Add logged-in interface for Spotify authentication and playlist selection

.env.example

@@ -42,6 +42,8 @@ APPLE_KEY_PATH=/run/secrets/apple_key
 # Get these from: https://developer.spotify.com/dashboard
 # Guide: https://developer.spotify.com/documentation/general/guides/app-settings/#register-your-app
 SPOTIFY_CLIENT_ID=
+# Redirect URI for Spotify OAuth (must be registered in Spotify app settings)
+SPOTIFY_REDIRECT_URI=https://dev.tunebridge.media/spotify/callback
 
 
 # ============================================================================

entrypoint.sh

@@ -26,6 +26,7 @@ APPLE_KEY_PATH="${APPLE_KEY_PATH:-}"
 # Try to read Spotify client secret from Docker secret
 SPOTIFY_CLIENT_ID="${SPOTIFY_CLIENT_ID:-}"
 SPOTIFY_CLIENT_SECRET="$(read_secret "spotify_client_secret")"
+SPOTIFY_REDIRECT_URI="${SPOTIFY_REDIRECT_URI:-https://${BASEURL}/spotify/callback}"
 
 # Try to read Tidal client secret from Docker secret
 TIDAL_CLIENT_ID="${TIDAL_CLIENT_ID:-}"
@@ -78,6 +79,7 @@ cat > /app/appsettings.json <<EOF
     "AppleKeyPath": "$(escape_bs "$APPLE_KEY_PATH")",
     "SpotifyClientId": "$SPOTIFY_CLIENT_ID",
     "SpotifyClientSecret": "$SPOTIFY_CLIENT_SECRET",
+    "SpotifyRedirectUri": "$SPOTIFY_REDIRECT_URI",
     "TidalClientId": "$TIDAL_CLIENT_ID",
     "TidalClientSecret": "$TIDAL_CLIENT_SECRET",
     "DiscordToken": "$DISCORD_TOKEN",

src/Configuration/AppSettings.cs

@@ -51,6 +51,11 @@ internal class AppSettings {
         /// </summary>
         public string SpotifyClientSecret { get; set; } = string.Empty;
 
+        /// <summary>
+        /// The Spotify OAuth redirect URI for user authentication.
+        /// </summary>
+        public string SpotifyRedirectUri { get; set; } = string.Empty;
+
         /// <summary>
         /// The Tidal API client ID.
         /// </summary>

src/Domain/Models/ApplicationUser.cs

@@ -27,4 +27,19 @@ public class ApplicationUser : IdentityUser {
     /// Start of the current rate limit window.
     /// </summary>
     public DateTime? RateLimitWindowStart { get; set; }
+
+    /// <summary>
+    /// Spotify OAuth access token for user-specific API access.
+    /// </summary>
+    public string? SpotifyAccessToken { get; set; }
+
+    /// <summary>
+    /// Spotify OAuth refresh token for renewing access.
+    /// </summary>
+    public string? SpotifyRefreshToken { get; set; }
+
+    /// <summary>
+    /// Timestamp when the Spotify access token expires.
+    /// </summary>
+    public DateTime? SpotifyTokenExpiry { get; set; }
 }

src/Migrations/20251118214906_AddSpotifyOAuthToUser.cs

@@ -0,0 +1,49 @@
+using System;
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+namespace TuneBridge.Migrations
+{
+    /// <inheritdoc />
+    public partial class AddSpotifyOAuthToUser : Migration
+    {
+        /// <inheritdoc />
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.AddColumn<string>(
+                name: "SpotifyAccessToken",
+                table: "AspNetUsers",
+                type: "TEXT",
+                nullable: true);
+
+            migrationBuilder.AddColumn<string>(
+                name: "SpotifyRefreshToken",
+                table: "AspNetUsers",
+                type: "TEXT",
+                nullable: true);
+
+            migrationBuilder.AddColumn<DateTime>(
+                name: "SpotifyTokenExpiry",
+                table: "AspNetUsers",
+                type: "TEXT",
+                nullable: true);
+        }
+
+        /// <inheritdoc />
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.DropColumn(
+                name: "SpotifyAccessToken",
+                table: "AspNetUsers");
+
+            migrationBuilder.DropColumn(
+                name: "SpotifyRefreshToken",
+                table: "AspNetUsers");
+
+            migrationBuilder.DropColumn(
+                name: "SpotifyTokenExpiry",
+                table: "AspNetUsers");
+        }
+    }
+}