Spotty-Plugin icon indicating copy to clipboard operation
Spotty-Plugin copied to clipboard

Login failure when password contains dollar sign $

Open dkathmann opened this issue 2 years ago • 9 comments

I just had the issue that I couldn't login with the plugin using my account but the account of my partner worked. We could narrow it down to the password length. My password that didn't work initially was quite long and a shorter one worked instantly.

dkathmann avatar Feb 04 '23 16:02 dkathmann

How long was "quite long"? Could it be the password input field isn't long enough?

michaelherger avatar Feb 04 '23 16:02 michaelherger

The password was 43 characters long. The input field doesn't seem to cut it. Also the http request seems to include the whole password.

dkathmann avatar Feb 04 '23 17:02 dkathmann

Well, the maximum size of that input field is set to 40... it's a LMS default for these kinds of input fields.

michaelherger avatar Feb 04 '23 22:02 michaelherger

As far as I know the size attribute just determines the width of the input field and doesn't restrict the password itself.

dkathmann avatar Feb 04 '23 23:02 dkathmann

You're right, of course. Still odd.

What http request are you referring to? The auth call wouldn't use http, but some Spotify specific interaction. Could it have been a special character in your password?

michaelherger avatar Feb 04 '23 23:02 michaelherger

Sorry, I meant the POST request to http://<MY_SERVER>:9000/plugins/Spotty/settings/authentication.html?playerid=<MY_PLAYER_ID>; the request payloads includes the password in plain text (I've only checked this superficially).

The only special characters in the password were $ and ! . The new one that worked doesn't have the $ in it anymore.

dkathmann avatar Feb 04 '23 23:02 dkathmann

Could you check with another dollar sign in the shorter PW? Would that be the issue? What platform are you running LMS on? I have a vague memory of having dealt with a $ sign related issue before.

michaelherger avatar Feb 06 '23 07:02 michaelherger

I just added one $ to the short password, removed the account from Spotty and tried to add it again which doesn't work. I also tried adding it with a longer password again (without the $) which works.

I'm running LMS in a Docker container on a Raspberry Pi 4 with Raspberry Pi OS.

dkathmann avatar Feb 06 '23 13:02 dkathmann

Thanks for the confirmation!

michaelherger avatar Feb 06 '23 16:02 michaelherger