Music Kit for web app authorization of a user

Hi there,

I ve Been wondering about getting a 'music user token' for manipulating users playlists.

The situation I found myself in is that that can only be done in the front-end, but by exposing the 'developer token' I need to generate, and the 'developer token' is the key to our app, if someone takes that, they can do anything with it, am I wrong?

Thanks for your time!

Hi,

Yep the developer token is exposed to the frontend, that's why you have to make it short-lived for the time you're asking for authorization to the user.

Music Kit for web app authorization of a user
 
 
Q