Open
Conversation
- Tested POST vs GET for /user/login - both fail with 401 - Tested signature-based auth - still fails - qobuz-api-rust also can't login with email/password - Token-based auth may be the only working method now
- Tested GET/POST, device_manufacturer_id, password formats - all fail - Discovered new signature mechanism in web player bundle.js - Email/password login appears to be completely broken - Need to reverse-engineer new auth or use token-based login
- Add auth_with_token() method to qopy.Client - Add initialize_client_with_token() to QobuzDL core - Update CLI to read user_id and user_auth_token from config - Update _reset_config to support token-based setup - Add instructions in QOBUZ_AUTH_ISSUE_REPORT.md
Token auth works for login but download signatures need updating. Changes: - Add skip_auth parameter to qopy.Client.__init__ - Add auth_with_token() method for user_id + user_auth_token login - Update initialize_client_with_token() in core.py - CLI now reads user_id and user_auth_token from config Status: - Login: WORKS (verified with Paul's account) - Downloads: FAILS (signature algorithm changed by Qobuz) See QOBUZ_AUTH_ISSUE_REPORT.md for full details.
- Extract private_key from Qobuz bundle for OAuth flow - Add login_with_oauth_code() method to Client - Add oauth subcommand with local server to capture auth code - Automatically parse code from redirect URL - Store private_key in config file
juandmi
added a commit
to juandmi/qobuz-dl
that referenced
this pull request
Apr 5, 2026
The OAuth flow from PR vitiko98#331 works but doesn't persist the token. Subsequent dl/fun/lucky commands still read old email/password and fail. Changes: - initialize_client_with_oauth() now returns usr_info - handle_oauth_login() returns user_id + user_auth_token - cli.py oauth block saves token to config.ini and clears email/password
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Changes
qobuz_dl/bundle.py: Add get_private_key() methodqobuz_dl/qopy.py: Add login_with_oauth_code() methodqobuz_dl/cli.py: Handle OAuth command and store private_key in configqobuz_dl/commands.py: Add oauth subcommandqobuz_dl/core.py: Add handle_oauth_login() and initialize_client_with_oauth()Usage
qobuz-dl oauth # Opens browser for login, captures code automaticallyFixes #330 , could fix #329