# expires = now + datetime.timedelta(seconds=expires_in) #Checking if token is still valid, otherwise, refresh Token_json = requests.post('', data=token_data, headers=token_header) Scope = 'user-top-read user-library-read playlist-modify-public'ĪUTH_FIRST_URL = f'' State = ''.join(random.choice(string.ascii_lowercase + string.digits) for n in range(8)) Redirect_uri = os.environ.get('REDIRECT_URI') This is the backend authorization code (I've commented out some parts to make it simpler, yet it still doesn't work): client_id = os.environ.get('CLIENT_ID')Ĭlient_secret = os.environ.get('CLIENT_SECRET') Return redirect(url_for('generate_playlist')) Return render_template('home.html', title='Home') I'm storing the token in sessions, could it be that Heroku is having problem with retrieving session variables? I try to redo the process on my localhost but it doesn't seem to break.

Sometimes it'll work flawlessly, but when I play around with it more it'll crash. However, after deploying the app to Heroku, occasionally the app will crash and give me a 'token not provided' error in the logs. So I've been using Flask to create an app that uses Spotify API, and the authorization code flow works perfectly fine when running on my localhost server.

Herokuapp spotify receipt