Skip to content

Commit bd350c5

Browse files
committed
Remove non-working Facebook authentication
1 parent 2541f12 commit bd350c5

1 file changed

Lines changed: 1 addition & 17 deletions

File tree

docs/authentication.md

Lines changed: 1 addition & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -57,20 +57,4 @@ login_data = AES192-DECRYPT(key, data)
5757
```
5858

5959
## Facebook based Authentication
60-
The client starts an HTTPS server, and makes the user visit
61-
`https://login.spotify.com/login-facebook-sso/?csrf=CSRF&port=PORT`
62-
in their browser, where CSRF is a random token, and PORT is the HTTPS server's port.
63-
64-
This will redirect to Facebook, where the user must login and authorize Spotify, and
65-
finally make a GET request to
66-
`https://login.spotilocal.com:PORT/login/facebook_login_sso.json?csrf=CSRF&access_token=TOKEN`,
67-
where PORT and CSRF are the same as sent earlier, and TOKEN is the facebook authentication token.
68-
69-
Since `login.spotilocal.com` resolves the 127.0.0.1, the request is received by the client.
70-
71-
The client must then contact Facebook's API at
72-
`https://graph.facebook.com/me?fields=id&access_token=TOKEN`
73-
in order to retrieve the user's Facebook ID.
74-
75-
The Facebook ID is the `username`, the TOKEN the `auth_data`, and `auth_type` is set to `AUTHENTICATION_FACEBOOK_TOKEN`.
76-
60+
Facebook authentication is currently broken due to Spotify changing the authentication flow. The details of how the new flow works are detailed in https://github.com/librespot-org/librespot/issues/244 and will be implemented at some point in the future.

0 commit comments

Comments
 (0)