starred/spotify-web-api-php
1
0
Fork 0
mirror of https://github.com/jwilsson/spotify-web-api-php.git synced 2026-04-26 23:45:49 +03:00
Code Issues 2 Projects Releases Packages Wiki Activity

[GH-ISSUE #52] Fatal error: Uncaught exception on page refresh #31

New issue
Closed
opened 2026-02-27 19:25:42 +03:00 by kerem · 7 comments
kerem commented 2026-02-27 19:25:42 +03:00
Owner
Copy link

Originally created by @ghost on GitHub (Sep 13, 2016).
Original GitHub issue: https://github.com/jwilsson/spotify-web-api-php/issues/52

Hi, I am getting the following error when I refresh my Spotify web app...

Fatal error: Uncaught exception 'SpotifyWebAPI\SpotifyWebAPIException' with message 'Invalid authorization code' in /Users/user/Desktop/WEB-DEV/spotify-web-api-php-master/src/Request.php:170 Stack trace: #0 /Users/user/Desktop/WEB-DEV/spotify-web-api-php-master/src/Request.php(50): SpotifyWebAPI\Request->send('POST', 'https://account...', Array, Array) #1 /Users/user/Desktop/WEB-DEV/spotify-web-api-php-master/src/Session.php(205): SpotifyWebAPI\Request->account('POST', '/api/token', Array, Array) #2 /Users/user/Desktop/WEB-DEV/spotify-web-api-php-master/includes/api-key.php(4): SpotifyWebAPI\Session->requestAccessToken('AQAaKVCyJ2eX1vE...') #3 /Users/user/Desktop/WEB-DEV/spotify-web-api-php-master/index.php(20): include('/Users/user/Des...') #4 {main} thrown in /Users/user/Desktop/WEB-DEV/spotify-web-api-php-master/src/Request.php on line 170

I think the reason for this error is because the URL has the code from Spotify as a query string on the end. If I delete everything from ?code onwards and reload the page it works fine. I just cant figure out how to not display the query string on the URL but keep the app working.

My code is as follows...

<?php
error_reporting(-1);
ini_set('display_errors', 1);

require 'vendor/autoload.php';

$session = new SpotifyWebAPI\Session('4741073d687b495eb89b3eec754ccfba', '9dfe49b200e44dbbac18fd43b9ef8ae1', 'http://localhost:8888/spotify-web-api-php-master/');
$scopes = array(
    'playlist-read-private',
    'user-read-private',
    'user-library-modify'
);
$authorizeUrl = $session->getAuthorizeUrl(array(
    'scope' => $scopes
));
$api = new SpotifyWebAPI\SpotifyWebAPI();

if (isset($_GET['code'])) { 
    $api = new SpotifyWebAPI\SpotifyWebAPI();

    $session->requestAccessToken($_GET['code']);
    $accessToken = $session->getAccessToken();

    $api->setAccessToken($accessToken);
?>
<!DOCTYPE html>
<html>
<head>
    <meta charset="utf-8">

    <link rel="stylesheet" href="stylesheets/app.css">
    <script src="//ajax.googleapis.com/ajax/libs/angularjs/1.2.16/angular.min.js"></script>
    <script src="//cdnjs.cloudflare.com/ajax/libs/angular-ui-router/0.2.10/angular-ui-router.min.js"></script>
    <script src="//ajax.googleapis.com/ajax/libs/angularjs/1.2.16/angular-animate.min.js"></script>
    <script src="js/app.js"></script>

</head>
<body ng-app="formApp">
<header>
    <div class="logo left">
        <h1>sndtrk.</h1>
    </div>
    <?php include('includes/session-info.php'); ?>
</header>
<!-- views will be injected here -->
<div class="container full-height">
    <div ui-view class="form-wrapper full-height {{ formData.one }} {{ formData.onea }} {{ formData.two }} {{ formData.twoa }} {{ formData.threea }} {{ formData.threeb }} {{ formData.threeab }} {{ formData.four }} {{ formData.five }} {{ formData.six }}"></div>
</div>
<?php include('includes/track-generator.php'); ?>
</body>
</html>
<?php
} else {
    header('Location: ' . $authorizeUrl);
    die();
} ?>

Thanks

Originally created by @ghost on GitHub (Sep 13, 2016). Original GitHub issue: https://github.com/jwilsson/spotify-web-api-php/issues/52 Hi, I am getting the following error when I refresh my Spotify web app... Fatal error: Uncaught exception 'SpotifyWebAPI\SpotifyWebAPIException' with message 'Invalid authorization code' in /Users/user/Desktop/WEB-DEV/spotify-web-api-php-master/src/Request.php:170 Stack trace: #0 /Users/user/Desktop/WEB-DEV/spotify-web-api-php-master/src/Request.php(50): SpotifyWebAPI\Request->send('POST', 'https://account...', Array, Array) #1 /Users/user/Desktop/WEB-DEV/spotify-web-api-php-master/src/Session.php(205): SpotifyWebAPI\Request->account('POST', '/api/token', Array, Array) #2 /Users/user/Desktop/WEB-DEV/spotify-web-api-php-master/includes/api-key.php(4): SpotifyWebAPI\Session->requestAccessToken('AQAaKVCyJ2eX1vE...') #3 /Users/user/Desktop/WEB-DEV/spotify-web-api-php-master/index.php(20): include('/Users/user/Des...') #4 {main} thrown in /Users/user/Desktop/WEB-DEV/spotify-web-api-php-master/src/Request.php on line 170 I think the reason for this error is because the URL has the code from Spotify as a query string on the end. If I delete everything from ?code onwards and reload the page it works fine. I just cant figure out how to not display the query string on the URL but keep the app working. My code is as follows... ``` <?php error_reporting(-1); ini_set('display_errors', 1); require 'vendor/autoload.php'; $session = new SpotifyWebAPI\Session('4741073d687b495eb89b3eec754ccfba', '9dfe49b200e44dbbac18fd43b9ef8ae1', 'http://localhost:8888/spotify-web-api-php-master/'); $scopes = array( 'playlist-read-private', 'user-read-private', 'user-library-modify' ); $authorizeUrl = $session->getAuthorizeUrl(array( 'scope' => $scopes )); $api = new SpotifyWebAPI\SpotifyWebAPI(); if (isset($_GET['code'])) { $api = new SpotifyWebAPI\SpotifyWebAPI(); $session->requestAccessToken($_GET['code']); $accessToken = $session->getAccessToken(); $api->setAccessToken($accessToken); ?> <!DOCTYPE html> <html> <head> <meta charset="utf-8"> <link rel="stylesheet" href="stylesheets/app.css"> <script src="//ajax.googleapis.com/ajax/libs/angularjs/1.2.16/angular.min.js"></script> <script src="//cdnjs.cloudflare.com/ajax/libs/angular-ui-router/0.2.10/angular-ui-router.min.js"></script> <script src="//ajax.googleapis.com/ajax/libs/angularjs/1.2.16/angular-animate.min.js"></script> <script src="js/app.js"></script> </head> <body ng-app="formApp"> <header> <div class="logo left"> <h1>sndtrk.</h1> </div> <?php include('includes/session-info.php'); ?> </header> <!-- views will be injected here --> <div class="container full-height"> <div ui-view class="form-wrapper full-height {{ formData.one }} {{ formData.onea }} {{ formData.two }} {{ formData.twoa }} {{ formData.threea }} {{ formData.threeb }} {{ formData.threeab }} {{ formData.four }} {{ formData.five }} {{ formData.six }}"></div> </div> <?php include('includes/track-generator.php'); ?> </body> </html> <?php } else { header('Location: ' . $authorizeUrl); die(); } ?> ``` Thanks
kerem 2026-02-27 19:25:42 +03:00
  • closed this issue
  • added the
    question
         label
kerem commented 2026-02-27 19:25:43 +03:00
Author
Owner
Copy link

@jwilsson commented on GitHub (Sep 14, 2016):

Hi!
I think the easiest way is to have two pages.

One page (let's call it index.php) that contains your application and checks if an access token already exists (saved in a database, a session, or somewhere persistent). If an access token doesn't exist, send the user to the authorization URL with a redirect URI called callback.php.

In callback.php you exchange the $_GET['code'] for an access token, save it somewhere, and redirect the user back to index.php.

<!-- gh-comment-id:246919413 --> @jwilsson commented on GitHub (Sep 14, 2016): Hi! I think the easiest way is to have two pages. One page (let's call it `index.php`) that contains your application and checks if an access token already exists (saved in a database, a session, or somewhere persistent). If an access token doesn't exist, send the user to the authorization URL with a redirect URI called `callback.php`. In `callback.php` you exchange the `$_GET['code']` for an access token, save it somewhere, and redirect the user back to `index.php`.
kerem commented 2026-02-27 19:25:43 +03:00
Author
Owner
Copy link

@ghost commented on GitHub (Sep 14, 2016):

Awesome, thank you for your help! I've got it working, I think. Storing the $accessToken within a session variable and recalling it on index.php worked.

<!-- gh-comment-id:246962560 --> @ghost commented on GitHub (Sep 14, 2016): Awesome, thank you for your help! I've got it working, I think. Storing the $accessToken within a session variable and recalling it on index.php worked.
kerem commented 2026-02-27 19:25:43 +03:00
Author
Owner
Copy link

@dayeggpi commented on GitHub (Mar 2, 2017):

Hi !

I'm sorry, I'm not sure I understand this page : https://jwilsson.github.io/spotify-web-api-php/authorization.html
and I get the same error.

Here is my code, would appreciate some help :)

in ./index.php :

<?php
error_reporting(-1);
ini_set('display_errors', 1);

require 'vendor/autoload.php';

$session = new SpotifyWebAPI\Session('CLIENT_ID', 'CLIENT_SECRET', 'https://mysite.com/callback');
$scopes = array(
    'playlist-read-private',
    'user-read-private',
    'user-read-recently-played'
);
$authorizeUrl = $session->getAuthorizeUrl(array(
    'scope' => $scopes
));

$api = new SpotifyWebAPI\SpotifyWebAPI();

if (isset($_GET['code'])) { 
    $api = new SpotifyWebAPI\SpotifyWebAPI();

    $session->requestAccessToken($_GET['code']);
    $accessToken = $session->getAccessToken();

    $api->setAccessToken($accessToken);


?>
<!DOCTYPE html>
<html>
<head>
    <meta charset="utf-8">

</head>
<body>
   <?php 

 ?>
</body>
</html>


<?php
} else {

    header('Location: ' . $session->getAuthorizeUrl($scopes));
    die();
} ?>

then in ./callback/index.php :

<?php
error_reporting(-1);
ini_set('display_errors', 1);

require '../vendor/autoload.php';

$session = new SpotifyWebAPI\Session('CLIENT_ID', 'CLIENT_SECRET', 'https://mysite.com/callback');

$api = new SpotifyWebAPI\SpotifyWebAPI();

if (isset($_GET['code'])) {
    $session->requestAccessToken($_GET['code']);
    $api->setAccessToken($session->getAccessToken());

    $artist = $api->getMyHistory(array('limit' => 4));

    for ($i=0; $i < $artist->limit ; $i++) {

        $track = $api->getTrack($artist->items[$i]->track->id);
        echo '<img src="'.$track->album->images[2]->url.'" />';
        echo '<a href="'.$artist->items[$i]->track->external_urls->spotify.'" target="_blank">'.$artist->items[$i]->track->artists[0]->name.' - '. $artist->items[$i]->track->name . ' </a> <br/>';

    }

} else {
    $scopes = [
    'scope' => [
    'playlist-read-private',
    'user-read-private',
    'user-read-recently-played'
        ],
    ];

    header('Location: ' . $session->getAuthorizeUrl($scopes));
}

What happens is that if I go to https://mysite.com/ I immediately get redirected to https://mysite.com/callback?code=XXXXXXX and the result that I want is displayed. However if I refresh, I get this uncaught exception.

Could you please help me to understand your authorization doc page ?

thanks !

<!-- gh-comment-id:283638374 --> @dayeggpi commented on GitHub (Mar 2, 2017): Hi ! I'm sorry, I'm not sure I understand this page : https://jwilsson.github.io/spotify-web-api-php/authorization.html and I get the same error. Here is my code, would appreciate some help :) in ./index.php : ``` <?php error_reporting(-1); ini_set('display_errors', 1); require 'vendor/autoload.php'; $session = new SpotifyWebAPI\Session('CLIENT_ID', 'CLIENT_SECRET', 'https://mysite.com/callback'); $scopes = array( 'playlist-read-private', 'user-read-private', 'user-read-recently-played' ); $authorizeUrl = $session->getAuthorizeUrl(array( 'scope' => $scopes )); $api = new SpotifyWebAPI\SpotifyWebAPI(); if (isset($_GET['code'])) { $api = new SpotifyWebAPI\SpotifyWebAPI(); $session->requestAccessToken($_GET['code']); $accessToken = $session->getAccessToken(); $api->setAccessToken($accessToken); ?> <!DOCTYPE html> <html> <head> <meta charset="utf-8"> </head> <body> <?php ?> </body> </html> <?php } else { header('Location: ' . $session->getAuthorizeUrl($scopes)); die(); } ?> ``` then in ./callback/index.php : ``` <?php error_reporting(-1); ini_set('display_errors', 1); require '../vendor/autoload.php'; $session = new SpotifyWebAPI\Session('CLIENT_ID', 'CLIENT_SECRET', 'https://mysite.com/callback'); $api = new SpotifyWebAPI\SpotifyWebAPI(); if (isset($_GET['code'])) { $session->requestAccessToken($_GET['code']); $api->setAccessToken($session->getAccessToken()); $artist = $api->getMyHistory(array('limit' => 4)); for ($i=0; $i < $artist->limit ; $i++) { $track = $api->getTrack($artist->items[$i]->track->id); echo '<img src="'.$track->album->images[2]->url.'" />'; echo '<a href="'.$artist->items[$i]->track->external_urls->spotify.'" target="_blank">'.$artist->items[$i]->track->artists[0]->name.' - '. $artist->items[$i]->track->name . ' </a> <br/>'; } } else { $scopes = [ 'scope' => [ 'playlist-read-private', 'user-read-private', 'user-read-recently-played' ], ]; header('Location: ' . $session->getAuthorizeUrl($scopes)); } ``` What happens is that if I go to https://mysite.com/ I immediately get redirected to https://mysite.com/callback?code=XXXXXXX and the result that I want is displayed. However if I refresh, I get this uncaught exception. Could you please help me to understand your authorization doc page ? thanks !
kerem commented 2026-02-27 19:25:43 +03:00
Author
Owner
Copy link

@jwilsson commented on GitHub (Mar 2, 2017):

@hycday Instead of printing the history in ./callback/index.php, save the token somewhere (PHP session, database, etc.) and redirect the user back to index.php.

In index.php, check if you got a token. If there is one, use it and print the history. If not, send the user to the Spotify authorization page.

Sloppy, untested example using PHP sessions: https://gist.github.com/jwilsson/07f30721b5a3378c78bf4c86cdc92b98

I can agree that the docs could be more clear, though. I'll look at updating it.

<!-- gh-comment-id:283666033 --> @jwilsson commented on GitHub (Mar 2, 2017): @hycday Instead of printing the history in `./callback/index.php`, save the token somewhere (PHP session, database, etc.) and redirect the user back to `index.php`. In `index.php`, check if you got a token. If there is one, use it and print the history. If not, send the user to the Spotify authorization page. Sloppy, untested example using PHP sessions: https://gist.github.com/jwilsson/07f30721b5a3378c78bf4c86cdc92b98 I can agree that the docs could be more clear, though. I'll look at updating it.
kerem commented 2026-02-27 19:25:43 +03:00
Author
Owner
Copy link

@dayeggpi commented on GitHub (Mar 2, 2017):

thank you @jwilsson
it's more clear now !

<!-- gh-comment-id:283674301 --> @dayeggpi commented on GitHub (Mar 2, 2017): thank you @jwilsson it's more clear now !
kerem commented 2026-02-27 19:25:43 +03:00
Author
Owner
Copy link

@dayeggpi commented on GitHub (Mar 3, 2017):

just out of curiosity, I managed to do it in PHP session (then each user will see their own tracks), but when I do it with a database, I am facing a problematic : they all see my tracks.

Indeed, in the database, (in which I have a token field, a timestamp field, and a userid field), I need to insert a row with a token (or update it for same userid, if timestamp is expired and userid exists), but I just used a fake userid manually inputed, so therefore, their is only one user, and hence they all see my tracks.

Is there a function to identify the user via some sort of ID, proper to Spotify ? or basically the database approach is not applicable ?

If I remove the userid field, how will I know which token to retrieve from the database, for each user...

Do you see what I mean ?

<!-- gh-comment-id:283975253 --> @dayeggpi commented on GitHub (Mar 3, 2017): just out of curiosity, I managed to do it in PHP session (then each user will see their own tracks), but when I do it with a database, I am facing a problematic : they all see my tracks. Indeed, in the database, (in which I have a token field, a timestamp field, and a userid field), I need to insert a row with a token (or update it for same userid, if timestamp is expired and userid exists), but I just used a fake userid manually inputed, so therefore, their is only one user, and hence they all see my tracks. Is there a function to identify the user via some sort of ID, proper to Spotify ? or basically the database approach is not applicable ? If I remove the userid field, how will I know which token to retrieve from the database, for each user... Do you see what I mean ?
kerem commented 2026-02-27 19:25:43 +03:00
Author
Owner
Copy link

@jwilsson commented on GitHub (Mar 5, 2017):

@hycday Let's not hijack this issue anymore, drop me a line at jonathan.wilsson at gmail and we can discuss further there.

<!-- gh-comment-id:284217403 --> @jwilsson commented on GitHub (Mar 5, 2017): @hycday Let's not hijack this issue anymore, drop me a line at `jonathan.wilsson at gmail` and we can discuss further there.
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
7.1.0
7.0.0
6.3.1
6.3.0
6.2.0
6.1.1
6.1.0
6.0.4
6.0.3
6.0.2
6.0.1
5.7.1
6.0.0
5.7.0
5.6.0
5.5.0
5.4.0
5.3.0
5.2.0
5.1.0
5.0.3
5.0.2
5.0.1
5.0.0
4.3.0
4.2.2
4.2.1
4.2.0
4.1.1
4.1.0
4.0.0
3.6.2
3.6.1
3.6.0
3.5.1
3.5.0
3.4.0
3.3.0
3.2.0
3.1.0
3.0.0
2.12.0
2.11.1
2.11.0
2.10.1
2.10.0
2.9.0
2.8.0
2.7.0
2.6.1
2.6.0
2.5.1
2.5.0
2.4.0
2.3.0
2.2.1
2.2.0
2.1.1
2.1.0
2.0.1
2.0.0
1.12.0
1.11.1
1.11.0
1.10.1
1.10.0
1.9.0
1.8.0
1.7.0
1.6.1
1.6.0
1.5.0
1.4.2
1.4.1
1.4.0
1.3.4
1.3.3
1.3.2
1.3.1
1.3.0
1.2.0
1.1.0
1.0.0
0.10.0
0.9.0
0.8.2
0.8.1
0.8.0
0.7.0
0.6.0
0.5.0
0.4.0
0.3.0
0.2.0
0.1.0
Labels
Clear labels   
bug

   
docs

   
enhancement

   
enhancement

   
enhancement

   
feedback wanted

   
good first issue

   
help wanted

   
help wanted

   
help wanted

   
invalid

   
pull-request

Mirrored from GitHub Pull Request

  
question

   
question

   
upstream

   
upstream
No labels
bug
docs
enhancement
enhancement
enhancement
feedback wanted
good first issue
help wanted
help wanted
help wanted
invalid
pull-request
question
question
upstream
upstream
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/spotify-web-api-php#31
No description provided.