Kingosticks change: Obtain spclient access token using login5 instead of keymaster (Fixes librespot-org#1179) #1220

Gerrelt · 2023-11-13T20:54:16Z

@kingosticks asked if somebody else wanted to create the pull-request.
I've added the changes to the latest dev branch of librespot, compiled and tested it on raspberry pi.
It seems to still solve the problem as addressed in issuee 1179, it's working fine.
But I just copied the changes from kingostick, so all the questions, and the honor ( :-) ) are for kingosticks!

This is my attempt at creating a pull request. I've only done it once before, so I hope it's done correctly.

… of keymaster (Fixes librespot-org#1179)

roderickvd · 2023-11-14T20:14:09Z

Thanks for making the effort.

Let's first get to ticking the first two checkboxes:

Getting the build to succeed
Confirming the compatibility questions stated in Error 403 #1179

Overall I really like that this moves away from the Mercury keymaster and towards a HTTP endpoint. That's where this should go.

For bonus points you could look into also fixing the Mercury keymaster request. The solution probably lies in inspecting the traffic from the official client, and get the combination of HTTP headers, protobuf request, and keymaster ID precisely right per platform. The official clients do it differently between Windows, Linux, macOS, iOS and Android. When I was an active developer I reverse engineered everything but only tested Linux and macOS.

… of keymaster (Fixes librespot-org#1179)

roderickvd · 2023-12-03T19:34:36Z

Good to see work on it again! Let's resolve those clippy warnings 👍

… of keymaster (Fixes librespot-org#1179)

…ibrespot into auth-token-from-login5 Pulling commit: fix startup log

Gerrelt · 2023-12-11T11:07:23Z

Hello Roderick,

I've solved the fmt and clippy warnings, could you review te change again? This librespot version, with the latest changes, was tested on a raspberry pi, and it seems to work fine.

kingosticks · 2023-12-11T11:10:08Z

The remaining checkbox blocking this is to confirm/deny the the iOS problems that were reported at #1179 (comment)

I don't have any iOS devices, I can't help.

Gerrelt · 2023-12-11T11:12:54Z

OK, I will test that scenario.

Gerrelt · 2023-12-11T18:51:47Z

I've did a test with an iPhone 12, with librespot still on a Raspberry Pi.

connected iPhone, started a song, it started playing on the Pi
skipped to middle of song
skipped to next song
skipped to nearly the end of the song, and let it play into the next song.
This all went without problems.

Then I switched the Raspberry Pi off, and we saw the spotify connect device disappear on the iphone.
Started the Pi again, and connected the iPhone again.
We then could succesfully repeat the steps 1 - 4 again as described above.
So, seems to work ok?

herrernst · 2023-12-11T19:47:13Z

Then I switched the Raspberry Pi off, and we saw the spotify connect device disappear on the iphone. Started the Pi again, and connected the iPhone again. We then could succesfully repeat the steps 1 - 4 again as described above. So, seems to work ok?

You don't have username and password hardcoded as librespot params, or do you? If not (i.e. if iPhone initiates login and that works), it's good. (Unfortunately I can't test because I don't have an active subscription.)

Gerrelt · 2023-12-12T13:31:11Z

You don't have username and password hardcoded as librespot params, or do you?
If not (i.e. if iPhone initiates login and that works), it's good. (Unfortunately I can't test because I don't have an active subscription.)

No, I don't have the username and password hardcoded as params.
iPhone (or Android device) is logged in into Spotify, and then it connects to the librespot spotify connect device on the Pi.

roderickvd · 2023-12-15T11:30:26Z

Great work. I’m not entirely on top and cannot test myself. Will you give me the go ahead if I can merge?

Gerrelt · 2023-12-15T12:08:38Z

Yes, you can merge it.

kingosticks · 2023-12-15T12:22:14Z

I never implemented the hash cash stuff for this. In what situation is that used? Have we missed a test case or is it just not required here?

kingosticks · 2023-12-15T12:27:28Z

core/src/spclient.rs

+                break message.ok().to_owned();
+            }
+
+            if count < MAX_TRIES {


Ideally this would be improved to check for the error cases where a retry is not sensible:

enum LoginError { UNKNOWN_ERROR = 0; INVALID_CREDENTIALS = 1; BAD_REQUEST = 2; UNSUPPORTED_LOGIN_PROTOCOL = 3; TIMEOUT = 4; UNKNOWN_IDENTIFIER = 5; TOO_MANY_ATTEMPTS = 6; INVALID_PHONENUMBER = 7; TRY_AGAIN_LATER = 8; }

At the very least, a retry in the face of BAD_REQUEST or a TOO_MANY_ATTEMPTS error response is a bit rude.

A simple exponential backup would be nice too, ideally implemented in a reusable way. But could leave that to another day, I'm just trying to keep a record of what was left unfinished.

EDIT: Actually, there is a solid handling of the HTTP side of this in our HttpClient . Given this is protobuf over HTTP, it depends what Spotify do. i.e. do they reflect protobuf errors in the HTTP response? I don't think I ever looked into that. @roderickvd do you know?

kingosticks · 2023-12-15T12:28:19Z

core/src/spclient.rs

+                response = self.auth_token_request(&login_request).await?;
+            } else {
+                return Err(Error::failed_precondition(format!(
+                    "Unable to solve any of {MAX_TRIES} hash cash challenges"


As is, there is still no hash cash handling so this error message makes no sense.

kingosticks · 2023-12-15T12:36:09Z

core/src/spclient.rs

-                warn!("Unable to get client token. Trying to continue without...");
-            }
+            let client_token = self.client_token().await?;
+            headers_mut.insert(CLIENT_TOKEN, HeaderValue::from_str(&client_token)?);


This changes how we handle the failing case. The old code used to continue anyway, maybe that's still what we want. I don't remember why I thought I had to change it...

kingosticks · 2023-12-15T12:40:49Z

I am sorry for my late review. I should have highlighted more clearly (and earlier) the bits I didn't finish. It obviously all works as is but it could be improved on.

kingosticks · 2023-12-15T13:08:26Z

core/src/spclient.rs

-                .token_provider()
-                .get_token("playlist-read")
-                .await?;
+            let auth_token = self.auth_token().await?;


~~Should also probably check the result of this and break the loop if it failed.~~

EDIT: Cancel that, I forgot what ? does. But maybe that's actually the wrong thing to do given "currently these endpoints seem to work fine without it"...

roderickvd · 2024-01-03T19:56:19Z

bump if you could take a look at resolving @kingosticks's review comments? ❤️

roderickvd · 2024-03-31T09:34:53Z

Am I right that this one can be closed in favour of #1246?

hamishfagg · 2024-05-16T09:56:43Z

FWIW I get the following errors when trying to use this branch now (when trying to play a track):

2024-05-16 09-55-11.596 [Error] (librespot_playback::player) Unable to load audio item: Error { kind: InvalidArgument, error: StatusCode(400) }
2024-05-16 09-55-11.597 [Error] (librespot_playback::player) Skipping to next track, unable to load track <SpotifyId("spotify:track:7mDKRYiqejoHzP7dQGxLys")>: ()
2024-05-16 09-55-11.796 [Error] (librespot_playback::player) Unable to load audio item: Error { kind: InvalidArgument, error: StatusCode(400) }

Kingosticks change: Obtain spclient access token using login5 instead…

96e02fd

… of keymaster (Fixes librespot-org#1179)

Gerrelt mentioned this pull request Nov 13, 2023

Error 403 #1179

Open

roderickvd added SpotifyAPI Interop b/w librespot and Spotify new api labels Nov 15, 2023

mbeijen mentioned this pull request Nov 18, 2023

Couldn't establish a new session. MercuryClient$MercuryException: status: 403 librespot-org/librespot-java#697

Open

roderickvd linked an issue Nov 19, 2023 that may be closed by this pull request

Error 403 #1179

Open

Gerrelt added 2 commits December 1, 2023 20:37

Kingosticks change: Obtain spclient access token using login5 instead…

ba08273

… of keymaster (Fixes librespot-org#1179)

Merge branch 'librespot-org:dev' into auth-token-from-login5

f065908

Gerrelt added 4 commits December 4, 2023 20:28

Merge branch 'librespot-org:dev' into auth-token-from-login5

a54cc8f

Kingosticks change: Obtain spclient access token using login5 instead…

f815318

… of keymaster (Fixes librespot-org#1179)

Merge branch 'librespot-org:dev' into auth-token-from-login5

40c2a4d

Merge branch 'auth-token-from-login5' of https://github.com/Gerrelt/l…

87dddf2

…ibrespot into auth-token-from-login5 Pulling commit: fix startup log

kingosticks reviewed Dec 15, 2023

View reviewed changes

lmore377 mentioned this pull request Jan 19, 2024

Authentication on all desktop platforms is broken #1245

Open

lmore377 mentioned this pull request Jan 19, 2024

Obtain spclient access token using login5 instead of keymaster (Fixes #1179 and #1245) #1246

Draft

emtprt mentioned this pull request Feb 14, 2024

Unable to download tracks oSumAtrIX/DownOnSpot#73

Open

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Kingosticks change: Obtain spclient access token using login5 instead of keymaster (Fixes librespot-org#1179) #1220

Kingosticks change: Obtain spclient access token using login5 instead of keymaster (Fixes librespot-org#1179) #1220

Gerrelt commented Nov 13, 2023

roderickvd commented Nov 14, 2023

roderickvd commented Dec 3, 2023

Gerrelt commented Dec 11, 2023 •

edited

kingosticks commented Dec 11, 2023 •

edited

Gerrelt commented Dec 11, 2023

Gerrelt commented Dec 11, 2023 •

edited

herrernst commented Dec 11, 2023

Gerrelt commented Dec 12, 2023 •

edited

roderickvd commented Dec 15, 2023

Gerrelt commented Dec 15, 2023

kingosticks commented Dec 15, 2023

kingosticks Dec 15, 2023

kingosticks Dec 15, 2023 •

edited

kingosticks Dec 15, 2023 •

edited

kingosticks Dec 15, 2023

kingosticks Dec 15, 2023 •

edited

kingosticks commented Dec 15, 2023

kingosticks Dec 15, 2023 •

edited

roderickvd commented Jan 3, 2024

roderickvd commented Mar 31, 2024

hamishfagg commented May 16, 2024 •

edited

Kingosticks change: Obtain spclient access token using login5 instead of keymaster (Fixes librespot-org#1179) #1220

Are you sure you want to change the base?

Kingosticks change: Obtain spclient access token using login5 instead of keymaster (Fixes librespot-org#1179) #1220

Conversation

Gerrelt commented Nov 13, 2023

roderickvd commented Nov 14, 2023

roderickvd commented Dec 3, 2023

Gerrelt commented Dec 11, 2023 • edited

kingosticks commented Dec 11, 2023 • edited

Gerrelt commented Dec 11, 2023

Gerrelt commented Dec 11, 2023 • edited

herrernst commented Dec 11, 2023

Gerrelt commented Dec 12, 2023 • edited

roderickvd commented Dec 15, 2023

Gerrelt commented Dec 15, 2023

kingosticks commented Dec 15, 2023

kingosticks Dec 15, 2023

Choose a reason for hiding this comment

kingosticks Dec 15, 2023 • edited

Choose a reason for hiding this comment

kingosticks Dec 15, 2023 • edited

Choose a reason for hiding this comment

kingosticks Dec 15, 2023

Choose a reason for hiding this comment

kingosticks Dec 15, 2023 • edited

Choose a reason for hiding this comment

kingosticks commented Dec 15, 2023

kingosticks Dec 15, 2023 • edited

Choose a reason for hiding this comment

roderickvd commented Jan 3, 2024

roderickvd commented Mar 31, 2024

hamishfagg commented May 16, 2024 • edited

Gerrelt commented Dec 11, 2023 •

edited

kingosticks commented Dec 11, 2023 •

edited

Gerrelt commented Dec 11, 2023 •

edited

Gerrelt commented Dec 12, 2023 •

edited

kingosticks Dec 15, 2023 •

edited

kingosticks Dec 15, 2023 •

edited

kingosticks Dec 15, 2023 •

edited

kingosticks Dec 15, 2023 •

edited

hamishfagg commented May 16, 2024 •

edited