Announcements

Spotify Community

- Explore Premium
  
  Individual1 account - For one person.
  
  Duo2 accounts - For couples under one roof.
  
  Family6 accounts - For family members under one roof.
  
  Student1 account - Discount for eligible students.
Install App
Log In

cancel

Turn on suggestions

Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.

Showing results for

Search instead for

Did you mean:

You are here

Home
Help
Spotify for Developers
Using HTTP-Only cookies for access tokens

Community Guidelines
Community Blog
FAQs
Help
Chat
Spotify Stars
Ideas
Vault
- The Blog Vault
- App & Features

.nav-section.yes-js {display:none !important;}

Help

Announcements
Ongoing Issues
Accounts
Subscriptions
Premium Family
Premium Student
Your Library
iOS (iPhone, iPad)
Android
Desktop (Windows)
Desktop (Mac)
Desktop (Linux)
Content Questions
Car Thing
Other (Podcasts, Partners, etc.)
Spotify for Developers

Chat

Music Exchange
Podcast Discussion
Music Discussion
Discovery & Promo
Social & Random

Help Wizard

Step 1

Type in your question below and we'll check to see what answers we can find...

Loading article...

Submitting...

If you couldn't find any answers in the previous step then we need to post your question in the community and wait for someone to respond. You'll be notified when that happens.

Simply add some detail to your question and refine the title if needed, choose the relevant category, then post.

Question: More detail: Category:

Just quickly...

Before we can post your question we need you to quickly make an account (or sign in if you already have one).

Don't worry - it's quick and painless! Just click below, and once you're logged in we'll bring you right back here and post your question. We'll remember what you've already typed in so you won't have to do it again.

NEXT STEP

FAQs

Please see below the most popular frequently asked questions.

Loading article...

Loading faqs...

VIEW ALL

Ongoing Issues

Please see below the current ongoing issues which are under investigation.

Loading issue...

Loading ongoing issues...

VIEW ALL

Help categories

Account & Payment

Accounts
Subscriptions
Premium Family
Premium Student

Using Spotify

Your Library
Content Questions
Spotify for Developers
FAQs
Other (Podcasts, Partners, etc.)

Listen Everywhere

iOS (iPhone, iPad)
Android
Desktop (Windows)
Desktop (Mac)
Desktop (Linux)
Car Thing

Ongoing Issues

Using HTTP-Only cookies for access tokens

MichaelKeay

Casual Listener

2023-03-18 07:51 PM

Mark as New
Bookmark
Subscribe
Mute
Subscribe to RSS Feed
Permalink
Print
Report Inappropriate Content

My Question or Issue

I have set up a Node app that follows the OAuth authorization flow with PKCE, but I can only receive access tokens in the HTTP response body. Ideally I want to use HTTP-only cookies as I would if I was using my own server to avoid XSS or CSRF attacks. Is there any way to do this with the API without creating my own cookies through a server?

0 Likes

All forum topics
Previous Topic
Next Topic

Topic Options

Subscribe to RSS Feed
Mark Topic as New
Mark Topic as Read
Float this Topic for Current User
Bookmark
Subscribe
Printer Friendly Page

All forum topics
Previous Topic
Next Topic

0 Replies

Preview Exit Preview

never-displayed

You must be signed in to add attachments

never-displayed

Additional options

Associated Products

You do not have permission to remove this product association.

Spotify Community

Help categories

Account & Payment

Using Spotify

Listen Everywhere

Using HTTP-Only cookies for access tokens

Using HTTP-Only cookies for access tokens

Suggested posts

Let's introduce ourselves!