使用 Python 安全刷新 Spotify 访问令牌的教程

import json
import requests
import base64

def refresh_spotify_token(refresh_token: str, client_id: str, client_secret: str) -> str | None:
    """
    使用 Spotify refresh token 刷新访问令牌。

    Args:
        refresh_token (str): 用户的 refresh token。
        client_id (str): Spotify 应用的 Client ID。
        client_secret (str): Spotify 应用的 Client Secret。

    Returns:
        str or None: 新的 access token，如果刷新失败则返回 None。
    """
    token_url = "https://accounts.spotify.com/api/token"

    # 1. 构建 Authorization 头
    # 将 client_id 和 client_secret 拼接成 "client_id:client_secret"
    # 然后进行 base64 编码，并添加到 Authorization 头
    auth_string = f"{client_id}:{client_secret}"
    encoded_auth_string = base64.b64encode(auth_string.encode("utf-8")).decode("utf-8")

    headers = {
        "Content-Type": "application/x-www-form-urlencoded",
        "Authorization": f"Basic {encoded_auth_string}"
    }

    data = {
        "grant_type": "refresh_token",
        "refresh_token": refresh_token,
    }

    try:
        # 2. 发送 POST 请求
        response = requests.post(token_url, headers=headers, data=data)
        response.raise_for_status()  # 如果HTTP状态码不是2xx，则抛出requests.exceptions.HTTPError

        # 3. 解析 JSON 响应
        json_result = response.json()

        # 4. 获取新的 access_token
        # 注意：Spotify 刷新令牌API返回的是 'access_token'，而不是 'refresh_token'
        new_access_token = json_result.get('access_token')

        if new_access_token:
            print("Access token refreshed successfully.")
            # 如果 Spotify 轮换了 refresh token，也可以获取新的 refresh token
            # new_refresh_token = json_result.get('refresh_token')
            # if new_refresh_token:
            #     print(f"New Refresh Token (if rotated): {new_refresh_token}")
            return new_access_token
        else:
            print("Error: 'access_token' not found in response.")
            print(f"Full response: {json_result}")
            return None

    except requests.exceptions.HTTPError as e:
        print(f"HTTP Error during token refresh: {e}")
        print(f"Response status code: {e.response.status_code}")
        print(f"Response body: {e.response.text}")
        return None
    except requests.exceptions.RequestException as e:
        print(f"Network or request error during token refresh: {e}")
        return None
    except json.JSONDecodeError:
        print("Error: Could not decode JSON response.")
        print(f"Response body: {response.text if 'response' in locals() else 'No response body available'}")
        return None
    except Exception as e:
        print(f"An unexpected error occurred: {e}")
        return None

# 示例用法 (请替换为您的实际值)
# CLIENT_ID = "YOUR_SPOTIFY_CLIENT_ID"
# CLIENT_SECRET = "YOUR_SPOTIFY_CLIENT_SECRET"
# USER_REFRESH_TOKEN = "YOUR_USER_REFRESH_TOKEN_FROM_INITIAL_AUTH"

# if __name__ == "__main__":
#     # 实际应用中，这些值应从环境变量或安全配置中加载
#     new_token = refresh_spotify_token(USER_REFRESH_TOKEN, CLIENT_ID, CLIENT_SECRET)
#     if new_token:
#         print(f"Successfully obtained new Access Token: {new_token}")
#     else:
#         print("Failed to refresh Spotify access token.")