Skip to content

docs: update setup for Feb 2026 Spotify API changes#1

Open
workingpleasewait wants to merge 1 commit intoddrayne:mainfrom
workingpleasewait:fix/2026-api-setup-notes
Open

docs: update setup for Feb 2026 Spotify API changes#1
workingpleasewait wants to merge 1 commit intoddrayne:mainfrom
workingpleasewait:fix/2026-api-setup-notes

Conversation

@workingpleasewait
Copy link
Copy Markdown

What this fixes

Spotify made breaking changes to their Developer Platform in February 2026 that affect new installations of clawdify. This PR updates the README with:

Changes

  1. Redirect URI: localhost is now blocked — Spotify no longer accepts localhost as a redirect URI as of April 2025 enforcement (November 2025 migration deadline). Use http://127.0.0.1:8888/callback instead. Using localhost returns INVALID_CLIENT: Invalid redirect URI.

  2. Feb 2026 API restrictions — New Development Mode apps now require the owner to have an active Spotify Premium subscription. Playback control endpoints (play/pause) may return HTTP 403 "Restriction violated" even when the command executes successfully — this is a known quirk, not a failure. Added a note and link to the Spotify migration guide.

  3. Manual auth flow for VPS/VM setups — Added a step-by-step guide for users running Clawdbot on a remote server without direct browser access. Includes a self-contained Node.js listener that exchanges the auth code locally, plus a zsh compatibility note.

  4. Auth profile field names — Documented that auth-profiles.json must use access/refresh/expires (not accessToken/refreshToken/expiresAt). This mismatch causes silent token refresh failures.

Tested on

  • Clawdbot running in OrbStack VM (Ubuntu 24.04, arm64) on macOS Mac Mini
  • Spotify Premium account, Development Mode app
  • February 2026

- Replace localhost with 127.0.0.1 in redirect URI (localhost no longer allowed)
- Add Feb 2026 API restrictions note (Premium required, 403 quirk on playback)
- Add manual auth flow guide for VPS/VM setups without browser access
- Document auth-profiles.json field names (access/refresh/expires not camelCase)

Tested with Clawdbot running in OrbStack VM on macOS, Feb 2026.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant