pandoru 0.1.0 → 0.1.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2e2bd7b5d026ed3c16ee35173ca22f10839f4f486acd3259c8f5ed43c9b96053
-  data.tar.gz: 25ce0f4f8a3d6bcbf78dadf9a4eb7fa20ae3a0e77bb68e979ffd9a3acc1e2f91
+  metadata.gz: ad02207b38cdbe7ac38fe971c4a3c13e1f439336791f559b6c3bd6b2cc38ef36
+  data.tar.gz: da0f8c0372e9302bfee89f5ddcd7d1b460265f3f55b21ef1054c1bc59e8c6b2e
 SHA512:
-  metadata.gz: 8561e8704472f4c3bbec08198a85d84bca87687fa43bad8a08239f49228e7890aaaff55b0d66bd591420b22639de25c40a1aa421124743452b1939601d900b09
-  data.tar.gz: cd0f0849b4a1128801be0debc5613933d4757dad32327cf5b914a093e8501e3be84596bb12a58b75db29dd4b970ae6d0a29ab730d4cf28d721522bf71188ddfd
+  metadata.gz: ff0b263da1d80d461ccdf1e81277fb5c22f3fb55f0651b89a317f69f47970228297bb03a6acf6d13bea91567ea7f86f56577db3a52cd991b55f1ee0df8360843
+  data.tar.gz: a419c0670a1ce0d57ac5fece5c7b194d67292a4cd2a648b494a6df5b59fdcf7dee7ea23a267746d9c01292e2b0dcabfb75e5d524853907e2eda42b95d0192aff

data/CHANGELOG.md

@@ -4,6 +4,18 @@ All notable changes to this project are documented here. The format is based
 on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project
 adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.1.1] - 2026-05-25
+
+### Fixed
+- Transport sent plaintext HTTP to the TLS port (`http://host:443`) for any
+  method not in `REQUIRE_TLS` (e.g. `user.getStationList`), which Pandora drops
+  with an empty reply — breaking every authenticated call except login and
+  `getPlaylist`. The request scheme now follows the transport's configured TLS
+  setting, so TLS hosts use https for all methods.
+- `Station#add_seed` passed its arguments to `add_music` in the wrong order
+  (station and music tokens swapped), producing a malformed `station.addMusic`
+  request. It now calls `add_music(music_token, token)`.
+
 ## [0.1.0] - 2026-05-25
 
 Initial public release. A Ruby port of pydora (tracking upstream `pydora 2.3.1`)
@@ -27,3 +39,6 @@ targeting Pandora's partner/device JSON API (`tuner.pandora.com/services/json/`)
   INVALID_PARTNER_LOGIN.
 - Corrected the encryption/decryption key orientation in the bundled default
   partner settings.
+
+[0.1.1]: https://github.com/TwilightCoders/pandoru/releases/tag/v0.1.1
+[0.1.0]: https://github.com/TwilightCoders/pandoru/releases/tag/v0.1.0

data/README.md

@@ -1,8 +1,13 @@
+[![License        ](https://img.shields.io/github/license/TwilightCoders/pandoru.svg)]()
+[![Version        ](https://img.shields.io/gem/v/pandoru.svg)](https://rubygems.org/gems/pandoru)
+[![Build Status   ](https://travis-ci.org/TwilightCoders/pandoru.svg)](https://travis-ci.org/TwilightCoders/pandoru)
+[![Maintainability](https://qlty.sh/gh/TwilightCoders/projects/pandoru/maintainability.svg)](https://qlty.sh/gh/TwilightCoders/projects/pandoru)
+[![Code Coverage  ](https://qlty.sh/gh/TwilightCoders/projects/pandoru/coverage.svg)](https://qlty.sh/gh/TwilightCoders/projects/pandoru)
 # Pandoru
 
 **Pandoru** is a Ruby port of the Python `pydora` library, providing a comprehensive client for the unofficial Pandora music streaming API. This gem allows you to interact with Pandora programmatically to manage stations, get playlists, search for music, and control playback.
 
-> **Note**: This is an unofficial API client. Use at your own risk and respect Pandora's terms of service.
+> ⚠️ **Note**: This is an unofficial API client. Use at your own risk and respect Pandora's terms of service.
 
 ---
 
@@ -260,4 +265,4 @@ This Ruby gem is a port of the excellent [pydora](https://github.com/mcrute/pydo
 
 ## Disclaimer
 
-This project is not affiliated with or endorsed by Pandora Media, Inc. Use of this library may violate Pandora's Terms of Service. Use at your own risk.
+> ⚠️ This project is not affiliated with or endorsed by Pandora Media, Inc. Use of this library may violate Pandora's Terms of Service. Use at your own risk.

data/lib/pandoru/models/station.rb

@@ -169,7 +169,8 @@ module Pandoru
 
       def add_seed(music_token)
         return false unless allow_add_music && @api_client
-        @api_client.add_music(token, music_token)
+        # add_music expects (music_token, station_token) — music token first.
+        @api_client.add_music(music_token, token)
         true
       end
     end

data/lib/pandoru/transport.rb

@@ -308,7 +308,12 @@ module Pandoru
       end
 
       def build_url(method, params = {})
-        protocol = REQUIRE_TLS.include?(method) ? "https" : "http"
+        # Pandora now requires TLS on every endpoint, so follow the transport's
+        # configured scheme uniformly. The old per-method REQUIRE_TLS downgrade
+        # built http://host:443 for non-listed methods (e.g. user.getStationList)
+        # — plaintext to the TLS port, which Pandora drops (EOF). Protocol and
+        # port must agree.
+        protocol = @api_tls ? "https" : "http"
         port = @api_tls ? 443 : 80
         # Only include port if it's non-standard
         port_string = (protocol == "https" && port == 443) || (protocol == "http" && port == 80) ? "" : ":#{port}"

data/lib/pandoru/version.rb

@@ -1,3 +1,3 @@
 module Pandoru
-  VERSION = "0.1.0"
+  VERSION = "0.1.1"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pandoru
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.1.1
 platform: ruby
 authors:
 - Dale Stevens
@@ -163,6 +163,34 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '6.0'
+- !ruby/object:Gem::Dependency
+  name: simplecov
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.22'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.22'
+- !ruby/object:Gem::Dependency
+  name: simplecov-lcov
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.8'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.8'
 description: A comprehensive Ruby client for the Pandora music streaming API, providing
   access to stations, playlists, search, and user management features.
 email:
@@ -199,7 +227,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '2.7'
+      version: '3.0'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="