feature: siriusXM service

[gmuth]

Currently bmx_services.json includes:
"{BMX_SERVER}/core02/svc-bmx-adapter-siriusxm-everest-eco1/prod/live-adapter"
Is there a chance for soundcork to support this music service?

[akpdw]

It's weird -- the bmx auth for siriusxm uses oauth2, but I don't see that the siriusxm API uses oauth2 anywhere. I'm wondering if the way that they implemented it was to use oauth2 for bmx authorization, and then store the siriusxm username and password on the bmx server itself and open an auth session using that. Worth looking into.

[gmuth]

I also have the impression bmx works as middleware to other services and takes care of auth handling towards those services - supporting whatever auth flow the provider requires. Capturing app2server and app2device communication during a setup-sirius-using-the-app workflow should help (e.g. using mitm in wireguard mode)

I found these endpoints:
STSCertified: https://www.siriusxm.com/userservices/configuration
STSCertified: http://www.siriusxm.com/rrtest/1?
STSCertified: https://pprod-configuration.siriusxm.com/configuration

[akpdw]

I have started a proof-of-concept implementation using...actually I've tried using several of the existing python SiriusXM libraries. Auth works and getting a stream and now-playing info works, but the problem that I'm running into is that for some reason all of the m3u8 streams that I've gotten from SiriusXM won't play on the SoundTouch. This includes the no-auth-required streams returned by https://github.com/AngellusMortis/sxm-client and such. mpv will play the streams just fine, but the SoundTouch just errors out. I've tried returning some sample HLS m3u8 streams online in place of the SiriusXM streams and that works fine. Could be the AES encryption isn't handled?

SiriusXM looks to have like 98 different APIs. The Bose BMX implementation returns a stream like https://hlspproduction2e-primary.mountain.siriusxm.com/r/sessionid/43432143243243243213143432-432-4321-41-324-24-firstwave/AAC_Data/firstwave/firstwave_variant_small_v2.m3u8 which is not a format that I've seen returned by any of the APIs that I've seen people use. So maybe there's some particular distinction to that stream that allows the SoundTouch to play it?

Anyway we recently went through and updated our roadmap and targeted some other tickets to finish up before this one. So I've put it aside for now but will likely be picking it up again in the near future, free-time willing.

[gmuth]

Have you figured out how this endpoint works?
POST https://content.api.bose.io/core02/svc-bmx-adapter-siriusxm-everest-eco1/prod/live-adapter/token

I think that this bmx integration is not that important - and could be solved after Bose server EOL. We know the content api well enough.