connect returns blank page for newly approved app

[karasuuuuu]

Hi,
We received a client_id + client_secret for our approved iOS app “Yantra” (bundle id com.medetek.yantra). Our redirect URI is yantra://soundcloud-auth. When we open
https://soundcloud.com/connect?client_id=…&response_type=code&scope=non-expiring&redirect_uri=yantra%3A%2F%2Fsoundcloud-auth&code_challenge_method=S256&code_challenge=debug
in Safari (and via ASWebAuthenticationSession), the page is blank and no consent screen loads. That prevents us from obtaining an authorization code. Could you confirm whether this client_id is still pending activation or if there’s a configuration change we need to make? Happy to send the exact client_id privately if needed.

[dpreussler]

@karasuuuuu
the documentation states to use
secure.soundcloud.com/authorize not soundcloud.com/connect
see https://developers.soundcloud.com/docs/api/guide#authentication

[karasuuuuu]

Thanks for the quick reply. Im still getting blank page when trying to authorize after changing the url. does this look right to you?:

state generator

let state = UUID().uuidString pendingState = state components.queryItems = [ // … URLQueryItem(name: "code_challenge", value: challenge), URLQueryItem(name: "state", value: state), URLQueryItem(name: "display", value: "popup") ]

And the the PKCE helper block

    static func generateVerifier() -> String {
        let length = 64
        let characters = Array("abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789-._~")
        var verifier = ""
        for _ in 0..<length {
            verifier.append(characters.randomElement() ?? "a")
        }
        return verifier
    }

    static func challenge(for verifier: String) -> String {
        guard let data = verifier.data(using: .ascii) else { return verifier }
        let hashed = SHA256.hash(data: data)
        return Data(hashed)
            .base64EncodedString()
            .replacingOccurrences(of: "+", with: "-")
            .replacingOccurrences(of: "/", with: "_")
            .replacingOccurrences(of: "=", with: "")
    }
}

Sorry I'm very new to this!

[karasuuuuu]

Is there a way to know if my app has been allowed or not? So I can know whether the errors I'm getting are on my end or just not entitled yet.

When I load

https://secure.soundcloud.com/authorize?client_id=…&redirect_uri=yantra%3A%2F%2Fsoundcloud-auth&response_type=code&code_challenge=…&code_challenge_method=S256

the page stays blank (both in Safari and via ASWebAuthenticationSession), so I never get an authorization code.

[dpreussler]

@karasuuuuu I found your credentials and they are valid
if I copy the url you send and adding the client id I already get the proper confirmation screen.
Are you sure you're not mixing client/secret? Did you try different browser for testing?

[karasuuuuu]

Hey thanks for reply! Turns out it was a typo my agent kept using. for an entire day... fml. serves me right, I know...