INVALID_CLIENT: Invalid redirect URI

[gon4u]

Describe the bug

Im running your-spotify in the runtipi app, and im getting INVALID_CLIENT: Invalid redirect URI error

Expected behavior

The app stopped working out of nowhere, i didnt change anything.

Additional context

This is the docker compose that runtipi creates:

services:

  your-spotify:

    image: yooooomi/your_spotify_client:1.15.0

    restart: unless-stopped

    networks:

      your-spotify_migrated_network:

        gw_priority: 0

      tipi_main_network:

        gw_priority: 1

    environment:

      API_ENDPOINT: http://${INTERNAL_IP}:32500

    ports:

      - ${APP_PORT}:3000

    depends_on:

      - your-spotify-server

    labels:

      generated: true

      traefik.enable: true

      traefik.docker.network: runtipi_tipi_main_network

      traefik.http.middlewares.your-spotify-migrated-web-redirect.redirectscheme.scheme: https

      traefik.http.services.your-spotify-migrated.loadbalancer.server.port: "3000"

      traefik.http.routers.your-spotify-migrated-local-insecure.rule: Host(`your-spotify.${LOCAL_DOMAIN}`)

      traefik.http.routers.your-spotify-migrated-local-insecure.entrypoints: web

      traefik.http.routers.your-spotify-migrated-local-insecure.service: your-spotify-migrated

      traefik.http.routers.your-spotify-migrated-local-insecure.middlewares: your-spotify-migrated-web-redirect

      traefik.http.routers.your-spotify-migrated-local.rule: Host(`your-spotify.${LOCAL_DOMAIN}`)

      traefik.http.routers.your-spotify-migrated-local.entrypoints: websecure

      traefik.http.routers.your-spotify-migrated-local.service: your-spotify-migrated

      traefik.http.routers.your-spotify-migrated-local.tls: true

      runtipi.managed: true

      runtipi.appurn: your-spotify:migrated

  your-spotify-server:

    image: yooooomi/your_spotify_server

    restart: unless-stopped

    networks:

      your-spotify_migrated_network:

        gw_priority: 0

    environment:

      API_ENDPOINT: http://${INTERNAL_IP}:32500

      CLIENT_ENDPOINT: http://${INTERNAL_IP}:${APP_PORT}

      SPOTIFY_PUBLIC: ${SPOTIFY_PUBLIC}

      SPOTIFY_SECRET: ${SPOTIFY_SECRET}

      MONGO_ENDPOINT: mongodb://your-spotify-db:27017/your_spotify

      CORS: i-want-a-security-vulnerability-and-want-to-allow-all-origins

    ports:

      - 32500:8080

    depends_on:

      - your-spotify-db

    labels:

      runtipi.managed: true

      runtipi.appurn: your-spotify:migrated

  your-spotify-db:

    image: mongo:4.4.29

    restart: unless-stopped

    networks:

      your-spotify_migrated_network:

        gw_priority: 0

    volumes:

      - ${APP_DATA_DIR}/data/db:/data/db

    labels:

      runtipi.managed: true

      runtipi.appurn: your-spotify:migrated

These are the app envs:

ARCHITECTURE=arm64

POSTGRES_DBNAME=tipi

RABBITMQ_HOST=runtipi-queue

INTERNAL_IP=192.168.1.30

ROOT_FOLDER_HOST=/home/goncalo_correia/runtipi

NGINX_PORT=9091

NGINX_PORT_SSL=4443

POSTGRES_HOST=runtipi-db

RABBITMQ_USERNAME=tipi

TIPI_VERSION=v4.6.5

POSTGRES_PORT=5432

POSTGRES_PASSWORD=3dc500a9b48edd6e1b6392acd7d138f2411396bd552a66d4e51cb86c792a4f47

REDIS_PASSWORD=bdd41e8d1f99b83945c58653f94ce6f5

DOMAIN=example.com

LOCAL_DOMAIN=goncalo.home

POSTGRES_USERNAME=tipi

REDIS_HOST=runtipi-redis

RABBITMQ_PASSWORD=5fa115071f26219766c571d9b350a06e2acf36838523a14576efc7f9ea232258

RUNTIPI_FORWARD_AUTH_URL=http://runtipi:3000/api/auth/traefik

RUNTIPI_APP_DATA_PATH=/home/goncalo_correia/runtipi

NODE_ENV=production

APPS_REPO_ID=29ca930bfdaffa1dfabf5726336380ede7066bc53297e3c0c868b27c97282903

APPS_REPO_URL=https://github.com/runtipi/runtipi-appstore

TZ=Europe/Lisbon

DNS_IP=8.8.8.8

JWT_SECRET=f84337cbe8eb019b01d8a5c1f2af4501a94a07f81c8afad5978eebf812738dad

DEMO_MODE=false

GUEST_DASHBOARD=true

ALLOW_AUTO_THEMES=true

ALLOW_ERROR_MONITORING=true

PERSIST_TRAEFIK_CONFIG=false

QUEUE_TIMEOUT_IN_MINUTES=5

MAX_BACKUPS=0

ADVANCED_SETTINGS=true

LOG_LEVEL=info

EXPERIMENTAL_INSECURE_COOKIE=false

THEME_BASE=gray

THEME_COLOR=yellow

APP_PORT=37612

APP_URN=your-spotify:migrated

APP_ID=your-spotify-migrated

APP_NAME=your-spotify

APP_STORE_ID=migrated

APP_DATA_DIR=/home/goncalo_correia/runtipi/app-data/migrated/your-spotify

APP_IMAGE_TAG=1.15.0

SPOTIFY_PUBLIC=5c3b142a7dae405588dd2098466a184a

SPOTIFY_SECRET=d793078aa2fc4d22b8270a3c4772309c

APP_EXPOSED=false

APP_HOST=192.168.1.30

APP_PROTOCOL=http

APP_DOMAIN=192.168.1.30:37612

APP_LOCAL_DOMAIN=your-spotify.goncalo.home

The spotify application redirect URLS are a mess, I've tried putting everything in there, but nothing worked

Screenshots

If applicable, add screenshots to help explain your problem.

Shared link

If you don't mind, you can add a Shared link to this issue by clicking Share this page on your YourSpotify application so that I can identify the issue quicker.

[brent20]

Spotify announced changes to the redirect URI's back in Feburary. You probably need to ensure you're following their revised guidelines:

In line with industry best practices, we’re removing implicit grant from our OAuth offering, as well as prohibiting insecure redirect URIs for all clients.These features could pose a security risk to Spotify users and partners and we are therefore enforcing the new rules before the end of the year.
In line with industry best practices, we’re removing implicit grant from our OAuth offering, as well as prohibiting insecure redirect URIs for all clients.
These features could pose a security risk to Spotify users and partners and we are therefore enforcing the new rules before the end of the year.
Existing applications need to migrate to an acceptable state before November 2025.
For all newly created apps, we will start automatically enforcing these rules from the beginning of April.
Why am I receiving this?
We have identified you as the owner of one or more apps that are using features that we are going to deprecate. Failure to take action will cause your application to stop working as expected.
For more details on necessary steps to take to ensure your application operates in line with these new rules, please read our blog post.
Feel free to contact the developer community forum for feedback.
Regards,
The Auth team at Spotify