Take the 2-minute tour ×
Web Applications Stack Exchange is a question and answer site for power users of web applications. It's 100% free, no registration required.

I'm surprised that Facebook supports them

(and yes, they really want Facebook password)

As of their policies, it should be disallowed to request password from user's

You must not include functionality that proxies, requests or collects Facebook usernames or passwords.

So what is going on ? Is that just some exception?

share|improve this question
    
It's the biggest thing besides games that proves FB is a viable platform, so don't be surprised if there are exceptions. –  Alex Dec 15 '11 at 23:05
    
Well isn't your Spotify account linked with Facebook, so that in the end you're just logging into Facebook, which authenticates your login for Spotify? I don't see the problem with that. –  slhck Dec 16 '11 at 0:13
    
@slhck: "I'm just logging into Facebook" - by giving them my password, the most confidential property of mine. Well, I have tried to give them password from one member of my family which doesn't want to be on Facebook anymore, and it seems that she has received a lot of emails trying to say they that there were logging attempts from Spotify. So really, Spotify gets your real Facebook (not spotify) account email and tries to logs in to the Facebook account. Who knows what would it mean –  Martin. Dec 16 '11 at 5:45

4 Answers 4

up vote 9 down vote accepted

This would normally be cause for alarm and against Facebook's TOS, but in this case Spotify and Facebook have entered into a direct agreement.

See: TheRegister's acticle and one at Forbes for further detail.

share|improve this answer

This is way after the fact, but I feel compelled to add this answer anyway. In my opinion, this is the best way to login to Spotify via Facebook.

Facebook provides an authentication method called Application Specific Passwords (since Oct. 27, 2011). If you head over to your Facebook security settings, there's a section titled 'App Passwords.' From here, you can give it the name of the application you'd like to authenticate (in this case Spotify). Press continue and Facebook will generate a single-use random password that you can use to login to Spotify.

share|improve this answer
    
Side note: Google provides an analogous service that you can use to login to third party services. Application-specific passwords and two-step verification using a mobile phone are excellent ways to add an additional level of security to your online identity. –  michaelxor Mar 27 '13 at 19:20

Regardless of what kind of agreement Facebook and Spotify may have, Facebook's Statement of Rights and Responsibilities (TOS), is an agreement between Facebook and users and it currently states that

You will not share your password (or in the case of developers, your secret key), let anyone else access your account, or do anything else that might jeopardize the security of your account.

share|improve this answer

At the time of writing, I was able to retrieve a user id (numeric) and a password by using https://www.spotify.com/en/account/set-device-password/. This username/password worked for logging in with the desktop application as well.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.