Spotify Tokener banner

Spotify Tokener

Created by: Cyclone Addons
1 devlogs
3h 42m 38s

This Node.js server illustrates how anonymous Spotify Web Player tokens can be obtained by replicating Spotify’s internal token generation process.

This project uses AI

Used Chatgpt for debugging

Demo Repository

README

Loading README...
Cyclone Addons
Cyclone Addons shipped Spotify Tokener
about 10 hours ago

Shipped this project!

I built a Spotify token generator that reverse-engineers the Web Player’s TOTP-based authentication to create anonymous access tokens, complete with automated hourly secret updates via GitHub Actions. I learned how to implement TOTP algorithms from scratch, reverse-engineer obfuscated JavaScript bundles, and build resilient systems with multiple fallback mechanisms.

Cyclone Addons
Cyclone Addons worked on Spotify Tokener
about 10 hours ago
3h 42m logged
Web scraping functionality that:
    Fetches Spotify's web player homepage
    Extracts the web-player JavaScript bundle URL
    Parses the bundle to find embedded secrets
    Uses regex pattern matching to extract version and secret pairs
Secret transformation functions to convert secrets into different formats (bytes, dictionary)

OTP generation algorithm that:

Transforms secret arrays using XOR operations
Implements Base32 encoding
Uses HMAC-SHA1 for token generation

API endpoint (/api/getToken) that fetches Spotify tokens
Server timestamp fetching from Spotify’s API
Robust fallback system for secret retrieval

Attachment
0