authorizationCodeGrant not working.

Hey, I have the following code on my firebase server for authenticating a user:

var SpotifyWebApi = require('spotify-web-api-node');

async function proxySpotifyToken(req, res){
    const spotifyApi = new SpotifyWebApi({
        clientId: "myId",
        clientSecret: "mySecret",
        redirectUri: "com.myRNapp:/callback",
    });

    const code = req.body.code;

    // console shows code
    console.log(code);

    if(code){
        spotifyApi.authorizationCodeGrant(code).then(
            data => {
                return res.json(data.body)
            },
            err => {
                console.log('Something went wrong!', err)
            }
        ).catch((oError) => {
            return res.json(oError)
        })
    }
}

module.exports = {
    authentication: proxySpotifyToken
};

I’m using react-native-app-auth to make the call to the server and pass on the code. As you can see, I’m logging the code in the Firebase console and it does shows a string, so that seems to be working.

Whatever I try, It always catches the following error: Something went wrong! { [WebapiError: Bad Request] name: ‘WebapiError’, message: ‘Bad Request’, statusCode: 400 }

Am i doing something wrong here?

[oliveroneill]

Thanks @AquaWolf! Got it working. For those interested, here’s a discussion including Spotify engineers regarding this problem: https://community.spotify.com/t5/Spotify-for-Developers/Authentication-API-failing-in-production-right-now/td-p/4959662

[AquaWolf]

Ok i dived a bit deeper and found that somehow i needed a codeverifier for the authorizationCodeGrant method. Here is the new method:

authorizationCodeGrant: function(code, code_verifier, callback) {
    return AuthenticationRequest.builder()
      .withPath('/api/token')
      .withBodyParameters({
        grant_type: 'authorization_code',
        redirect_uri: this.getRedirectURI(),
        code: code,
        code_verifier: code_verifier
      })
      .withHeaders({
        Authorization:
          'Basic ' +
          new Buffer(
            this.getClientId() + ':' + this.getClientSecret()
          ).toString('base64')
      })
      .build()
      .execute(HttpManager.post, callback);
  }