Discogs Copilot ext-v0.2.0 — Sign in with Discogs
Sign in with Discogs replaces token-pasting as the extension's primary auth path. One click in the panel, approve on discogs.com, done — no more generating and copying personal access tokens.
Install (load unpacked, Chrome 114+)
- Clone or download this repo and note the
extension/folder chrome://extensions→ enable Developer mode → Load unpacked → pickextension/- Open any Discogs release page, click the ◎ toolbar icon, hit Sign in with Discogs
Full instructions: extension/README.md
Updating from ext-v0.1.0 (load-unpacked installs)
This release pins the extension ID via a manifest key (needed for a stable OAuth redirect URL), which changes the extension's identity once: remove the old entry in chrome://extensions and Load unpacked again. Your pasted token from v0.1.0 lives under the old ID — just sign in with Discogs instead (or re-paste the token under options → Advanced).
Highlights
- One-click sign-in — the extension is a public OAuth 2.1 client (authorization code + PKCE) of the Worker, which bridges to Discogs OAuth 1.0a server-side. No Discogs consumer secret ships in the extension
- Your Discogs credentials never touch the device — they live server-side, encrypted inside the OAuth grant; the extension stores only revocable Worker-issued session tokens (sign out discards them; Discogs-side revocation under Settings → Applications)
- Transparent session refresh — hourly access tokens refresh automatically (30-day rolling session); expired sessions fall back to the setup screen, never a broken panel
- Personal access tokens still work — now under options → Advanced (self-hosters, development); options shows the connected username, and Test connection uses the new
/api/whoami - Requires server v1.2.0 (already live on the hosted instance)
Out of scope (next up)
Logged-in home screen (taste profile, recently analyzed, what-to-spin), toolbar badge, Chrome Web Store submission.