Open spotify login code#

But then if you load up the landing page again, the credentials are there because the POST actually worked. and POST to the auth.php, which returns a 500 error. Then you load up the landing page, which gives you the tracking id, csrftoken, etc. So what happens is the notification.php sets a plp cookie. Rather than clicking the link, navigate to the url again and hopefully you will get a anonymous session and it will start playing.

Sometimes the PHP script still returns a 500 error and the player fails with some sort of 'This is taking a long time.' error with a 'click here' link which takes you back to the regular login screen.

Navigate to and wait for it to load up and start playing.

(Optional, only required if you've previously linked the Facebook account with Spotify) Go to and find Spotify, select it and go Remove App.

So to get to anonymous mode in the offical player, two (or three) steps:

There's code in the player to drive users who haven't got a Spotify account to use the app but incentivise them to sign up with a banner, as shown in the screenshot above.

The secret sauce is Facebook interestingly, but not in the way you'd expect. Good news everyone! /cc PHP auth endpoint has stopped sending 500 errors for me now, so anonymous works now in the library but only for reading actions, you can't create/star/like/share anything or play any tracks.ĭid some more 'research' (cough cough), actually got a track playing in the official player in anonymous mode. Reopen this issue if there's anything else. I did however find a legitimate way of consistently triggering the anonymous session logic in the official player, if you are logged in to Facebook, but not connected to the app (as in have not authorised the Spotify app), and navigate to then it will try to create an anonymous session with a POST to /xhr/json/auth.php (the same method that we were previously using).Īssuming that the 500 errors will go away and be fixed eventually as it is actually legitimately written into the code, and considering that going to to redirect to the landing page is an extra hop/redirect, the number of hops would be about the same as the landing page + xhr POST combo we currently have, and is also simpler as it shares the same code for all three login types, so I don't think that any code changes are needed. It seems now that you were correct, in that the landing page only provides anonymous credentials when you have the cookie from Īlso, the previous method going via /xhr/json/auth.php seems to be broken at the moment and is returning 500 errors for anonymous login attempts. More research and I'm still confused about this feature. In terms of actually using this, a quick example that I've tested is: I've noticed that there's a sessionType key in the settings which is set to anonymous, which could help, as could checking if the credentials are null before skipping the second authentication POST step in the anonymous login. So, although the current code works, ideally it could be refactored to utilise the existing anonymous credentials from the landing page request and save one RTT and not perform the POST in that case. This occurs on any landing page, not only those redirected from. What you have noticed however, is that now, new requests to provide an anonymous session credentials anyway rather than null credentials. This method stopped working a while ago, but now testing it again it seems like it is working again with the latest changes. The anonymous login was reverse engineered from the official client source code which sets the login type to anonymous when making the POST. Previously, any request to returned null credentials until the client authenticates with a HTTP POST to /xhr/json/auth.php, which then sets the session up with credentials that can then be used to open a WebSocket connection. This is actually what the Spotify#anonymousLogin() method is supposed to do, however it seems that Spotify have changed the way that we can access it so some of the code should really be updated.

Open spotify login code#