Skip to content

Commit

Permalink
bump version
Browse files Browse the repository at this point in the history
  • Loading branch information
jsncmgs1 committed Jan 30, 2022
1 parent 5d9a9c4 commit 3cae8fa
Show file tree
Hide file tree
Showing 2 changed files with 6 additions and 138 deletions.
142 changes: 5 additions & 137 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@

```elixir
def deps do
[{:spotify_ex, "~> 2.2.0"}]
[{:spotify_ex, "~> 2.2.1"}]
end
```

Expand All @@ -24,7 +24,6 @@ def application do
end
```


## What does this wrapper cover?

This wrapper covers the [Spotify Web
Expand All @@ -44,148 +43,17 @@ with the docs.

## Usage

This README will go into some detail about the OAuth process. Consult the
[docs](https://hexdocs.pm/spotify_ex/api-reference.html) for other parts
of the API.

I haven't made any functions private because I think programmer should have
access to all of the functions. Anything not documented should be considered
private with respect to the API and can change. Use at your own risk.

There are 2 functions for each endpoint. For example, to get a playlist,
`Spotify.Playlist.get_playlist`, and `Spotify.Playlist.get_playlist_url` are available. The
first will use the url function to make the request, and return
a list of `%Spotify.Track` structs. If you just want the raw response from
Spotify and/or want to implement your own client and data manipulation, all of
the url functions are public.
[docs](https://hexdocs.pm/spotify_ex/api-reference.html)

**A basic Phoenix example can be found at
[SpotifyExTest](http://www.github.com/jsncmgs1/spotify_ex_test)**

## OAuth
[Oauth README](https://github.com/jsncmgs1/spotift_ex/docs/oauth.md)

The Spotify API follows the OAuth 2 spec, providing 3 potential authentication flows:

- [Authorization Code flow](https://developer.spotify.com/web-api/authorization-guide/#authorization_code_flow)
- [Client Credentials Flow](https://developer.spotify.com/web-api/authorization-guide/#client_credentials_flow)
- [Implicit Grant Flow](https://developer.spotify.com/web-api/authorization-guide/#implicit_grant_flow)

To connect with the Spotify API, first you must register your app with Spotify,
and get your **Client ID** and **Client Secret**, which are necessary for
authentication.

In ```/config```, create ```config/secret.exs``` and ```config/spotify.exs``` files

```elixir
# /config/secret.exs

use Mix.Config

config :spotify_ex, client_id: "<YOUR CLIENT ID>"
secret_key: "<YOUR SECRET KEY>"
```

```elixir
# /config/spotify.exs

use Mix.Config

config :spotify_ex, user_id: "<YOUR SPOTIFY USER ID>",
scopes: "<AUTHENTICATION SCOPES>",
callback_url: "<YOUR CALLBACK URL>"
```

Add the secret file to your .gitignore, and import it in config.exs

```elixir
import "config.secret.exs"
import "spotify.secret.exs"
```

## Authorization Flow

First your application must be *authorized* by Spotify. SpotifyEx will use the
client ID, callback URI, and scopes set in your config file to generate the
authorization endpoint.

```elixir
defmodule SpotifyExTest.AuthorizationController do
use SpotifyExTest.Web, :controller

def authorize(conn, _params) do
redirect conn, external: Spotify.Authorization.url
end
end
```

This will take you to the Spotify Authorization page. After authorizing your
app, you will then be directed to authenticate as a Spotify User. When
successful, you will be redirected to the callback uri you set in the config
file.


### A note about scopes

You must be explicit about the permissions your users have when handling
Spotify account data. These permissions are set during the authorization
request. You can read about them
[here](https://developer.spotify.com/web-api/using-scopes/). To set your
scopes, add them to the list in your ```spotify.exs``` file,

```elixir
#config/spotify.exs

config :spotify_ex, scopes: ["playlist-read-private", "playlist-modify-private" "# more scopes"]
```

OAuth requires identical redirect URIs to use for the authorization and
authentication steps. When you attempt to authenticate with Spotify, if
successful, Spotify needs to know where to send the user afterwards, which
is what the redirect URI is used for.

```elixir
config :spotify_ex, callback_url: "http://www.your-api.com/auth-endpoint"
```

Set it in your config file. Now that your application is *authorized*, the user
must be *authenticated*. Spotify is going to send an authorization code in the
query string to this endpoint, which should then send that code to Spotify to
request an **access token** and a **remember token**.

```elixir
config :spotify_ex, callback_url: "http://localhost:4000/authenticate"
```

Authenticate like this:

```elixir
Spotify.Authentication.authenticate(conn, params)
```

`Spotify.Authentication.authenticate` will look for `params["code"]`,the code
sent back by Spotify after authorization request. If successful, the user will
be redirected to the URL set in the ```spotify.exs``` file, where you can
handle different responses.

```elixir
defmodule SpotifyExTest.AuthenticationController do
use SpotifyExTest.Web, :controller

def authenticate(conn, params) do
case Spotify.Authentication.authenticate(conn, params) do
{:ok, conn } ->
# do stuff
redirect conn, to: "/whereever-you-want-to-go"
{ :error, reason, conn }-> redirect conn, to: "/error"
end
end
end
```
### Scopes

The authentication module will set refresh and access tokens in a cookie. The
access token expires every hour, so you'll need to check your reponses for 401
errors. Call `Spotify.Authentication.refresh`, if there is a refresh token
present. If not, you'll need to redirect back to authorization.
[Scopes README](https://github.com/jsncmgs1/spotift_ex/docs/scopes.md)

## Contributing

Expand Down
2 changes: 1 addition & 1 deletion mix.exs
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ defmodule Spotify.Mixfile do
def project do
[
app: :spotify_ex,
version: "2.2.0",
version: "2.2.1",
elixir: ">= 1.10.3",
description: description(),
package: package(),
Expand Down

0 comments on commit 3cae8fa

Please sign in to comment.