrieving my data not user data

turobiter — Thu, 22 Jun 2023 19:04:04 GMT

Wish that wasn't my question, but it is my own post 😅

Re: API retrieving my data not user data

samsupertaco — Mon, 04 Dec 2023 20:42:53 GMT

Get a solution to this? Experiencing the same problem.

Re: API retrieving my data not user data

xfecid — Tue, 05 Dec 2023 12:12:40 GMT

I also had problems with the .cache file that Spotify created in my directory. It then always used old tokens still stored in there, which made my software request to the account with that old token, even tho I OAuth with another account.
The flask session.clear() does not remove the .cache. Don't try to manually delete content from .cache and leave it their. This will raise some json errors from libraries used by Spotipy. I made sure to delete the .cache enterly at appropriate places in the code. The .cache will be build by Spotipy with the new token automatically.
"""

def cleanup():

cache_file = '.cache'

if os.path.exists(cache_file):

os.remove(cache_file)
"""
I'm calling this when I exit my software and basically always, when I also do session.clear().
So try calling cleanup() at places where you also clear the session.