Existing API app credentials return invalid_client; need reset/rotation
Nobody has claimed this yet.
- Dominant language
- JavaScript
- Stars
- 254
- Forks
- 53
- PR merge metrics
- No merged PRs in 30d
Description
I have an existing SoundCloud API application on my Artist Pro account called wollohy.fm.
The app appears normally in my registered apps page, and the Client ID works at the authorization endpoint.
However, both of these fail with HTTP 401 and:
{"error":"invalid_client"}
- OAuth authorization-code token exchange
- Client credentials flow using the documented HTTP Basic authentication method
I am using the Client ID and Client Secret currently shown in the app settings.
The app settings page does not provide a way to:
- rotate/regenerate the Client Secret
- delete/reset the app
- update/remove the Website field
Please reset or reissue the credentials for this application, or remove the existing application so I can register it again.
I have intentionally not included the Client ID or Client Secret in this public issue.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
The report provides no repository file, test, or entry point for the credential failure, and the requested reset, rotation, or removal is account-facing. A maintainer would need to identify the relevant API ownership and confirm completion by restoring the authorization-code exchange and client-credentials flow without exposing credentials.
Written by the indexing model from the issue text.
Assessment
- Domain
- api, authentication
- Issue type
- Bug
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Active
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100