4 Commits

Include renames

Author	SHA1	Message	Date
saopig1andClaude Opus 4.8	8e89a078a7	fix(spotify): atomic OAuth token store write so a crash during rotating refresh can't corrupt/lose it [corner-case R3-5] ... Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-04 11:31:00 +08:00
saopig1andClaude Opus 4.8	d796dd48ff	fix(spotify): apply UI-entered Client ID to live SpotifyOAuth without restart [whole-branch I2] ... Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-03 01:49:33 +08:00
saopig1	6e0a0f7392	fix(spotify): collapse concurrent OAuth refresh + TTL/cap PKCE verifiers [S4.3]	2026-07-03 00:50:40 +08:00
saopig1andClaude Opus 4.8	333f7606e4	feat(spotify): add SpotifyOAuth Authorization Code + PKCE control-token flow ... Stage 3 Task 2. PKCE (S256) authorize URL, code exchange, and refresh with rotated-refresh-token persistence + invalid_grant store-clear. axios/http and token store injected for fully mocked, network-free unit tests. Corrections C3.2 (require the operator's own client_id; no librespot public client / :5588 default; buildAuthorizeUrl throws + isAuthorized false without it) and C3.7 (delete the state->verifier map entry in a finally on every terminal path) applied. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-02 23:13:05 +08:00