Spotify OAuth and Insecure Reditect URI update

[jwalty]

A recent Spotify email informs users that they will be removing implicit grant from their OAuth offering as well as prohibiting redirect URIs for all clients. This will be enforced in November of 2025 for existing applications and April for new applications.

Just wanted to create visibility for the upcoming changes and ask if it's something that will impact your_spotify

Thanks all,

[robmaurizio]

I saw this today too and got to work. Trying to prepare for it. I spent too many hours trying to get this to work via cloudflare tunnels and even when I firmly believe it was configured correctly, the web application is still not able to communicate with the server. So the login page just keeps bouncing.
This issue is also described in #406

[Yooooomi]

Hello, it seems to me that this will only affect people hosting your_spotify on insecure (aka http) context. I feel like I cannot do anything more than warning users who host the applications on http to migrate to https.