The only way to revoke Spotify API tokens is to delete your account
1–10 of 41 posts
Re: The only way to revoke Spotify API tokens is to delete your account
#2Official Spotify Web API feature request ticket: https://github.com/spotify/web-api/issues/126
Re: The only way to revoke Spotify API tokens is to delete your account
#3Spotify, in general, appears to consider accounts disposable. I think I saw something about this getting better recently, but a few months ago the only way to move my paid account to a family subscription was to delete the old account and create new accounts for everyone I wanted in the family plan.
Re: The only way to revoke Spotify API tokens is to delete your account
#4Official Spotify Web API feature request ticket: https://github.com/spotify/web-api/issues/126
Sometimes I really wonder what people who post stuff like this on issue comments aim to achieve:
@thelinmichael Guys wake up!!!!!! How can you implement an OAuth 2.0 without the ability to revoke access? I mean HOW DARE YOU?
Fix this ASAP
Re: The only way to revoke Spotify API tokens is to delete your account
#5Spotify, in general, appears to consider accounts disposable. I think I saw something about this getting better recently, but a few months ago the only way to move my paid account to a family subscription was to delete the old account and create new accounts for everyone I wanted in the family plan.
I imagine this comes from the various trial offerings they've had for new customers, including student discounts and family discounts. I myself have gone through ~3 accounts taking advantage of this over the years and I imagine their metrics show a high account churn such that it is not an unreasonable conclusion to view accounts as disposable.
IMO it's certainly better then facebook's undisposable position where you are never deleting your account and every service that uses facebook serves as a mechanism for creating, reactivating, or connecting, with that one account. As a subscription service Spotify should probably make it easier to switch between subscription tiers, but I'm happy enough with the company to at least defend them a little bit :-P.
Re: The only way to revoke Spotify API tokens is to delete your account
#6Ok so the lesson here is be really careful where you allow API access using your keys.
Re: The only way to revoke Spotify API tokens is to delete your account
#7Official Spotify Web API feature request ticket: https://github.com/spotify/web-api/issues/126
Sometimes I really wonder what people who post stuff like this on issue comments aim to achieve: @thelinmichael Guys wake up!!!!!! How can you implement an OAuth 2.0 without the ability to revoke access? I mean HOW DARE YOU? Fix this ASAP I understand the frustration, but they aren't exactly helping the situation.
Same kind of folks who end up yelling at customer service or wait staff for something that's gone wrong.
Yelling isn't productive and it's not going to solve anything. You can totally communicate your frustration without resorting to raising your voice. If anything, making people that distressed is only counterintuitive and counterproductive.
Re: The only way to revoke Spotify API tokens is to delete your account
#8I work at Stormpath (an Auth as a Service company) and see stuff like this all the time. It's actually really hard to do token revocation properly; People implement tokens and see revocation as a feature to be implemented "in the future".
I also noticed, for instance, that a LinkedIn app developer cannot rotate API Keys used to access LinkedIn's service. Again, the solution is to delete the app & restart. :/
Re: The only way to revoke Spotify API tokens is to delete your account
#9Spotify, in general, appears to consider accounts disposable. I think I saw something about this getting better recently, but a few months ago the only way to move my paid account to a family subscription was to delete the old account and create new accounts for everyone I wanted in the family plan.
I imagine this comes from the various trial offerings they've had for new customers, including student discounts and family discounts. I myself have gone through ~3 accounts taking advantage of this over the years and I imagine their metrics show a high account churn such that it is not an unreasonable conclusion to view accounts as disposable. IMO it's certainly better then facebook's undisposable position where you…
As a user Facebook's approach seems much better. I can't remember specifically what it was but I recently wanted to make a change to my Spotify account (which I've had since it first launched in the UK in 2009). Support told me the only option was to create a new account. This would have meant losing all of the songs I'd saved over the years, all playlists I'd created, and all playlists I was following. I'd also have to make all of the necessary friend connections again to access playlists I was collaborating on. The worst part is that the 'profile' Spotify has built that makes it's recommendations decent for me would be lost so Discover Weekly and recommendations would suck until it had built a new profile. That's a horrible experience for the user.
Re: The only way to revoke Spotify API tokens is to delete your account
#10Spotify, in general, appears to consider accounts disposable. I think I saw something about this getting better recently, but a few months ago the only way to move my paid account to a family subscription was to delete the old account and create new accounts for everyone I wanted in the family plan.
It was pretty effortless for me. I just invited my wife via the email address she had registered and it connected it to the plan. Her account was previously on the free tier so maybe that's why.