[GH-ISSUE #115] spotify web app reveals way to littarly download at least the first few secconds of a song (not realy an issue) #104

Open
opened 2026-02-27 15:48:17 +03:00 by kerem · 3 comments
Owner

Originally created by @Timtta on GitHub (Sep 13, 2024).
Original GitHub issue: https://github.com/Rafiuth/Soggfy/issues/115

evidence https://www.mediafire.com/file/b8gaizh9ldl7d60/95c32d180a4e135b14624624eb86fd28c0af7c8c/file

i can find a string when i opened a debug menu in the spotify web player and saw every time i plaid a song a string like this comming through the interesting part is that when you download it and rename it to a m4a ,mp3,ogg whatever you name it you can play it and also converter it with ffmpeg now only a way to get the next amount of secconds and you chould littarly download the songs from the webplayer

Originally created by @Timtta on GitHub (Sep 13, 2024). Original GitHub issue: https://github.com/Rafiuth/Soggfy/issues/115 <img width="533" alt="evidence" src="https://github.com/user-attachments/assets/43dff581-f1c5-4c09-b080-d5a261540f4e"> https://www.mediafire.com/file/b8gaizh9ldl7d60/95c32d180a4e135b14624624eb86fd28c0af7c8c/file i can find a string when i opened a debug menu in the spotify web player and saw every time i plaid a song a string like this comming through the interesting part is that when you download it and rename it to a m4a ,mp3,ogg whatever you name it you can play it and also converter it with ffmpeg now only a way to get the next amount of secconds and you chould littarly download the songs from the webplayer
Author
Owner

@Rafiuth commented on GitHub (Sep 14, 2024):

Fwiw, I had done some tinkering with the web app some years ago. They use AAC and Widevine for encryption, but the quality is noticeably worse than the OGGs used in the full app so there is no point in breaking it.

The first 10 seconds of every song are unencrypted to give time for the widevine module to load the license and do the handshake with the server, I think, the rest is DRMed.

<!-- gh-comment-id:2350721640 --> @Rafiuth commented on GitHub (Sep 14, 2024): Fwiw, I had done some tinkering with the web app some years ago. They use AAC and Widevine for encryption, but the quality is noticeably worse than the OGGs used in the full app so there is no point in breaking it. The first 10 seconds of every song are unencrypted to give time for the widevine module to load the license and do the handshake with the server, I think, the rest is DRMed.
Author
Owner

@Timtta commented on GitHub (Sep 14, 2024):

ok got it but still wy does it load the first segments of the song even when the web page startes playing at a time stamp farder then the first few secconds of the song itself?

<!-- gh-comment-id:2350959808 --> @Timtta commented on GitHub (Sep 14, 2024): ok got it but still wy does it load the first segments of the song even when the web page startes playing at a time stamp farder then the first few secconds of the song itself?
Author
Owner

@Timtta commented on GitHub (Sep 14, 2024):

but still thanks for the info

<!-- gh-comment-id:2350962237 --> @Timtta commented on GitHub (Sep 14, 2024): but still thanks for the info
Sign in to join this conversation.
No labels
pull-request
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/Soggfy#104
No description provided.