[GH-ISSUE #14] get_cached_token() should check scopes too #6

New issue

Closed

opened 2026-02-27 23:20:21 +03:00 by kerem · 2 comments

kerem commented

2026-02-27 23:20:21 +03:00

Owner

Originally created by @tobkin on GitHub (Jul 6, 2014).
Original GitHub issue: https://github.com/spotipy-dev/spotipy/issues/14

Started playing with this library to learn Python, and I kept getting an "insufficient scope" error from Spotify.

It turns out that if your application gets issued a token, and the application's required scope changes to need more permissions before that token expires, get_cached_token() in oauth2.py will still give that token back even though Spotify will reject it. When tokens are cached, information about what scopes are associated with that token needs to be recorded too.

Originally created by @tobkin on GitHub (Jul 6, 2014). Original GitHub issue: https://github.com/spotipy-dev/spotipy/issues/14 Started playing with this library to learn Python, and I kept getting an "insufficient scope" error from Spotify. It turns out that if your application gets issued a token, and the application's required scope changes to need more permissions before that token expires, get_cached_token() in oauth2.py will still give that token back even though Spotify will reject it. When tokens are cached, information about what scopes are associated with that token needs to be recorded too.