Spoticord will be offline for the foreseeable future
Spoticord is currently broken because songbird, a library we depend on, is not compatible with Discord's E2EE requirement for voice channels. While a PR is already in the works to fix this limitation, I will very likely keep Spoticord offline for longer.
Spoticord has long been plagued with a multitude of issues when it comes to connecting to and authenticating with Spotify servers.
For one, a majority of people (if not literally everyone) using the bot would have their account password reset after a few days since first using it. This is very likely caused by the fact that thousands of users are logging in to Spotify from the same IP address (the one that Spoticord is hosted on). This is likely not an issue when self hosting due to the lower amount of logins happening.
The second issue has started popping up right after the Anna's Archive scrape. Spotify seems to be cracking down on accounts using their old keymaster API to retrieve keys to decrypt the audio. Many users with newer accounts have noticed this by the bot not being able to play anything. This is the issue that in my opinion will require us to move away from librespot.
So what are we moving to? Well, we could move to the Spotify Web Playback SDK. While there is no official Rust library for this yet (so a lot of reverse engineering, aka time, is required), it is a fair contender for librespot, as we can use it to both create a Spotify connect device and gain access to audio files. To decrypt these audio files, we can just use Google's Widevine CDM library to decrypt them. I have already tested this in a small demo on my local Linux machine, and it worked fine. Windows support is questionable though, as the CDM library produces challenges that the Spotify license servers seem to be rejecting. This is only a problem for hosting on Windows machines though (which I wasn't planning on doing), this does not mean you can't use Spoticord on a Windows device (wouldn't make sense if that's how that worked anyway).
Spoticord will be offline for the foreseeable future
Spoticord is currently broken because songbird, a library we depend on, is not compatible with Discord's E2EE requirement for voice channels. While a PR is already in the works to fix this limitation, I will very likely keep Spoticord offline for longer.
Spoticord has long been plagued with a multitude of issues when it comes to connecting to and authenticating with Spotify servers.
For one, a majority of people (if not literally everyone) using the bot would have their account password reset after a few days since first using it. This is very likely caused by the fact that thousands of users are logging in to Spotify from the same IP address (the one that Spoticord is hosted on). This is likely not an issue when self hosting due to the lower amount of logins happening.
The second issue has started popping up right after the Anna's Archive scrape. Spotify seems to be cracking down on accounts using their old keymaster API to retrieve keys to decrypt the audio. Many users with newer accounts have noticed this by the bot not being able to play anything. This is the issue that in my opinion will require us to move away from librespot.
So what are we moving to? Well, we could move to the Spotify Web Playback SDK. While there is no official Rust library for this yet (so a lot of reverse engineering, aka time, is required), it is a fair contender for librespot, as we can use it to both create a Spotify connect device and gain access to audio files. To decrypt these audio files, we can just use Google's Widevine CDM library to decrypt them. I have already tested this in a small demo on my local Linux machine, and it worked fine. Windows support is questionable though, as the CDM library produces challenges that the Spotify license servers seem to be rejecting. This is only a problem for hosting on Windows machines though (which I wasn't planning on doing), this does not mean you can't use Spoticord on a Windows device (wouldn't make sense if that's how that worked anyway).