could you explain the account interaction?

[ChaosNicro]

Hey there,
The project looks interesting, though I would like some more info on the login method.

Why is a dev-app connection used?
What access is granted to/used by the app, regarding the used account?
As what does spotify see/process the app?
What data is sent back to spotify using the connected account?

Thanks for making this.

[KRTirtho]

Of course, here's the answers:

1. Why is a dev-app connection used?
   => Spotify API doesn't allow to use an API key publicly. You've to manually add users that you want to allow to use your service & that number is also limited to 5-10 user in development. But it does allow using one's own account without any issues (that makes sense as its his/her own application)
2. What access is granted to/used by the app, regarding the used account?
   => Following scopes are used:
   

   spotube/lib/components/Home/Home.dart

   Lines 33 to 43 in 5307cd7

   	List<String> spotifyScopes = [
   	"playlist-modify-public",
   	"playlist-modify-private",
   	"user-library-read",
   	"user-library-modify",
   	"user-read-private",
   	"user-read-email",
   	"user-follow-read",
   	"user-follow-modify",
   	"playlist-read-collaborative"
   	];

3. As what does spotify see/process the app?
   => An application in development
4. What data is sent back to spotify using the connected account?
   => Literally, nothing. Even the playback data stays on user's machine. Spotify won't even know what you are/were listening