- Web API - retrieve content metadata, manage playlists
- Web Playback SDK - streaming content
- Oauth - https://developer.spotify.com/documentation/web-api/concepts/authorization
Developer terms
-
user consent needed for certain private data, and need to be able to remove personal data when users disconnect..?
-
need to display a privacy policy
-
Cannot get lyrics from API; would need Genius or some other API
https://developer.spotify.com/documentation/web-api/tutorials/getting-started
client credentials
- use client_id and client_secret to get an access token that expires in 1 hr
- access token must be used in api requests
-H "Authorization: Bearer <token>
- That works fine in scenarios where you control the API call to Spotify, for example where your backend is connecting to the Web API.
- It will not work in cases where your app will connect on behalf of a specific user, for example when getting private playlist or profile data.