3 people 968312aa39 Implement Spotify Connect ZeroConf DH blob encryption (#192) ...

Replace the simplified tokenType=accesstoken push with the full Spotify
Connect ZeroConf protocol: GET getInfo to fetch the speaker's 768-bit DH
public key, derive AES-128-CTR + HMAC-SHA1 keys from the shared secret,
and POST an encrypted LoginCredentials protobuf blob. Speakers that
receive a proper blob can self-refresh their Spotify session
independently, eliminating the need for periodic re-priming on token
expiry. Falls back to the raw token approach automatically when getInfo
fails, preserving compatibility with older firmware.

SHA1 is mandated by the Spotify Connect ZeroConf protocol spec for DH key derivation. This cannot be changed without breaking protocol compatibility.

Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-04-28 15:34:05 +02:00

..

client

Serialize all WebSocket writes (#179)

2026-04-21 21:57:19 +02:00

config

refactor: reorganize device directories to use true deviceId from /info endpoint

2026-02-24 21:45:40 +01:00

discovery

Make test less dependent on the environment

2026-03-29 19:14:48 +02:00

models

feat: add group CRUD endpoints (POST add, POST modify, DELETE delete) (#191)

2026-04-28 15:28:38 +02:00

service

Implement Spotify Connect ZeroConf DH blob encryption (#192)

2026-04-28 15:34:05 +02:00

testutils/spotify

Cleanup Spotify tests

2026-04-06 15:22:06 +02:00