Use access token for gst-plugin-spotify login

src/mopidy_spotify/backend.py

@@ -45,9 +45,9 @@ def __init__(self, *args, **kwargs):
             self._credentials_dir.mkdir(mode=0o700)
 
     def on_source_setup(self, source):
-        for prop in ["username", "password", "bitrate"]:
-            source.set_property(prop, str(self._config[prop]))
+        source.set_property("bitrate", str(self._config["bitrate"]))
         source.set_property("cache-credentials", self._credentials_dir)
+        source.set_property("access-token", self.backend._web_client.token())
         if self._config["allow_cache"]:
             source.set_property("cache-files", self._cache_location)
             source.set_property("cache-max-size", self._config["cache_size"] * 1048576)

src/mopidy_spotify/web.py

@@ -50,6 +50,7 @@ def __init__(  # noqa: PLR0913
             self._auth = (client_id, client_secret)
         else:
             self._auth = None
+        self._access_token = None
 
         self._base_url = base_url
         self._refresh_url = refresh_url
@@ -69,6 +70,17 @@ def __init__(  # noqa: PLR0913
         self._cache_mutex = threading.Lock()  # Protects get() cache param.
         self._refresh_mutex = threading.Lock()  # Protects _headers and _expires.
 
+    def token(self):
+        with self._refresh_mutex:
+            try:
+                if self._should_refresh_token():
+                    self._refresh_token()
+                logger.info(f"Providing access token: {self._access_token}")
+                return self._access_token
+            except OAuthTokenRefreshError as e:
+                logger.error(e)  # noqa: TRY400
+                return None
+
     def get(self, path, cache=None, *args, **kwargs):
         if self._authorization_failed:
             logger.debug("Blocking request as previous authorization failed.")
@@ -149,7 +161,8 @@ def _refresh_token(self):
                 f"wrong token_type: {result.get('token_type')}"
             )
 
-        self._headers["Authorization"] = f"Bearer {result['access_token']}"
+        self._access_token = result['access_token']
+        self._headers["Authorization"] = f"Bearer {self._access_token}"
         self._expires = time.time() + result.get("expires_in", float("Inf"))
 
         if result.get("expires_in"):