Migrate SoundCloud authentication to OAuth 2.1 (PKCE) and new endpoint before April 1, 2026

[roncli]

Summary:
SoundCloud is deprecating its legacy authentication endpoints and requiring all integrations to migrate to OAuth 2.1 with PKCE. The old endpoint (api.soundcloud.com/oauth2) will be shut down on April 1, 2026. After this date, authentication and token exchange using the old endpoint will fail.

Required Actions:

• Update authentication endpoint from api.soundcloud.com/oauth2 to secure.soundcloud.com/oauth/token.
• Implement OAuth 2.1 with Proof Key for Code Exchange (PKCE) for all SoundCloud authentication flows.
• Review and update any documentation, secrets, or configuration related to SoundCloud authentication.
• Test the new authentication flow to ensure uninterrupted service.

References:

• SoundCloud API Discussions
• SoundCloud API Issues
• SoundCloud Blog Post and Authentication Guide (see email for links)

Deadline:

• April 1, 2026 — After this date, the legacy endpoint will be unavailable and integrations will break.

Notes:

• This is a breaking change. Failure to migrate will result in loss of SoundCloud integration functionality.
• If you have questions, reach out via the links above.

---

This issue was created in response to a deprecation notice from SoundCloud regarding OAuth endpoint migration and PKCE enforcement.