spotify-profile-monitor 2.5.1__tar.gz → 2.5.3__tar.gz

{spotify_profile_monitor-2.5.1 → spotify_profile_monitor-2.5.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: spotify_profile_monitor
-Version: 2.5.1
+Version: 2.5.3
 Summary: Tool implementing real-time tracking of Spotify users activities and profile changes including playlists
 Author-email: Michal Szymanski <misiektoja-pypi@rm-rf.ninja>
 License-Expression: GPL-3.0-or-later
@@ -28,7 +28,7 @@ Dynamic: license-file
 
 # spotify_profile_monitor
 
-spotify_profile_monitor is an OSINT tool for real-time monitoring of Spotify users' activities and profile changes including playlists.
+OSINT tool for real-time monitoring of Spotify users' activities and profile changes including playlists.
 
 NOTE: If you want to track Spotify friends' music activity, check out another tool I developed: [spotify_monitor](https://github.com/misiektoja/spotify_monitor).
 
@@ -246,6 +246,8 @@ If you store the `SP_DC_COOKIE` in a dotenv file you can update its value and se
 
 This is the alternative method used to obtain a Spotify access token which simulates a login from the real Spotify desktop app using credentials intercepted from a real session.
 
+**NOTE**: Spotify appears to have changed something in client versions released after June 2025 (likely a switch to HTTP/3 and/or certificate pinning). You may need to use an older version of the Spotify desktop client for this method to work.
+
 - Run an intercepting proxy of your choice (like [Proxyman](https://proxyman.com)).
 
 - Launch the Spotify desktop client and look for POST requests to `https://login{n}.spotify.com/v3/login`

{spotify_profile_monitor-2.5.1 → spotify_profile_monitor-2.5.3}/README.md

@@ -1,6 +1,6 @@
 # spotify_profile_monitor
 
-spotify_profile_monitor is an OSINT tool for real-time monitoring of Spotify users' activities and profile changes including playlists.
+OSINT tool for real-time monitoring of Spotify users' activities and profile changes including playlists.
 
 NOTE: If you want to track Spotify friends' music activity, check out another tool I developed: [spotify_monitor](https://github.com/misiektoja/spotify_monitor).
 
@@ -218,6 +218,8 @@ If you store the `SP_DC_COOKIE` in a dotenv file you can update its value and se
 
 This is the alternative method used to obtain a Spotify access token which simulates a login from the real Spotify desktop app using credentials intercepted from a real session.
 
+**NOTE**: Spotify appears to have changed something in client versions released after June 2025 (likely a switch to HTTP/3 and/or certificate pinning). You may need to use an older version of the Spotify desktop client for this method to work.
+
 - Run an intercepting proxy of your choice (like [Proxyman](https://proxyman.com)).
 
 - Launch the Spotify desktop client and look for POST requests to `https://login{n}.spotify.com/v3/login`

{spotify_profile_monitor-2.5.1 → spotify_profile_monitor-2.5.3}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "spotify_profile_monitor"
-version = "2.5.1"
+version = "2.5.3"
 description = "Tool implementing real-time tracking of Spotify users activities and profile changes including playlists"
 readme = "README.md"
 license = "GPL-3.0-or-later"

{spotify_profile_monitor-2.5.1 → spotify_profile_monitor-2.5.3}/spotify_profile_monitor.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: spotify_profile_monitor
-Version: 2.5.1
+Version: 2.5.3
 Summary: Tool implementing real-time tracking of Spotify users activities and profile changes including playlists
 Author-email: Michal Szymanski <misiektoja-pypi@rm-rf.ninja>
 License-Expression: GPL-3.0-or-later
@@ -28,7 +28,7 @@ Dynamic: license-file
 
 # spotify_profile_monitor
 
-spotify_profile_monitor is an OSINT tool for real-time monitoring of Spotify users' activities and profile changes including playlists.
+OSINT tool for real-time monitoring of Spotify users' activities and profile changes including playlists.
 
 NOTE: If you want to track Spotify friends' music activity, check out another tool I developed: [spotify_monitor](https://github.com/misiektoja/spotify_monitor).
 
@@ -246,6 +246,8 @@ If you store the `SP_DC_COOKIE` in a dotenv file you can update its value and se
 
 This is the alternative method used to obtain a Spotify access token which simulates a login from the real Spotify desktop app using credentials intercepted from a real session.
 
+**NOTE**: Spotify appears to have changed something in client versions released after June 2025 (likely a switch to HTTP/3 and/or certificate pinning). You may need to use an older version of the Spotify desktop client for this method to work.
+
 - Run an intercepting proxy of your choice (like [Proxyman](https://proxyman.com)).
 
 - Launch the Spotify desktop client and look for POST requests to `https://login{n}.spotify.com/v3/login`

{spotify_profile_monitor-2.5.1 → spotify_profile_monitor-2.5.3}/spotify_profile_monitor.py

@@ -1,7 +1,7 @@
 #!/usr/bin/env python3
 """
 Author: Michal Szymanski <misiektoja-github@rm-rf.ninja>
-v2.5.1
+v2.5.3
 
 OSINT tool implementing real-time tracking of Spotify users activities and profile changes including playlists:
 https://github.com/misiektoja/spotify_profile_monitor/
@@ -18,7 +18,7 @@ python-dotenv (optional)
 spotipy (optional, needed when the token source is set to oauth_app)
 """
 
-VERSION = "2.5.1"
+VERSION = "2.5.3"
 
 # ---------------------------
 # CONFIGURATION SECTION START
@@ -1392,10 +1392,13 @@ def fetch_server_time(session: req.Session, ua: str) -> int:
 def generate_totp():
     import pyotp
 
-    secret_cipher_bytes = [
-        12, 56, 76, 33, 88, 44, 88, 33,
-        78, 78, 11, 66, 22, 22, 55, 69, 54,
-    ]
+    secret_cipher_dict = {
+        "8": [37, 84, 32, 76, 87, 90, 87, 47, 13, 75, 48, 54, 44, 28, 19, 21, 22],
+        "7": [59, 91, 66, 74, 30, 66, 74, 38, 46, 50, 72, 61, 44, 71, 86, 39, 89],
+        "6": [21, 24, 85, 46, 48, 35, 33, 8, 11, 63, 76, 12, 55, 77, 14, 7, 54],
+        "5": [12, 56, 76, 33, 88, 44, 88, 33, 78, 78, 11, 66, 22, 22, 55, 69, 54]
+    }
+    secret_cipher_bytes = secret_cipher_dict["8"]
 
     transformed = [e ^ ((t % 33) + 9) for t, e in enumerate(secret_cipher_bytes)]
     joined = "".join(str(num) for num in transformed)
@@ -1424,7 +1427,7 @@ def refresh_access_token_from_sp_dc(sp_dc: str) -> dict:
         "productType": "web-player",
         "totp": otp_value,
         "totpServer": otp_value,
-        "totpVer": 5,
+        "totpVer": 8,
         "sTime": server_time,
         "cTime": client_time,
         "buildDate": time.strftime("%Y-%m-%d", time.gmtime(server_time)),
@@ -3775,14 +3778,14 @@ def spotify_profile_monitor_uri(user_uri_id, csv_file_name, playlists_to_skip):
             SP_CACHED_ACCESS_TOKEN = None
 
         client_errs = ['access token', 'invalid client token', 'expired client token', 'refresh token has been revoked', 'refresh token has expired', 'refresh token is invalid', 'invalid grant during refresh']
-        cookie_errs = ['access token', 'unauthorized']
+        cookie_errs = ['access token', 'unauthorized', 'unsuccessful token request']
         oauth_app_errs = ['invalid_client', 'invalid_client_id', 'could not authenticate you', '401']
         oauth_user_errs = ['invalid_client', 'invalid_grant', 'invalid_scope', 'authorization_required', 'refresh token has been revoked', 'refresh token has expired']
 
         if TOKEN_SOURCE == 'client' and any(k in err for k in client_errs):
             print(f"* Error: client or refresh token may be invalid or expired!\n{str(e)}")
         elif TOKEN_SOURCE == 'cookie' and any(k in err for k in cookie_errs):
-            print(f"* Error: sp_dc may be invalid or expired!\n{str(e)}")
+            print(f"* Error: sp_dc may be invalid/expired or Spotify has broken sth again!\n{str(e)}")
         elif TOKEN_SOURCE == 'oauth_app' and any(k in err for k in oauth_app_errs):
             print(f"* Error: OAuth-app client_id/client_secret may be invalid or expired!\n{str(e)}")
         elif TOKEN_SOURCE == 'oauth_user' and any(k in err for k in oauth_user_errs):
@@ -4105,7 +4108,7 @@ def spotify_profile_monitor_uri(user_uri_id, csv_file_name, playlists_to_skip):
                 SP_CACHED_ACCESS_TOKEN = None
 
             client_errs = ['access token', 'invalid client token', 'expired client token', 'refresh token has been revoked', 'refresh token has expired', 'refresh token is invalid', 'invalid grant during refresh']
-            cookie_errs = ['access token', 'unauthorized']
+            cookie_errs = ['access token', 'unauthorized', 'unsuccessful token request']
             oauth_app_errs = ['invalid_client', 'invalid_client_id', 'could not authenticate you', '401']
             oauth_user_errs = ['invalid_client', 'invalid_grant', 'invalid_scope', 'authorization_required', 'refresh token has been revoked', 'refresh token has expired']
 
@@ -4120,11 +4123,11 @@ def spotify_profile_monitor_uri(user_uri_id, csv_file_name, playlists_to_skip):
                     email_sent = True
 
             elif TOKEN_SOURCE == 'cookie' and any(k in err for k in cookie_errs):
-                print(f"* Error: sp_dc may be invalid or expired!")
+                print(f"* Error: sp_dc may be invalid/expired or Spotify has broken sth again!")
                 if ERROR_NOTIFICATION and not email_sent:
-                    m_subject = f"spotify_profile_monitor: sp_dc may be invalid or expired! (uri: {user_uri_id})"
-                    m_body = f"sp_dc may be invalid or expired!\n{e}{get_cur_ts(nl_ch + nl_ch + 'Timestamp: ')}"
-                    m_body_html = f"<html><head></head><body>sp_dc may be invalid or expired!<br>{escape(str(e))}{get_cur_ts('<br><br>Timestamp: ')}</body></html>"
+                    m_subject = f"spotify_profile_monitor: sp_dc may be invalid/expired or Spotify has broken sth again! (uri: {user_uri_id})"
+                    m_body = f"sp_dc may be invalid/expired or Spotify has broken sth again!\n{e}{get_cur_ts(nl_ch + nl_ch + 'Timestamp: ')}"
+                    m_body_html = f"<html><head></head><body>sp_dc may be invalid/expired or Spotify has broken sth again!<br>{escape(str(e))}{get_cur_ts('<br><br>Timestamp: ')}</body></html>"
                     print(f"Sending email notification to {RECEIVER_EMAIL}")
                     send_email(m_subject, m_body, m_body_html, SMTP_SSL)
                     email_sent = True
@@ -5566,7 +5569,8 @@ def main():
     print(f"* Ignore listed playlists:\t{bool(PLAYLISTS_TO_SKIP_FILE)}" + (f" ({PLAYLISTS_TO_SKIP_FILE})" if PLAYLISTS_TO_SKIP_FILE else ""))
     print(f"* Display profile pics:\t\t{bool(imgcat_exe)}" + (f" (via {imgcat_exe})" if imgcat_exe else ""))
     print(f"* Output logging enabled:\t{not DISABLE_LOGGING}" + (f" ({FINAL_LOG_PATH})" if not DISABLE_LOGGING else ""))
-    print(f"* Spotify token cache file:\t{({'oauth_app': SP_APP_TOKENS_FILE, 'oauth_user': SP_USER_TOKENS_FILE}.get(TOKEN_SOURCE) or 'None (memory only)')}")
+    if TOKEN_SOURCE in ('oauth_user', 'oauth_app'):
+        print(f"* Spotify token cache file:\t{({'oauth_app': SP_APP_TOKENS_FILE, 'oauth_user': SP_USER_TOKENS_FILE}.get(TOKEN_SOURCE) or 'None (memory only)')}")
     print(f"* Configuration file:\t\t{cfg_path}")
     print(f"* Dotenv file:\t\t\t{env_path or 'None'}")
     print(f"* Local timezone:\t\t{LOCAL_TIMEZONE}\n")