starred/spotify-web-api-php

Fork 0

mirror of https://github.com/jwilsson/spotify-web-api-php.git synced 2026-04-27 07:55:49 +03:00

[GH-ISSUE #72] Unsure on how to use the refresh token #38

New issue

Closed

opened 2026-02-27 19:25:44 +03:00 by kerem · 8 comments

kerem commented

2026-02-27 19:25:44 +03:00

Owner

Originally created by @Cannonb4ll on GitHub (Mar 23, 2017).
Original GitHub issue: https://github.com/jwilsson/spotify-web-api-php/issues/72

Currently creating an app where users basically login, and after they login they can hookup their spotify account to their account in the app im creating.

I get a accessToken and refreshToken, but what is the structural way to use this? I now have after a few minutes/hours that the accesstoken gets expired (which I save in my database).

How do I extend the accestoken with the refreshtoken, and when?

Originally created by @Cannonb4ll on GitHub (Mar 23, 2017). Original GitHub issue: https://github.com/jwilsson/spotify-web-api-php/issues/72 Currently creating an app where users basically login, and after they login they can hookup their spotify account to their account in the app im creating. I get a accessToken and refreshToken, but what is the structural way to use this? I now have after a few minutes/hours that the accesstoken gets expired (which I save in my database). How do I extend the accestoken with the refreshtoken, and when?

kerem

2026-02-27 19:25:44 +03:00

closed this issue
added the
question
label

kerem commented

2026-02-27 19:25:44 +03:00

Author

Owner

@jwilsson commented on GitHub (Mar 24, 2017):

When the access token expires (either by you catching the error from Spotify or checking it against your database) you use the Session::refreshAccessToken() to request new tokens, which you then save in the database.

There's some more info and examples here: https://jwilsson.github.io/spotify-web-api-php/authorization.html#step-2

@jwilsson commented on GitHub (Mar 24, 2017): When the access token expires (either by you catching the error from Spotify or checking it against your database) you use the `Session::refreshAccessToken()` to request new tokens, which you then save in the database. There's some more info and examples here: https://jwilsson.github.io/spotify-web-api-php/authorization.html#step-2

kerem commented

2026-02-27 19:25:44 +03:00

Author

Owner

@Cannonb4ll commented on GitHub (Mar 24, 2017):

Thank you. Would it be bad practise to execute that method each time the user logs in?

@Cannonb4ll commented on GitHub (Mar 24, 2017): Thank you. Would it be bad practise to execute that method each time the user logs in?

kerem commented

2026-02-27 19:25:44 +03:00

Author

Owner

@jwilsson commented on GitHub (Mar 24, 2017):

Hmm, I think the best way is to only request it when needed. I don't know if Spotify might start blocking your app or something if you request tokens too often.

@jwilsson commented on GitHub (Mar 24, 2017): Hmm, I think the best way is to only request it when needed. I don't know if Spotify might start blocking your app or something if you request tokens too often.

kerem commented

2026-02-27 19:25:44 +03:00

Author

Owner

@Cannonb4ll commented on GitHub (Mar 24, 2017):

Alright, with a try-catch?

@Cannonb4ll commented on GitHub (Mar 24, 2017): Alright, with a try-catch?

kerem commented

2026-02-27 19:25:44 +03:00

Author

Owner

@jwilsson commented on GitHub (Mar 24, 2017):

Yes, exactly! And when it fails, you refresh the token (if it's that kind of error).

@jwilsson commented on GitHub (Mar 24, 2017): Yes, exactly! And when it fails, you refresh the token (if it's that kind of error).

kerem commented

2026-02-27 19:25:44 +03:00

Author

Owner

@Cannonb4ll commented on GitHub (Mar 24, 2017):

Alright I think I get that! So sorta like this:

            $api = new \SpotifyWebAPI\SpotifyWebAPI();

            try{
                $api->setAccessToken($token);

                $artists = object_get($api->getUserFollowedArtists(), 'artists.items');

            } catch (\Exception $e){
                $session = new \SpotifyWebAPI\Session('CLIENT_ID', 'CLIENT_SECRET', 'REDIRECT_URI');
                $session->refreshAccessToken($refreshToken);

                $accessToken = $session->getAccessToken();

                $api->setAccessToken($accessToken);

                $artists = object_get($api->getUserFollowedArtists(), 'artists.items');
            }

    // continue doing my things here

@Cannonb4ll commented on GitHub (Mar 24, 2017): Alright I think I get that! So sorta like this: ``` $api = new \SpotifyWebAPI\SpotifyWebAPI(); try{ $api->setAccessToken($token); $artists = object_get($api->getUserFollowedArtists(), 'artists.items'); } catch (\Exception $e){ $session = new \SpotifyWebAPI\Session('CLIENT_ID', 'CLIENT_SECRET', 'REDIRECT_URI'); $session->refreshAccessToken($refreshToken); $accessToken = $session->getAccessToken(); $api->setAccessToken($accessToken); $artists = object_get($api->getUserFollowedArtists(), 'artists.items'); } // continue doing my things here ```

kerem commented

2026-02-27 19:25:44 +03:00

Author

Owner

@jwilsson commented on GitHub (Mar 24, 2017):

Yeah, I would check the code and message of the Exception too. Just to see if it's an expired access token error. I don't know the exakt message to look for though, but the status code should be 401.

@jwilsson commented on GitHub (Mar 24, 2017): Yeah, I would check the code and message of the `Exception` too. Just to see if it's an expired access token error. I don't know the exakt message to look for though, but the status code should be `401`.

kerem commented

2026-02-27 19:25:45 +03:00

Author

Owner

@Cannonb4ll commented on GitHub (Mar 24, 2017):

Thank you for your help, I will do that. Solved! :)

@Cannonb4ll commented on GitHub (Mar 24, 2017): Thank you for your help, I will do that. Solved! :)