Spotify download broken again

[zeroquinc]

Reason: ERROR: https://open.spotify.com/api/token gave us not a 200. Instead: 400

When downloading a playlist as zip

Using latest version 2.8.0

[kmille]

Yes, I hope someone is submitting a fix.

…

On July 3, 2025 1:54:48 AM GMT+02:00, desileR ***@***.***> wrote: zeroquinc created an issue (kmille/deezer-downloader#174) ```Reason: ERROR: https://open.spotify.com/api/token gave us not a 200. Instead: 400``` When downloading a playlist as zip -- Reply to this email directly or view it on GitHub: #174 You are receiving this because you are subscribed to this thread. Message ID: ***@***.***>

[zeroquinc]

Maybe its because the params have changed as mentioned here? #169 (comment)

U seem to have changed only the first part not the second. Not sure if that helps.

[kmille]

There are some hints but nothing works for me... librespot-org/librespot#1475

[Optimuspime123]

Hi, came here from the mentioned issue on librespot but the current working version is something like this for the totp generation :

def generate_spotify_totp(timestamp_seconds: int) -> str:
    """
    Replicates the TOTP generation logic for version 10. 
    """
    # v10 secret string
    secret_string = "=n:b#OuEfH\\fE])e*K"
 
    # XOR -> new string -> UTF8 bytes -> Base32
    processed = [ord(char) ^ ((i % 33) + 9) for i, char in enumerate(secret_string)]
    processed_str = "".join(map(str, processed))
    utf8_bytes = processed_str.encode('utf-8')
    b32_secret = base64.b32encode(utf8_bytes).decode('utf-8')
    totp = pyotp.TOTP(b32_secret)
    return totp.at(timestamp_seconds) 

and I am currently using these params (some of them might not be necessary)

params = {
       'reason': 'init',
       'productType': 'web-player',
       'totp': totp_local,  # Local time TOTP
       'totpServer': totp_server,  # Server time TOTP (or fallback to local)
       'totpServerTime': server_ts_seconds,  # Server timestamp
       'totpVer': '10', 
       'sTime': now_ts_seconds,
       'cTime': now_ts_millis,
       'buildVer': 'web-player_2024-06-12_1749598284688_68a7f1a',
       'buildDate': '2024-06-12'
   } 

[kmille]

Thanks! How long will this work :)
I'm thinking about just scraping the website as we just need "artist - title"...

[Optimuspime123]

You're welcome :)

How long will this work

Honestly no clue, feels like cat and mouse tbh
for my needs (friend activity) a token is necessary, so I have to stick to this - other methods might indeed suit you better.

[Thereallo1026]

Hello! Coming from the librespot issue.

For the params @Optimuspime123 have mentioned, not all of those are required, below are what's needed:

	const params = new URLSearchParams({
		reason: "init",
		productType: "web-player",
		totp,
		totpServer: totp,
		totpVer: "10",
	});

And yes, this is absolutely a cat and mouse chase, a more effective method would be hosting a web scraper as @kmille suggested.

[tonyhouse1982]

Thanks! How long will this work :) I'm thinking about just scraping the website as we just need "artist - title"...

what are the modifications to the current version to make it work?

[kmille]

@Thereallo1026 does the API still work for you? I just tried to read/parse the html of https://open.spotify.com/playlist/0wl9Q3oedquNlBAJ4MGZtS. They have randomized names for their html attributes. I really don't like to parse this by hand...

[tonyhouse1982]

I figured out to make playlist from spotify work again
these are my changes
#180

[kmille]

Has anyone lukc with spotify_monitor to make the Spotify API work again? The docker container does not work for me (" No real secrets with version.") and ./debug/spotify_monitor_secret_grabber.py says Error: BrowserType.launch: Executable doesn't exist at /home/kmille/.cache/ms-playwright/chromium_headless_shell-1208/chrome-headless-shell-linux64/chrome-headless-shell

https://github.com/misiektoja/spotify_monitor?tab=readme-ov-file#debugging-tools

I will add a warning that Spotify download is currently not working.

[Thereallo1026]

Has anyone lukc with spotify_monitor to make the Spotify API work again? The docker container does not work for me (" No real secrets with version.") and ./debug/spotify_monitor_secret_grabber.py says Error: BrowserType.launch: Executable doesn't exist at /home/kmille/.cache/ms-playwright/chromium_headless_shell-1208/chrome-headless-shell-linux64/chrome-headless-shell

https://github.com/misiektoja/spotify_monitor?tab=readme-ov-file#debugging-tools

I will add a warning that Spotify download is currently not working.

I am pretty sure that they changed something internally but i never had the time to check
My GitHub CI stopped working as well

[jsonpoindexter]

I implemented a solution that works but would require the individual to create a Spotify app via https://developer.spotify.com/ in order to use the official spotify api via their client id and secret when running deezer-download.

Would anyone be interested in using this as well?