Spotify

Overview

Connect your users to Spotify for music data, playlist management, playback control, and listening history.

Property	Value
Provider ID	spotify
Category	Social
PKCE	Supported
Token refresh	Automatic
Redirect URI	Shown in Developer Portal

Step 1: Create a Spotify OAuth App

Go to the Spotify Developer Dashboard

Navigate to developer.spotify.com/dashboard and sign in.

Create a new app

Click Create app, fill in the app name and description, and accept the terms.

Configure the redirect URI

Under Edit settings, add the Alter callback URL from the Developer Portal to the Redirect URIs field.

Get credentials

Copy the Client ID and Client Secret from the app dashboard.

Warning

Never share your Client Secret publicly. Store it securely and only enter it in the Alter Vault Developer Portal.

Step 2: Add to Alter Vault

Open the Developer Portal

Go to portal.alterauth.com and navigate to the application.

Add Spotify provider

Go to OAuth Providers > Add Provider > Spotify.

Enter credentials

• Client ID: Paste your Spotify Client ID
• Client Secret: Paste your Spotify Client Secret

Select scopes

Choose the scopes the application needs.

Save

Click Save. The provider is now active.

Available Scopes

Scope	Description
user-read-email	Read user’s email address
user-read-private	Read user’s subscription details and country
playlist-read-private	Read private playlists
playlist-modify-public	Create and modify public playlists
playlist-modify-private	Create and modify private playlists
user-library-read	Read saved tracks and albums
user-library-modify	Save and remove tracks and albums
user-top-read	Read top tracks and artists
user-read-recently-played	Read recently played tracks
streaming	Control playback via the Web Playback SDK

Notes

• Spotify access tokens expire after 1 hour. Alter Vault handles automatic refresh.
• See the Spotify Web API authorization documentation for more details.